Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File:                     MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier:          upn5r22ksvbv4y9nNf9WMzWd25CqpcsHSaHN7adlvtQ=
Subject key identifier:   E2:60:87:22:78:22:D5:B8:D2:49:E7:F2:89:B8:7F:06:4E:5C:F5:8E
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer:       /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial:       019D37C0B3ED036B1B98FE2363A6E51E3605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number:          0F33
Signing time:             Sun 29 Mar 2026 04:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:08 +0000
Files and hashes:         1: GkouH-o047T5JTSoOlFrFlZ6LAk.roa (hash: LyKAkgLhQ3B6LkGr5mqVhCq49UmdkcvtOyqh3Ra9Jtw=)
                          2: KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa (hash: Wjg6EvOWdh1EArjC2HdiYoGrTNwnd1GKg0SQ1DQtlJM=)
                          3: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: DLfao7OYornEx3soAZnyXq2o1X5SMnbz13xOVbg/rNU=)
                          4: jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa (hash: XIdiJuC/vzsQTCNcPtjQEtIJRyHtsvJsPgJI2QdsCTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:b3:ed:03:6b:1b:98:fe:23:63:a6:e5:1e:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
        Validity
            Not Before: Mar 29 04:01:08 2026 GMT
            Not After : Mar 30 04:01:08 2026 GMT
        Subject: CN=e26087227822d5b8d249e7f289b87f064e5cf58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:1c:ab:3a:d6:00:05:88:99:b5:2b:b1:6d:
                    be:0e:6e:11:45:fc:63:8f:fd:9b:ed:ac:e7:1c:65:
                    05:d3:2c:90:3b:1d:d4:d8:16:b1:94:46:c8:60:80:
                    90:cc:fd:63:80:c9:ce:c1:5f:82:3c:57:b7:e3:a0:
                    16:98:c9:27:d6:19:05:fa:ab:20:8a:3d:2e:f7:93:
                    c2:84:8d:90:ce:ce:ae:7f:f1:75:05:aa:7c:d1:fc:
                    fa:0d:47:b9:c1:32:83:8e:e4:e0:9d:7a:c5:e6:4b:
                    eb:8a:8b:5f:8c:7d:6d:c6:d2:01:fe:d7:14:47:04:
                    a1:b0:f3:e5:0a:b1:2f:88:20:1f:6d:1e:ca:4d:02:
                    0c:53:f3:f6:a5:55:5a:9d:9a:1d:ed:2e:a1:03:f4:
                    1d:5a:28:2e:ae:d2:ba:9d:91:fe:a9:15:32:cd:03:
                    e7:df:47:7d:97:65:da:19:d4:10:dc:48:f6:02:00:
                    2c:5f:1b:0f:fd:ec:12:2c:d9:6c:c0:48:0e:65:9a:
                    80:8a:f3:c5:e6:1b:58:bf:45:85:55:8b:d9:dd:ae:
                    81:7c:d0:7b:c9:51:f7:5f:a6:70:5d:3e:70:45:98:
                    ef:97:dd:84:4f:f8:0e:da:5a:2c:cc:cb:9c:26:19:
                    ad:3b:cc:28:30:ac:5c:73:e4:25:fe:de:e4:b4:9a:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:87:22:78:22:D5:B8:D2:49:E7:F2:89:B8:7F:06:4E:5C:F5:8E
            X509v3 Authority Key Identifier:
                keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:fb:45:f7:67:54:1d:f1:f9:78:ff:4f:12:5f:52:da:b8:
         1d:5b:4e:17:70:5e:16:d6:e0:99:fa:22:d8:c8:41:f0:ef:98:
         34:5d:5d:d8:39:08:3a:ac:07:19:05:84:29:1c:0f:79:57:ec:
         e2:50:d5:3b:5c:0d:13:1d:9e:fd:5c:1f:7f:1c:f6:65:e3:00:
         74:09:c4:63:d8:be:a9:0e:68:39:73:65:52:1d:b3:9d:9c:fd:
         fe:13:0b:5d:74:e8:f4:ee:f6:d2:19:59:a0:98:ac:2e:ef:70:
         8a:73:2d:d4:03:50:46:ce:92:9e:ce:b4:77:ee:f8:68:39:fc:
         bb:de:b4:d4:6b:4b:ef:62:7b:0b:63:41:75:69:e1:28:44:e8:
         cf:d4:18:19:88:9a:21:4a:4a:9d:cd:9a:67:7b:39:e9:e7:c3:
         44:5b:4b:be:4a:43:b9:77:37:5e:4b:88:5f:cf:a0:3f:eb:ab:
         63:f0:75:e6:dd:c5:58:d9:ed:c9:80:ca:5a:fb:da:25:99:72:
         35:10:6e:0c:3b:06:b7:6e:6f:60:e4:b8:2c:f5:17:f6:fe:54:
         ea:ac:b8:07:81:66:3b:97:f0:45:24:49:3e:53:79:d0:bd:bf:
         bc:7d:b8:19:a6:db:92:09:1a:41:99:72:f5:a8:07:d8:4b:bd:
         e6:48:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:39 2026 by rpki-client