Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          4114T+ngTT7AJyGOYi+kGjaoS6z9nJgfzUSN6wyJkCM=
Subject key identifier:   9D:13:70:71:A0:CA:FF:64:69:DA:44:CA:AB:CC:46:3E:92:F3:07:FC
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019CE1EBF487CED7E0500A7012DB86636AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          076C
Signing time:             Thu 12 Mar 2026 12:01:02 +0000
Manifest this update:     Thu 12 Mar 2026 12:01:02 +0000
Manifest next update:     Fri 13 Mar 2026 12:01:02 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: Ute+gZmzMQ+wVe9/Uj5tWBhzsB1IDmjAgG8jcfdp54I=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:eb:f4:87:ce:d7:e0:50:0a:70:12:db:86:63:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Mar 12 12:01:02 2026 GMT
            Not After : Mar 13 12:01:02 2026 GMT
        Subject: CN=9d137071a0caff6469da44caabcc463e92f307fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:23:91:4a:19:45:3d:d3:36:2d:64:09:bb:
                    2c:ce:f8:2a:e3:aa:a3:5c:8c:93:93:51:57:57:8e:
                    be:48:da:65:ed:e1:da:1b:1e:49:0c:85:20:b6:f1:
                    bc:63:b0:47:65:b5:a1:d9:04:18:46:23:85:17:b5:
                    57:56:59:15:bf:e7:e4:22:56:ab:b5:fe:42:ce:95:
                    34:a9:8c:7e:a4:46:62:24:cf:aa:c1:3f:0d:c5:e7:
                    24:7f:86:d7:b6:97:a4:fe:d3:de:1e:10:b2:79:5c:
                    a8:78:1c:3f:bf:aa:3a:f4:14:1d:13:79:2c:c0:dd:
                    88:7b:4a:1f:25:50:9f:ba:2d:9d:8b:f4:18:e8:2b:
                    71:42:bf:db:4f:69:76:b7:93:f6:96:0e:a6:0f:d3:
                    39:d2:63:87:1f:f8:8a:c1:d4:ef:71:be:7c:4e:3a:
                    18:db:d6:3a:66:43:9f:ad:f1:06:b0:46:0b:41:09:
                    7d:28:7c:b8:9e:b4:e3:cf:82:19:c0:12:d4:fe:67:
                    1d:6d:e6:9a:db:91:5c:0b:f9:2b:2c:b5:8b:ac:ed:
                    5a:2d:7f:ba:05:5f:28:cf:ea:92:fa:91:b6:a1:43:
                    c8:2a:3e:06:b6:bb:9e:6f:60:0d:e0:63:48:6c:6a:
                    f8:71:e0:97:1e:f3:22:15:55:c7:05:43:fc:80:ce:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:70:71:A0:CA:FF:64:69:DA:44:CA:AB:CC:46:3E:92:F3:07:FC
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a5:56:05:0e:60:e3:92:cc:59:fa:db:51:ce:8e:18:93:78:
         7a:dd:57:83:b7:95:5a:59:88:ea:39:3e:85:69:6c:8a:86:4e:
         a1:00:91:ba:eb:f2:3b:df:25:a4:bf:bb:fd:74:ad:af:a6:77:
         d7:a7:17:ac:ff:eb:ab:d6:8c:f6:b8:d4:6d:ee:36:86:d1:ea:
         09:4c:09:0a:62:d9:5a:6c:c7:08:d5:d1:a8:08:55:64:c3:6d:
         06:8c:3c:76:a2:7d:2c:f3:88:ef:02:2d:70:9a:d6:cc:f8:5b:
         78:42:10:fd:6a:d8:2d:15:ee:ab:43:0a:2a:34:d2:0e:7e:1f:
         8f:3f:97:25:2f:1b:31:70:e0:c0:75:0f:49:c5:6a:4d:47:ff:
         f6:12:af:41:41:f6:3c:9e:28:fd:6e:8f:2f:0a:de:f9:5f:cf:
         6e:fe:0b:0c:b4:e3:84:fd:dc:28:cb:d4:36:a5:e1:34:65:51:
         e6:63:c0:96:91:d3:9c:89:c3:67:6d:54:c7:1c:55:de:06:0e:
         f9:b4:96:fe:9e:3c:63:e4:1c:bc:8c:a8:55:80:c6:25:c7:99:
         e1:3f:8e:50:cb:d5:59:ac:d8:5a:62:fd:db:ea:a1:41:25:1f:
         76:3a:b9:ce:a6:b6:5d:da:5c:b2:a3:04:ae:16:09:50:b2:da:
         83:b1:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:37:39 2026 by rpki-client