Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          pymlMMCPqRHXt7Pvvv8mgkc2ocS65Hs+zFFo/wXG23c=
Subject key identifier:   12:E9:82:D0:B8:14:68:5A:2C:04:43:80:EF:6A:C2:E0:A3:DC:90:D5
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019CC899F9034523F6CC6E5F73C5F1481E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          186A
Signing time:             Sat 07 Mar 2026 14:00:59 +0000
Manifest this update:     Sat 07 Mar 2026 14:00:59 +0000
Manifest next update:     Sun 08 Mar 2026 14:00:59 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: 1VmwOBvEPDyA1Lz6S7CK2UyZfWT3u3++nBgS7pl1knM=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:99:f9:03:45:23:f6:cc:6e:5f:73:c5:f1:48:1e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Mar  7 14:00:59 2026 GMT
            Not After : Mar  8 14:00:59 2026 GMT
        Subject: CN=12e982d0b814685a2c044380ef6ac2e0a3dc90d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:9a:73:a4:d9:11:af:62:e8:ab:19:37:5c:
                    43:7e:79:ef:4f:9d:ba:ce:d7:85:50:fd:c6:1f:5e:
                    af:d6:72:47:26:71:27:eb:26:0c:78:2c:83:3d:f3:
                    fb:c0:aa:82:5a:86:5d:59:0b:4d:e4:53:e2:7b:e8:
                    e4:3d:a8:43:3e:28:91:ba:94:3b:1c:07:8d:48:ba:
                    60:f6:7f:2f:33:71:1d:2e:4b:f4:f9:32:32:11:45:
                    c0:6d:18:21:92:17:bc:f0:a0:10:70:7c:d7:c0:2e:
                    1b:eb:53:97:f0:17:99:0f:af:9e:bf:dd:fa:1e:eb:
                    9f:46:3c:7d:98:57:41:17:e3:24:64:3e:1b:36:ba:
                    8f:cd:39:fc:f3:1e:e2:6b:90:86:28:15:32:8b:4d:
                    d1:12:15:91:17:23:69:78:92:2d:07:6d:04:d7:9e:
                    d8:77:d0:3e:a1:5d:f0:eb:85:a7:14:f5:d3:98:05:
                    88:91:ce:fc:1b:74:52:2f:e8:b3:88:dc:9e:7d:8a:
                    91:ee:ce:ae:4a:f7:d2:4d:b9:cf:38:43:f9:29:ec:
                    f8:b4:7c:83:55:74:d6:e6:be:f7:65:e0:6f:61:3d:
                    7b:ae:4e:1d:76:57:5a:a8:79:4e:e5:82:67:bf:03:
                    8a:5d:0d:6a:90:70:ef:ff:a9:c4:a0:5f:8e:c6:05:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E9:82:D0:B8:14:68:5A:2C:04:43:80:EF:6A:C2:E0:A3:DC:90:D5
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:f7:3f:a5:84:bc:c7:d9:bc:60:f4:6a:90:6c:06:3c:59:
         c3:f8:6b:1c:3d:19:d1:bb:58:0c:ec:35:d4:ce:b7:c8:7a:0b:
         2c:02:d7:0d:30:d4:0a:c3:8f:fd:98:8f:bc:4f:fa:9f:b1:5c:
         1b:fa:6b:fc:f7:51:b9:42:38:16:a1:ea:81:ee:9d:46:22:c1:
         15:fe:04:09:74:65:73:2c:f0:b4:c4:fa:96:42:70:eb:a4:43:
         b2:46:83:af:a5:1b:85:3c:7b:c7:0b:19:3e:c7:2e:cf:cc:94:
         c6:96:c0:c2:b1:b2:46:63:57:29:98:c6:f3:77:c6:c5:0b:2f:
         b8:92:ba:0c:87:9a:55:ad:d7:70:4a:3b:3f:d4:cf:ff:fa:4a:
         ab:46:33:b3:7f:13:b4:8c:e0:4b:d8:ac:2a:6f:cd:25:07:8a:
         31:5f:0e:c5:79:86:45:02:b1:b8:ab:d0:31:13:e5:56:16:26:
         0b:2f:3d:25:83:e5:6b:ce:93:b3:b0:80:d4:ac:2e:9b:43:0c:
         14:78:09:2d:ae:4c:55:d9:2e:ca:01:72:c1:db:4c:71:3e:ea:
         c4:ff:c6:4a:ed:59:ea:fc:7e:36:2e:67:9a:1a:76:64:7e:af:
         19:c7:c3:21:da:69:0f:e2:66:4a:6e:7a:81:50:ae:e5:0f:a0:
         82:a5:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:52:31 2026 by rpki-client