Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File:                     YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier:          Ycz0zvkWb56vglsSroZ+vr7aNGutoH6o1nIWIMNS/q8=
Subject key identifier:   4E:FB:7B:46:24:F8:38:DC:6C:68:AA:50:38:FE:51:56:0B:7C:B3:A1
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       019D36AD7141FACF8F93B63452824526EC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number:          07DD
Signing time:             Sat 28 Mar 2026 23:00:29 +0000
Manifest this update:     Sat 28 Mar 2026 23:00:29 +0000
Manifest next update:     Sun 29 Mar 2026 23:00:29 +0000
Files and hashes:         1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
                          2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: UR8VA2cOoQg00oKX5soWrGFxfPGq50LcQ3fY+3242a0=)
                          3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:ad:71:41:fa:cf:8f:93:b6:34:52:82:45:26:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: Mar 28 23:00:29 2026 GMT
            Not After : Mar 29 23:00:29 2026 GMT
        Subject: CN=4efb7b4624f838dc6c68aa5038fe51560b7cb3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:f9:b4:0c:31:5c:99:27:ff:f4:1b:b3:0e:
                    02:a3:44:4b:da:6e:16:a4:14:85:0c:2e:a4:f3:b5:
                    56:c8:09:4c:33:90:0d:23:08:06:a5:3d:2d:e4:5b:
                    5b:f7:a3:97:42:74:43:25:24:70:11:8a:16:1e:d0:
                    fb:06:9e:1d:cb:60:9f:16:ae:6b:44:36:5c:40:17:
                    52:97:e6:db:b6:36:80:d9:75:55:94:4c:67:57:47:
                    1d:08:55:a6:b9:46:fd:59:2f:0f:f6:b3:be:44:95:
                    1a:24:6f:57:34:58:ee:ff:a8:24:7f:cd:26:3b:e0:
                    d2:11:21:5a:d8:0b:2c:cf:ed:bd:eb:ff:0f:c0:44:
                    4c:3e:8a:0d:f8:99:4b:de:38:46:1b:0f:7f:d5:56:
                    5e:21:7b:7a:a2:2c:26:7a:5a:85:f8:f8:56:25:e8:
                    36:8d:32:cb:d2:c6:cb:b3:83:e7:f7:ed:ee:a3:07:
                    39:70:4d:9c:71:19:50:a1:cf:e5:bf:4b:da:7c:5d:
                    a5:c2:c9:c2:4b:56:6b:1b:29:a2:e5:f9:5d:f8:c1:
                    c4:3b:dd:5c:d0:1c:ef:5f:14:b9:dd:37:c4:cb:20:
                    86:d9:8f:54:21:b3:6a:5b:e6:a3:35:e1:da:8f:d6:
                    25:4a:e3:82:82:81:2a:ba:22:f7:c1:e5:c1:9e:e4:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:7B:46:24:F8:38:DC:6C:68:AA:50:38:FE:51:56:0B:7C:B3:A1
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:ea:41:dc:75:6c:7f:f1:ca:e7:73:19:3a:f3:fa:9f:1d:
         e3:09:bf:a6:5e:7a:67:78:d3:04:48:f4:c7:a0:ef:ad:99:31:
         69:41:73:d6:b7:0f:e0:f3:4f:f8:9f:62:55:f1:cb:7e:c1:c4:
         a8:4f:41:4b:cd:e5:72:5a:5b:05:a3:9d:a1:4b:07:5f:f1:b4:
         fe:c1:c0:60:ac:65:b2:ee:a9:8d:59:7c:66:8f:c3:18:00:49:
         aa:af:3c:bb:f2:85:26:4f:0f:c0:59:41:04:40:f2:ed:99:37:
         29:cc:b4:fe:21:00:a3:70:f1:f7:d5:69:68:f6:d4:44:77:29:
         a0:4e:65:36:00:2f:9c:40:cf:27:39:0e:02:1c:e9:1c:c4:80:
         04:d2:83:fc:1e:8f:97:54:e1:d1:d1:b8:84:79:60:2b:29:e7:
         af:45:0f:1a:63:95:5a:6a:59:7f:4a:d5:71:67:89:54:f0:1e:
         43:5e:ee:b8:ff:46:f2:df:a6:9a:75:27:52:cd:f8:f3:eb:28:
         51:3c:73:b0:64:37:89:d4:ad:17:74:af:cd:38:d7:0e:76:50:
         2a:1f:b4:a7:79:e7:c0:90:c4:ca:b9:09:a9:e4:69:21:a4:d8:
         83:1c:07:d9:e6:38:cc:6d:28:04:d8:30:4d:95:c7:45:1a:6d:
         03:4a:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 01:47:59 2026 by rpki-client