Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          N4Zm+7AUyzJADf1bkAuZ5fcO5OKyINHI8+LBsMrSjic=
Subject key identifier:   12:FC:02:C8:A5:1C:68:3D:B3:4E:FD:90:53:ED:E2:B5:9D:5F:0F:C4
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019D09D53C40E373289E631311126334E975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          0860
Signing time:             Fri 20 Mar 2026 06:01:02 +0000
Manifest this update:     Fri 20 Mar 2026 06:01:02 +0000
Manifest next update:     Sat 21 Mar 2026 06:01:02 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: LGT1n0Cym8jaNL58NEBSTrluoj4YRojJBXTsBNJf6Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:09:d5:3c:40:e3:73:28:9e:63:13:11:12:63:34:e9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Mar 20 06:01:02 2026 GMT
            Not After : Mar 21 06:01:02 2026 GMT
        Subject: CN=12fc02c8a51c683db34efd9053ede2b59d5f0fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:ec:9c:ba:49:c3:68:97:62:77:99:39:9a:
                    44:e2:b5:de:3c:1a:3e:9b:e8:69:91:7f:f3:9c:da:
                    38:eb:4f:c4:0a:96:12:96:28:69:e1:f0:ce:f6:a1:
                    64:49:c0:64:5c:75:37:b0:aa:8b:50:66:c4:54:0a:
                    cf:21:cf:df:ec:ef:9c:36:54:b5:d1:08:40:03:91:
                    ca:4b:3e:e0:35:f2:f7:6a:d2:1f:80:58:23:c9:fb:
                    9d:40:ac:2d:46:28:ef:56:96:ea:60:5c:3e:24:26:
                    02:77:d7:c0:15:d1:ff:ab:e8:54:90:40:fa:35:37:
                    fd:45:25:ac:03:46:89:43:fb:a4:a8:5f:51:db:e5:
                    e5:3a:c7:1d:05:b8:37:fb:e1:5b:14:0b:41:29:a3:
                    c2:c3:81:19:06:0e:9d:32:bc:42:0c:9f:25:b4:05:
                    a0:2f:84:24:14:19:6c:7a:0c:73:3c:ce:0a:85:d1:
                    43:2d:e0:1b:85:cc:7a:aa:54:42:d2:8a:6b:d6:2f:
                    fc:70:ad:f9:0d:4e:f8:79:07:f2:ad:f5:92:85:e1:
                    01:ab:95:13:02:28:0b:f0:a1:8a:94:04:53:2d:86:
                    47:a2:58:2f:aa:5c:3f:85:1d:c0:5d:56:7f:30:4c:
                    23:c1:83:1b:c6:7e:57:cc:29:20:ef:ca:82:96:c8:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:02:C8:A5:1C:68:3D:B3:4E:FD:90:53:ED:E2:B5:9D:5F:0F:C4
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:54:d6:77:c5:f0:1e:18:fa:00:5c:0e:f6:8f:1c:d0:b0:
         12:ea:39:9e:be:a0:8d:2d:15:29:58:6a:2e:d9:f0:4b:c2:97:
         1e:f6:5e:04:2a:69:09:9a:9c:84:e8:ff:71:5d:02:3f:c8:5e:
         9a:72:d8:9c:dc:a8:3f:8c:55:38:55:4d:90:1b:fd:c7:8e:2d:
         d2:eb:70:78:48:33:ed:91:3d:75:d6:ef:8f:db:93:48:e3:bf:
         87:90:86:11:11:45:99:58:1f:69:2a:1d:ba:42:2b:07:9c:bd:
         30:7d:fc:f5:0f:48:6e:68:78:85:2c:da:4c:d6:db:58:10:e9:
         d7:b6:a2:3e:22:ec:fd:e3:ec:4c:a9:fc:9c:e9:be:4b:4c:b0:
         e4:23:be:32:cf:99:4d:2f:78:b8:73:37:61:32:06:77:62:51:
         a6:de:82:e9:3b:9e:6e:69:05:92:a5:06:57:6e:37:fe:66:e9:
         43:72:37:19:81:48:21:02:11:83:15:c4:4e:36:4b:a8:c4:21:
         16:44:60:2a:47:7d:c9:d8:95:aa:fd:5e:26:47:26:24:8b:38:
         e9:41:7e:3d:50:15:08:7f:55:92:34:c9:37:32:fe:4c:30:ec:
         16:92:99:5d:fe:15:fc:89:a1:2c:6e:6a:9a:bb:02:2a:7d:c1:
         3d:6f:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 08:42:12 2026 by rpki-client