Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          Q19/ZjpnwLyc97kBLaZYio57chlh3KYksxaecgeRzYc=
Subject key identifier:   CF:DD:B5:5A:92:BE:0A:C4:8C:E3:90:EB:6A:EC:C9:52:56:9C:75:E4
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       019CC862E72FC01EC6356F4BBCF1DDA1B08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          17EB
Signing time:             Sat 07 Mar 2026 13:00:50 +0000
Manifest this update:     Sat 07 Mar 2026 13:00:50 +0000
Manifest next update:     Sun 08 Mar 2026 13:00:50 +0000
Files and hashes:         1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
                          2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: /sl9v5awjiQAudKd0ZUvJ79o5MC2w5t8mjbtu8gtgpM=)
                          3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
                          4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
                          5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:62:e7:2f:c0:1e:c6:35:6f:4b:bc:f1:dd:a1:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Mar  7 13:00:50 2026 GMT
            Not After : Mar  8 13:00:50 2026 GMT
        Subject: CN=cfddb55a92be0ac48ce390eb6aecc952569c75e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:73:ec:fb:5a:f6:d2:da:ff:e4:0e:7f:a2:
                    ae:f1:43:28:00:aa:62:85:cd:c3:33:31:47:a8:10:
                    2a:bc:f8:a9:f8:57:ac:61:62:6c:3c:6a:cb:52:bd:
                    ac:a9:d6:4c:e6:65:c1:4f:11:68:ba:2c:6b:76:38:
                    27:68:a9:09:18:70:7a:7a:b0:57:47:99:18:86:ec:
                    78:7b:d7:11:fe:41:81:76:e3:9d:85:64:71:7d:3c:
                    01:e0:0f:ab:87:88:89:74:ad:25:9f:3f:3a:42:eb:
                    f9:9c:f4:7a:c2:d3:7c:2d:1f:2f:19:b0:56:e2:6a:
                    4b:54:15:fe:d6:ab:3f:e4:73:eb:81:e5:ca:d4:91:
                    6f:97:34:21:e6:bb:13:8a:75:15:28:48:02:78:38:
                    5d:79:b9:f6:a5:49:3d:99:5b:28:a6:29:6f:28:5d:
                    92:e8:d1:db:6d:6a:f9:19:47:93:62:0a:5f:2a:86:
                    c1:36:2d:91:f1:b4:8c:b9:c6:57:08:86:0c:64:6e:
                    ad:12:52:55:76:90:66:13:1d:88:f9:01:c0:5f:7a:
                    2c:94:03:52:03:3d:2f:7a:e2:44:9e:4b:11:e9:f2:
                    7d:3b:89:bd:0b:4d:50:f3:66:e1:b2:c5:82:1d:8e:
                    d4:b7:1f:72:da:c4:81:7e:12:9a:26:34:e5:54:84:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:B5:5A:92:BE:0A:C4:8C:E3:90:EB:6A:EC:C9:52:56:9C:75:E4
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:94:40:13:2e:7c:d7:f1:e8:54:48:a7:6f:6c:9f:c7:1e:
         a1:d8:e3:57:d0:68:8e:fd:ec:70:df:ca:61:a5:49:95:25:e0:
         a6:1e:47:25:9e:95:ff:bc:d6:87:e2:17:2a:f5:b2:13:18:04:
         bf:19:ee:aa:c7:6a:fb:c3:d3:f3:84:d8:10:36:0f:e8:12:1d:
         53:b6:6f:ed:0c:cd:38:87:9b:de:bf:53:f7:dc:cc:de:4b:c8:
         af:42:87:e7:d2:d5:6d:84:10:25:36:71:36:f6:33:d3:42:dc:
         35:f5:34:a4:93:90:71:9c:53:91:64:a6:d1:be:59:55:42:31:
         05:e5:74:3b:4d:b1:e7:ed:eb:f5:c8:86:23:f3:5f:d3:41:a6:
         b2:37:d3:a1:c4:3c:7f:f5:80:37:91:0f:12:d9:c6:1a:18:db:
         56:1a:fa:e0:8b:64:e8:86:0f:4a:55:a7:29:de:fb:8f:3b:7f:
         3a:11:26:ed:18:76:4a:ae:3c:bd:29:a0:db:fd:01:fe:1b:bc:
         6d:82:84:f4:6f:9d:a5:01:3c:32:8f:70:d6:54:1a:dc:c8:b7:
         43:3b:06:7b:42:c4:0e:79:91:b6:6c:bf:19:6e:fc:8c:52:4f:
         7f:c5:ce:14:17:74:d7:30:f9:8b:31:fc:73:8b:be:28:e5:bc:
         69:74:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:18:29 2026 by rpki-client