Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File:                     YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier:          7Tt8Lw7UsQZl2+N5C6X7UyI7E5Bf1mLMK6qDWESSKDo=
Subject key identifier:   6B:5B:A5:B1:45:DA:E7:5E:1C:95:7C:82:40:95:30:25:9B:50:A8:62
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer:       /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial:       019D26961A8EEFEC67837B2A2181A9CB1CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number:          056E
Signing time:             Wed 25 Mar 2026 20:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:04 +0000
Files and hashes:         1: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: E8wE1Tmwl3FfwJsm+eXVMWwZrLi8u+fgV/2XTRHC9QM=)
                          2: iDtpVtTwYVksijrN6HIEl5X0bek.roa (hash: LToGh6bU1qAlZ0kYUZ6vCkNysm+SzStfP+9TRnHtZXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:1a:8e:ef:ec:67:83:7b:2a:21:81:a9:cb:1c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
        Validity
            Not Before: Mar 25 20:01:04 2026 GMT
            Not After : Mar 26 20:01:04 2026 GMT
        Subject: CN=6b5ba5b145dae75e1c957c82409530259b50a862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:92:35:b9:1f:60:5d:9d:41:7c:ad:ae:08:
                    40:1e:b7:12:77:c0:a9:84:6a:7d:c7:e6:c9:b4:ea:
                    d5:38:04:a0:6e:e3:fe:b4:fa:42:86:75:eb:53:89:
                    a2:04:7b:2b:1e:ea:f2:43:69:25:3d:c7:86:25:76:
                    68:92:aa:e0:ad:d6:37:7a:b3:77:2e:f3:4e:29:3b:
                    3a:9e:a2:2b:f0:2a:57:af:21:66:01:6b:0c:fd:70:
                    a7:ff:09:ad:dd:0b:88:2f:10:3f:f3:83:c0:32:20:
                    ac:9f:e1:e5:60:c8:58:44:18:b4:7e:11:21:97:26:
                    69:d0:61:b1:aa:fb:5c:61:cc:72:65:50:8a:97:27:
                    7a:a5:f9:16:37:6a:1a:cd:2c:8c:2c:01:cf:08:f4:
                    45:58:21:39:fa:eb:f7:9a:92:1f:fa:8c:b5:25:a3:
                    c1:cf:f2:19:e1:e2:d8:c0:5d:b7:7f:fe:2c:0d:71:
                    40:29:24:06:3d:89:08:88:0d:ea:bd:b9:1a:67:33:
                    f2:53:61:35:c6:df:48:18:b3:d5:e9:2a:1c:30:2f:
                    76:ad:f8:0a:65:78:80:50:62:84:64:14:9d:72:d2:
                    10:ee:3f:33:7b:f0:35:41:c7:f6:08:a1:8c:67:6f:
                    c2:59:22:ec:b4:ac:54:0e:d8:1a:68:34:bb:3f:d3:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:A5:B1:45:DA:E7:5E:1C:95:7C:82:40:95:30:25:9B:50:A8:62
            X509v3 Authority Key Identifier:
                keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:22:36:1b:d5:b4:0e:01:39:4a:95:16:c6:46:cf:4b:de:
         3e:34:aa:89:3b:e9:2f:0a:3b:1a:cd:26:1f:5e:8d:45:5e:3e:
         05:c6:dc:ff:c1:8c:2d:06:f3:ba:6f:86:a1:c3:b1:a7:52:6c:
         d1:51:40:0b:21:9f:7e:e1:e6:9e:aa:19:73:cb:17:82:b2:3a:
         64:f2:d2:08:64:cd:9c:fc:16:34:19:3a:59:4d:41:a3:80:b0:
         2f:5a:41:20:04:26:24:05:93:7a:88:e6:d7:d6:69:d3:7e:e0:
         a7:ca:47:25:a6:c2:06:62:c2:e2:e4:b9:ff:d7:9b:90:a2:ba:
         12:82:d7:21:f8:cf:c7:e7:81:63:11:11:5c:72:03:5e:e9:44:
         a4:6e:16:ad:4b:9b:68:36:6e:78:9c:19:1a:de:6d:c8:6d:44:
         6d:40:02:48:45:72:ed:79:fa:76:53:cd:93:21:b6:5a:fc:18:
         12:7f:6b:a0:d1:97:9a:ee:b7:68:2e:0c:bc:1c:82:00:11:e0:
         b2:ad:27:51:fa:9f:9a:90:5b:63:33:a5:b7:99:a9:26:6c:b7:
         5f:ab:5e:8a:00:47:1b:d1:55:10:16:50:97:d1:c0:e4:08:f7:
         04:f8:1b:2b:51:4e:ac:29:c8:6d:70:aa:65:c3:19:65:0d:56:
         f2:ab:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:29 2026 by rpki-client