Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          lEnh4VGyuRfLek5fobv0mNAoS5T5Rh5qF51/jDqqdPk=
Subject key identifier:   F1:B5:D7:90:2D:87:21:36:C3:AA:58:AD:E9:63:11:63:85:85:22:3B
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019CE4EC9A8F6F029D51EA8F0DDE8BAE1F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          186D
Signing time:             Fri 13 Mar 2026 02:00:37 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:37 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:37 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: dIEfnbyzgVmZ5Azy+rsT0OBvwmSdPQ35lV3wplCq22o=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:9a:8f:6f:02:9d:51:ea:8f:0d:de:8b:ae:1f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Mar 13 02:00:37 2026 GMT
            Not After : Mar 14 02:00:37 2026 GMT
        Subject: CN=f1b5d7902d872136c3aa58ade96311638585223b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:b9:ce:65:a5:4f:f0:fb:87:44:87:d8:e2:
                    5e:5c:59:f3:37:5f:4d:58:1c:02:9c:e4:57:be:da:
                    22:72:84:fb:cf:83:ef:a2:65:6c:fa:42:1b:d4:79:
                    b0:38:02:92:2f:2d:83:51:59:3d:a9:9c:94:ba:79:
                    92:10:c7:bb:1b:ff:7f:84:cc:2d:13:bb:46:de:d2:
                    c3:34:aa:21:54:6a:d7:05:6d:6b:5b:a6:c4:0f:16:
                    05:03:17:18:03:62:63:11:99:ed:3e:bd:11:e0:b7:
                    73:41:f5:95:6b:0a:9a:8f:04:96:47:98:1c:f3:85:
                    65:f9:56:30:c2:ba:3e:8b:99:a1:dc:42:a1:fe:43:
                    64:34:94:95:ef:fc:52:ea:d3:bb:81:58:13:1c:ab:
                    6f:59:ef:e6:f9:fb:80:47:e2:3e:7c:f7:00:8b:fc:
                    b3:79:75:2d:40:51:2e:b3:2d:42:37:c6:36:23:e9:
                    7a:3c:e0:0a:b9:7b:f4:6b:5d:a3:fa:ed:40:dd:57:
                    f5:fa:9f:1e:63:86:49:d6:98:04:96:61:54:17:3e:
                    71:79:53:ac:e2:60:1b:26:4d:2d:ea:6c:8e:bc:60:
                    76:62:68:83:40:47:ba:ed:17:5e:a8:2a:1e:e1:14:
                    7c:e3:2f:88:f6:c8:71:cf:30:8e:1e:dc:40:2e:ea:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:D7:90:2D:87:21:36:C3:AA:58:AD:E9:63:11:63:85:85:22:3B
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:33:0d:4d:34:58:b0:64:c6:9f:e9:9b:63:e5:f6:7b:75:
         c8:e0:dd:f4:da:8b:27:7c:2d:14:1e:48:a8:10:67:69:8c:aa:
         47:89:aa:49:7c:bb:4a:e2:ac:5c:87:08:7d:02:84:12:e8:c2:
         d1:31:7a:88:bb:80:64:af:77:76:a1:aa:de:02:e0:10:60:3a:
         14:23:a3:9e:09:d5:03:99:ed:f5:72:db:67:51:dc:64:61:50:
         bc:65:a8:c4:a9:6c:c9:45:ba:bd:3b:da:9d:49:ca:0e:f3:a8:
         13:af:f4:e1:a3:f5:71:a4:1c:56:c0:9d:e4:d2:5d:ce:5c:4b:
         b1:0d:07:f0:f3:d3:bd:4e:5c:f2:54:b7:e9:12:a8:7c:e9:8b:
         08:02:e4:83:71:83:c9:bc:a2:34:6f:e1:f3:a0:a5:9d:b0:66:
         a3:da:5a:85:ce:6a:dc:7e:27:87:10:77:d0:be:c7:9a:02:20:
         23:9a:dd:a7:67:b9:94:05:36:bb:c1:fc:74:a3:aa:1a:4a:fb:
         8c:c5:30:0f:9f:12:c7:cb:36:82:b1:0d:20:fd:fa:96:69:9d:
         41:81:63:8b:67:7d:d0:db:eb:ce:6e:6b:e2:68:ad:fe:e1:9c:
         30:ba:31:e4:ab:5c:a9:3b:95:3c:51:17:76:8a:80:4a:ce:a1:
         a0:1d:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:29 2026 by rpki-client