Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File:                     YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier:          rqn7XlMn4rea2U2d1ra2m+Os69Oggti0MEqwkejMPxA=
Subject key identifier:   57:75:8C:73:00:38:4A:F0:77:A0:2E:99:63:D7:3B:33:BA:1F:D3:EB
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer:       /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial:       019CE4B5FDAF369A169FFA23738F6A2C8AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 01:00:58 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:58 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:58 +0000
Files and hashes:         1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
                          2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: 8tTicn8//qV/4W9aKYqLYwCU/smPj/Fl4IfUJWyPwUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:fd:af:36:9a:16:9f:fa:23:73:8f:6a:2c:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
        Validity
            Not Before: Mar 13 01:00:58 2026 GMT
            Not After : Mar 14 01:00:58 2026 GMT
        Subject: CN=57758c7300384af077a02e9963d73b33ba1fd3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:38:fd:ad:7d:5c:56:60:bd:0e:f6:0e:13:
                    4a:1e:d0:3d:5d:17:28:35:c2:17:11:86:7a:4b:39:
                    cc:89:8d:09:51:5f:74:ee:e0:f4:43:58:65:cf:6b:
                    60:8c:cd:6a:fd:84:23:93:93:d2:42:d7:e7:50:ff:
                    f6:f7:0c:b6:7b:e7:90:c7:9d:69:db:db:22:54:9c:
                    82:6c:54:5b:ac:41:be:1b:6d:64:d2:6a:df:aa:e0:
                    16:bc:00:96:09:23:00:44:e5:29:a0:79:e5:16:22:
                    91:36:88:d9:b5:06:48:ac:02:d0:67:f5:50:94:29:
                    6e:06:d6:be:67:b2:a4:76:05:33:5e:61:54:45:16:
                    0c:04:84:f4:a3:40:9e:26:c2:22:49:4b:ad:b6:50:
                    9f:d2:cb:15:e4:12:79:46:46:15:9b:af:8c:3a:16:
                    1b:dc:8a:29:33:a2:75:30:f7:a5:ce:12:ae:6e:60:
                    1c:fd:75:f6:4d:5e:07:83:6d:47:65:9a:75:9c:e6:
                    27:44:99:b2:57:54:69:ba:ea:ec:4b:e0:8a:5c:62:
                    e1:b1:60:d4:e0:fe:bd:63:de:29:44:21:03:9a:b1:
                    9a:98:24:e6:fc:bd:80:08:d7:fd:b3:59:a2:d1:df:
                    69:8c:26:ee:41:db:02:f2:ae:80:a0:34:5f:bc:0b:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:75:8C:73:00:38:4A:F0:77:A0:2E:99:63:D7:3B:33:BA:1F:D3:EB
            X509v3 Authority Key Identifier:
                keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:25:6b:fc:02:07:f0:c4:f9:0c:da:c1:a5:8b:f8:55:84:
         5e:ba:5c:63:cb:3c:13:c0:76:33:10:f3:f3:30:6d:60:02:5e:
         d9:d0:e3:d0:8e:59:f8:e2:d6:af:aa:54:52:35:43:1d:3b:8c:
         bf:83:68:70:80:04:08:91:6e:b2:f4:57:4a:6e:54:87:e0:87:
         8f:2e:dc:27:3c:4b:70:de:c7:d4:8b:93:5a:03:b8:d7:c8:c7:
         ac:aa:0f:9b:56:00:25:19:8b:2a:4c:9a:ac:8f:a1:68:f8:ec:
         17:91:09:76:fe:f5:80:7b:80:01:e2:9f:91:38:0c:73:c0:60:
         3f:6d:99:d2:11:f7:88:e4:ef:91:c0:6d:64:d1:fc:ff:98:44:
         b6:2a:20:8b:4b:53:b1:70:0d:f6:cb:c6:73:0b:0c:8b:a5:6a:
         33:4b:b0:55:0c:a2:bb:6c:03:b0:22:e4:ff:20:3d:1f:78:26:
         ea:fb:a6:51:7c:a1:5e:f0:be:00:36:7c:a8:0b:b8:16:1a:ad:
         74:d4:0c:0c:26:bf:3d:b6:9a:43:cb:98:60:ba:7f:f6:55:c3:
         d7:85:17:01:8d:b4:9f:2f:fc:1f:4d:53:20:06:74:d1:35:5b:
         03:90:ae:39:ed:f2:a1:ca:8d:47:4d:28:54:65:1b:9c:fd:ef:
         cd:64:8f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktf2vNpoWn/ojc49qLIqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjYwMzEzMDEwMDU4WhcNMjYwMzE0MDEwMDU4WjAzMTEwLwYDVQQD
Eyg1Nzc1OGM3MzAwMzg0YWYwNzdhMDJlOTk2M2Q3M2IzM2JhMWZkM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XI4/a19XFZgvQ72DhNKHtA9XRco
NcIXEYZ6SznMiY0JUV907uD0Q1hlz2tgjM1q/YQjk5PSQtfnUP/29wy2e+eQx51p
29siVJyCbFRbrEG+G21k0mrfquAWvACWCSMAROUpoHnlFiKRNojZtQZIrALQZ/VQ
lCluBta+Z7KkdgUzXmFURRYMBIT0o0CeJsIiSUuttlCf0ssV5BJ5RkYVm6+MOhYb
3IopM6J1MPelzhKubmAc/XX2TV4Hg21HZZp1nOYnRJmyV1RpuursS+CKXGLhsWDU
4P69Y94pRCEDmrGamCTm/L2ACNf9s1mi0d9pjCbuQdsC8q6AoDRfvAvRZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd1jHMAOErwd6AumWPXOzO6H9PrMB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzQ0la/wC
B/DE+QzawaWL+FWEXrpcY8s8E8B2MxDz8zBtYAJe2dDj0I5Z+OLWr6pUUjVDHTuM
v4NocIAECJFusvRXSm5Uh+CHjy7cJzxLcN7H1IuTWgO418jHrKoPm1YAJRmLKkya
rI+haPjsF5EJdv71gHuAAeKfkTgMc8BgP22Z0hH3iOTvkcBtZNH8/5hEtiogi0tT
sXAN9svGcwsMi6VqM0uwVQyiu2wDsCLk/yA9H3gm6vumUXyhXvC+ADZ8qAu4Fhqt
dNQMDCa/PbaaQ8uYYLp/9lXD14UXAY20ny/8H01TIAZ00TVbA5CuOe3yocqNR00o
VGUbnP3vzWSP9g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:05:22 2026 by rpki-client