Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File:                     ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier:          QAmJ36fuaObVEviGOupoWeAfcttE69mj7S5KY/61nTA=
Subject key identifier:   01:49:75:E2:42:66:A9:FD:2D:5B:B5:F4:BE:2C:2D:1F:72:DD:20:C0
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer:       /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial:       019CC6AB62C050B29AF80799CE55572C2344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number:          0723
Signing time:             Sat 07 Mar 2026 05:00:46 +0000
Manifest this update:     Sat 07 Mar 2026 05:00:46 +0000
Manifest next update:     Sun 08 Mar 2026 05:00:46 +0000
Files and hashes:         1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=)
                          2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=)
                          3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=)
                          4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: OkOF6vVlYiGGT0cp0j7EPJSnYRS7Dnk4Pnk3Xzc69lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:ab:62:c0:50:b2:9a:f8:07:99:ce:55:57:2c:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
        Validity
            Not Before: Mar  7 05:00:46 2026 GMT
            Not After : Mar  8 05:00:46 2026 GMT
        Subject: CN=014975e24266a9fd2d5bb5f4be2c2d1f72dd20c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:f8:d0:5f:aa:36:8b:03:64:1b:63:a0:28:
                    3f:33:d4:43:92:82:4e:8f:33:ab:15:d2:a6:ae:6c:
                    56:b3:70:ef:e5:05:75:6b:09:6b:3f:14:e9:24:a7:
                    d5:43:2a:cd:88:cc:b5:90:85:cc:37:9f:46:7b:e4:
                    45:ae:ce:12:88:61:01:dd:a6:9e:29:73:61:07:33:
                    da:14:f8:4a:bd:13:8f:09:63:9c:ca:5a:ba:15:35:
                    3a:25:ba:05:af:0a:21:60:7e:b0:9a:a8:3f:7a:2e:
                    3c:e1:20:0a:1f:2e:6d:b1:13:37:72:84:14:d2:df:
                    20:50:71:d8:4a:e7:03:c1:f8:a8:5d:04:5d:9d:b4:
                    1b:f7:91:a8:34:2b:86:ca:0d:8c:6a:44:cf:8f:f3:
                    b2:99:f6:29:0e:e3:2a:a6:65:51:38:df:44:94:20:
                    cb:40:ea:61:62:a6:83:56:5f:44:33:be:f5:bc:7a:
                    c2:b0:6f:69:34:30:c8:62:f1:68:a1:58:7b:63:26:
                    8d:4e:8d:aa:e9:dc:5b:f4:dd:25:ac:51:c5:cc:c8:
                    2e:6d:3a:07:3d:3e:06:f7:e3:79:0c:e2:3c:f8:73:
                    d9:3c:d1:08:be:9f:84:af:9c:08:6a:85:0e:76:53:
                    d8:a5:e4:09:94:67:e5:56:f3:c6:3e:06:a5:2a:50:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:75:E2:42:66:A9:FD:2D:5B:B5:F4:BE:2C:2D:1F:72:DD:20:C0
            X509v3 Authority Key Identifier:
                keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:43:4d:6a:e2:ca:5e:fb:0e:c1:9a:af:49:e5:e9:7c:83:e4:
         97:4e:6b:1b:3b:d4:6c:50:0b:a7:83:c8:2e:1f:ae:6e:8a:1e:
         a1:65:40:de:f8:a5:3f:1d:b7:13:a9:58:76:74:34:f0:4b:07:
         aa:8b:09:dc:83:c4:6e:57:8c:72:64:e6:0c:ea:65:fd:fb:60:
         60:79:4f:73:ba:ac:e6:98:d2:35:78:c2:45:be:75:41:9d:90:
         42:ef:78:75:a9:89:b2:b4:cc:f6:4e:82:e1:9c:f1:8e:c0:57:
         ed:c2:a3:23:ee:1a:a3:f4:cc:5e:1c:e1:36:1b:79:34:60:b1:
         42:83:72:9b:8e:e6:b9:6c:d5:c6:11:89:3e:f9:b4:4d:ab:b3:
         eb:20:c4:50:c5:a5:a2:0f:ff:ba:2a:72:84:1d:2d:f6:b7:56:
         e4:8e:03:4a:e8:49:b2:4d:9c:04:82:8c:f3:ff:ba:de:b1:d2:
         41:dc:aa:57:2e:c6:54:6a:bd:7a:45:4d:2b:d8:29:b0:2a:da:
         73:7a:28:d5:00:0b:e2:ce:97:b9:7b:a0:14:e6:bb:13:33:d0:
         10:25:0a:f5:a8:3a:13:c2:97:d0:de:32:61:8c:1a:79:59:a0:
         8e:6a:87:9f:6f:f1:3e:e9:7e:4a:66:c9:84:cc:41:21:6c:e1:
         07:73:41:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzGq2LAULKa+AeZzlVXLCNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl
YjVmMGIwHhcNMjYwMzA3MDUwMDQ2WhcNMjYwMzA4MDUwMDQ2WjAzMTEwLwYDVQQD
EygwMTQ5NzVlMjQyNjZhOWZkMmQ1YmI1ZjRiZTJjMmQxZjcyZGQyMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YD40F+qNosDZBtjoCg/M9RDkoJO
jzOrFdKmrmxWs3Dv5QV1awlrPxTpJKfVQyrNiMy1kIXMN59Ge+RFrs4SiGEB3aae
KXNhBzPaFPhKvROPCWOcylq6FTU6JboFrwohYH6wmqg/ei484SAKHy5tsRM3coQU
0t8gUHHYSucDwfioXQRdnbQb95GoNCuGyg2MakTPj/OymfYpDuMqpmVRON9ElCDL
QOphYqaDVl9EM771vHrCsG9pNDDIYvFooVh7YyaNTo2q6dxb9N0lrFHFzMgubToH
PT4G9+N5DOI8+HPZPNEIvp+Er5wIaoUOdlPYpeQJlGflVvPGPgalKlArbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFJdeJCZqn9LVu19L4sLR9y3SDAMB8GA1UdIwQY
MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt
NDI1MjMyZmQ1NjQzLzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEtNDI1MjMyZmQ1NjQz
LzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0NNauLK
XvsOwZqvSeXpfIPkl05rGzvUbFALp4PILh+ubooeoWVA3vilPx23E6lYdnQ08EsH
qosJ3IPEbleMcmTmDOpl/ftgYHlPc7qs5pjSNXjCRb51QZ2QQu94damJsrTM9k6C
4ZzxjsBX7cKjI+4ao/TMXhzhNht5NGCxQoNym47muWzVxhGJPvm0Tauz6yDEUMWl
og//uipyhB0t9rdW5I4DSuhJsk2cBIKM8/+63rHSQdyqVy7GVGq9ekVNK9gpsCra
c3oo1QAL4s6XuXugFOa7EzPQECUK9ag6E8KX0N4yYYwaeVmgjmqHn2/xPul+SmbJ
hMxBIWzhB3NBTQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:45:14 2026 by rpki-client