Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File:                     Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier:          zVMJyL/fbRE6Tgwbg29ODvMbiwV9/lXMQfQgYNObX+c=
Subject key identifier:   ED:A3:15:85:2C:CF:B1:A0:79:E3:11:1C:97:07:6B:25:69:07:93:18
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer:       /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial:       019D382E9034F7DF7CDBB736F366388AFA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number:          0E72
Signing time:             Sun 29 Mar 2026 06:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:08 +0000
Files and hashes:         1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: YE7/vFe97sgjq7n190p4PzC3ATBmTL9zdTGDe4dqg/A=)
                          2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:90:34:f7:df:7c:db:b7:36:f3:66:38:8a:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
        Validity
            Not Before: Mar 29 06:01:08 2026 GMT
            Not After : Mar 30 06:01:08 2026 GMT
        Subject: CN=eda315852ccfb1a079e3111c97076b2569079318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:d9:c1:50:42:71:d4:07:a2:82:62:65:b9:
                    84:a0:d7:78:64:37:f1:b9:09:a6:c7:74:25:d5:cd:
                    56:28:c7:89:0a:82:30:4e:cd:ed:ac:99:50:08:a5:
                    ec:e6:8e:6f:00:25:a4:e8:16:e0:e5:4d:4b:e7:4b:
                    be:93:92:1f:ff:75:0d:fa:af:30:08:2d:69:c3:9e:
                    54:45:cf:0d:a2:d6:85:f6:3b:57:a6:f1:28:9a:45:
                    c4:0a:75:b1:6d:71:1d:bb:b0:72:65:f7:16:bc:ba:
                    76:4a:4b:ca:ec:3d:d3:b6:08:71:00:2b:8c:dd:1a:
                    30:f4:c1:13:0e:ad:19:53:eb:3e:ef:cd:99:f4:cf:
                    93:56:ce:80:ad:75:9a:b4:eb:f6:31:22:95:70:88:
                    3b:28:18:32:e7:10:8c:72:f9:13:dc:4b:44:95:44:
                    27:8b:cb:62:cb:cc:65:37:8b:f4:01:5e:5a:9a:88:
                    e7:77:ec:7b:8a:03:f7:7a:f7:5a:9d:75:a2:af:7c:
                    bb:97:74:4f:00:38:7c:da:14:32:6e:4d:7f:ef:4b:
                    d6:fb:4b:4a:5f:e8:da:0b:c3:da:bb:41:72:41:0b:
                    27:60:b5:73:0f:f5:8e:80:43:74:c5:e0:74:54:71:
                    6f:4d:ea:03:99:45:98:11:45:ed:5f:5e:85:56:86:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A3:15:85:2C:CF:B1:A0:79:E3:11:1C:97:07:6B:25:69:07:93:18
            X509v3 Authority Key Identifier:
                keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:35:56:bb:23:41:f2:2a:77:b4:89:06:4b:86:14:66:a4:
         fa:ae:69:a2:30:cb:99:66:d6:91:f9:1e:99:86:ac:eb:ac:e4:
         cb:84:46:6d:39:df:ba:01:2f:5b:5c:a6:d6:ec:92:6d:1b:dc:
         d6:36:7f:54:3c:c2:45:c1:45:79:3f:c2:d0:d1:d0:ca:59:4f:
         42:76:88:6a:56:96:3d:77:c1:d2:b3:e3:18:d5:8e:38:62:a3:
         49:59:a8:3b:e3:d9:4a:19:d9:18:63:f3:cd:e0:97:55:41:79:
         01:7c:80:f1:ba:f0:5e:18:c6:07:a0:c6:5f:8f:c2:5e:5d:0c:
         6f:ce:8a:51:1b:ba:4c:55:29:2a:21:8b:33:9a:a6:21:08:5c:
         74:fd:e8:1e:b0:71:ff:8a:ad:d7:de:bb:fe:c6:fe:ea:49:e1:
         db:dd:76:bf:10:9a:94:ab:55:b4:14:1f:cb:fa:a3:91:23:1e:
         e2:ec:d9:c3:08:02:d7:c9:a3:47:62:a7:10:22:c0:27:fe:4a:
         d7:8a:8b:6e:51:a4:63:c4:77:c2:16:cf:2b:2b:10:4f:1a:50:
         3e:f9:95:01:41:f4:c2:25:58:94:f5:9c:5a:65:95:de:c3:76:
         57:13:bb:fb:97:df:b9:41:53:a9:08:4e:fd:d2:a9:0c:bc:bb:
         21:8d:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client