Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File:                     yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier:          o6/B6MxBrN4JxqTUQvFghayfj9nun1O0D18Mv2zbTjU=
Subject key identifier:   DF:E2:FB:CD:DF:77:E9:F9:13:29:9F:1D:C7:99:94:26:D3:ED:A3:89
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer:       /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial:       019D382E79EE86768BE001DFC2F20F9A41BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number:          05E0
Signing time:             Sun 29 Mar 2026 06:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:03 +0000
Files and hashes:         1: NmILLaZO13ylxBiJtXCUuUjLxwc.roa (hash: ouwe61Qw3KErUT8wYroof+WiBVltIWBJpKDg8a/XyWg=)
                          2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: RUqGwoBNPOFzPks9UOeVpQvgMUM7MONqVvUkH+eJAOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:79:ee:86:76:8b:e0:01:df:c2:f2:0f:9a:41:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
        Validity
            Not Before: Mar 29 06:01:03 2026 GMT
            Not After : Mar 30 06:01:03 2026 GMT
        Subject: CN=dfe2fbcddf77e9f913299f1dc7999426d3eda389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:25:50:4c:4f:fe:10:62:79:3e:5f:1c:f8:
                    aa:60:d7:d6:9b:3e:9f:b3:bd:b0:78:17:dd:64:7c:
                    d7:ab:f1:4d:10:1f:84:12:84:6a:72:09:2b:a1:43:
                    90:5c:94:a6:32:e4:4c:05:78:2d:76:a9:4c:0a:93:
                    ee:a1:a5:a4:6b:21:cd:e1:98:31:68:37:e4:e1:4a:
                    9d:f0:95:fa:d8:c0:f2:da:4e:1f:e0:41:11:12:67:
                    39:ca:c1:ac:87:4f:26:a6:6b:09:c2:33:09:49:d9:
                    3d:fc:f1:47:e6:6c:70:e2:3a:f8:e7:5a:d3:a7:16:
                    a9:23:7d:e9:7f:89:eb:ea:d8:7b:25:0a:56:31:dd:
                    78:b1:ef:84:2a:2f:01:f1:a7:90:85:96:30:5b:2c:
                    84:3a:46:d9:de:ab:d6:32:70:6c:26:c6:7f:58:d2:
                    77:d7:44:90:42:32:a7:6a:f2:cf:a6:86:db:ed:4f:
                    e7:8a:4b:a7:38:fa:c9:1b:bf:c2:bd:d8:0c:90:0e:
                    46:03:b0:48:3f:aa:7c:95:fc:4b:58:6b:41:5d:8b:
                    c5:0e:24:33:18:f0:e7:f2:12:6a:93:e5:8f:02:75:
                    b5:e7:c5:ad:51:a0:5a:34:73:4f:0d:cc:83:a0:ab:
                    a8:9f:a8:39:ad:df:1d:b8:c4:42:4b:02:a8:cf:06:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E2:FB:CD:DF:77:E9:F9:13:29:9F:1D:C7:99:94:26:D3:ED:A3:89
            X509v3 Authority Key Identifier:
                keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4a:fc:50:84:c1:c8:57:80:9b:95:b8:cb:32:1f:dd:ea:f7:
         23:a7:7d:10:34:71:e0:22:ac:d8:88:39:41:88:d4:c5:ca:8f:
         ac:ae:1e:cd:62:08:a8:0d:6b:a1:6d:3e:67:71:1d:90:ad:9c:
         67:11:41:f3:73:e1:d8:ce:78:a3:7d:47:63:e0:ba:69:0e:aa:
         30:8b:8b:89:3c:a9:b2:08:83:5d:c2:8f:5d:0b:31:a5:59:c0:
         ee:1a:90:49:38:ff:f1:ee:35:4f:7f:13:39:d5:30:e4:d6:6b:
         f5:11:a4:66:46:68:f9:4f:88:a5:5c:fd:cb:44:2a:da:f1:93:
         72:5f:4a:06:84:c2:10:77:01:32:71:2f:df:ab:f9:af:fe:21:
         ba:69:9a:ee:23:4e:e2:55:41:c3:fb:58:03:7c:df:f5:09:5d:
         cd:fe:8b:7c:a3:13:6d:01:e4:40:0c:46:c6:74:de:dd:a0:31:
         79:86:9f:b9:07:d3:0c:b6:ee:90:e8:14:19:df:8d:f9:02:31:
         55:a8:d4:b9:19:ad:76:a3:6c:01:18:d4:d3:fb:ca:87:d4:86:
         d1:e2:41:82:08:25:87:a6:92:91:f8:3b:ff:37:54:f0:32:1c:
         16:d5:9e:13:41:5c:9f:cd:1a:07:64:26:a5:f6:d8:4c:61:64:
         f7:9b:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:09 2026 by rpki-client