Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File:                     YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier:          mFjrIr4mOCrQcuAFQRMeKC1QvDImm0vyi8naisN/7cs=
Subject key identifier:   11:95:AA:A9:AA:BD:D2:5E:D6:79:0B:F2:EA:92:35:6E:72:3B:BF:8E
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer:       /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial:       019D2703A127F8C8FA0BD4E5E61B0CFE0CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number:          100F
Signing time:             Wed 25 Mar 2026 22:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:42 +0000
Files and hashes:         1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: mn+U+WVNUxn7UepO4foqNDHs5Tm+N7KAotcd2voI7EQ=)
                          2: gJQzhId802-YJNx0WWaWWkM-fD4.roa (hash: Lrav2MOtvej8ZsEdP9SgEjv5mWkDtP7CfAPS8l/cHkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:a1:27:f8:c8:fa:0b:d4:e5:e6:1b:0c:fe:0c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
        Validity
            Not Before: Mar 25 22:00:42 2026 GMT
            Not After : Mar 26 22:00:42 2026 GMT
        Subject: CN=1195aaa9aabdd25ed6790bf2ea92356e723bbf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:6d:32:19:c8:99:a8:34:ee:1f:44:3a:13:
                    d2:cf:f0:c8:81:65:f7:4b:b9:c7:59:da:47:98:79:
                    df:6f:70:9e:8a:cb:39:1c:76:75:73:67:90:a1:f7:
                    de:9a:da:00:0a:5b:d9:7d:b2:7e:b6:7e:b2:79:ea:
                    18:ce:ef:bc:ed:26:13:56:6e:fe:48:66:b6:87:17:
                    2c:c6:48:be:25:e1:df:bd:ad:96:1c:ce:9e:68:18:
                    20:75:ef:62:02:9a:ea:38:67:b6:52:a7:c9:b8:bf:
                    1e:4a:35:67:90:52:87:0d:ad:4b:c1:a8:fa:c1:8e:
                    68:2b:b4:95:02:2a:28:6b:40:b2:5b:7c:9b:b7:5c:
                    a6:36:43:08:22:7d:d0:25:93:82:26:a1:7c:11:06:
                    fa:13:f7:22:90:03:8d:a7:d7:85:8f:ae:d9:81:10:
                    63:16:22:80:02:11:a9:7b:ff:80:b7:2f:0f:fe:41:
                    06:a7:c8:ef:61:5b:4b:34:a0:64:b0:95:83:a2:50:
                    a5:11:17:1f:d9:fc:f4:9d:22:4d:5b:bb:32:5e:3e:
                    07:36:d3:0f:21:f1:4d:7f:4f:58:e3:37:87:69:66:
                    84:89:ea:35:59:75:45:17:ca:ec:41:77:ee:e5:4e:
                    8b:e7:42:13:81:3c:42:0b:20:e7:d4:04:26:2c:f9:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:AA:A9:AA:BD:D2:5E:D6:79:0B:F2:EA:92:35:6E:72:3B:BF:8E
            X509v3 Authority Key Identifier:
                keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:52:d6:a8:af:d1:0d:b6:db:4e:a1:c9:6a:58:e1:ea:26:fc:
         7e:cb:72:6b:87:83:00:c5:99:1d:86:43:b0:20:da:a6:b8:d9:
         e5:e8:2f:a5:5c:bf:99:9f:57:e6:2b:5e:b7:06:c0:f7:37:04:
         2f:1d:6a:d7:2b:3c:75:4c:32:7f:d1:7b:f1:4e:c4:34:a8:4d:
         c8:93:36:93:c0:4a:84:0a:19:cc:70:ca:22:31:fb:b2:45:e8:
         8d:d5:27:a0:5b:78:3f:8a:38:12:7f:53:98:b9:93:0a:20:d6:
         cf:d6:a6:a5:b4:1d:31:af:dd:ef:6f:e0:82:3f:b7:69:ca:fc:
         8a:b4:95:89:98:68:bf:9e:04:d4:ee:bb:38:41:10:3d:35:00:
         eb:c9:3c:ce:28:31:e5:ea:43:aa:e0:16:6b:5b:a9:ac:2e:f4:
         07:14:4a:64:b9:21:66:b7:7c:68:41:58:99:79:88:19:34:5f:
         f6:1e:2e:b6:b1:91:83:4e:91:0b:fa:1d:6e:15:60:ba:d6:ed:
         0d:6b:8b:0c:52:bd:30:58:42:9e:43:b2:4b:21:dd:3c:99:9c:
         2c:9a:84:86:d2:43:eb:b7:91:18:f8:25:45:5d:e3:0f:09:c7:
         c4:03:0f:da:b7:4a:8d:a0:e2:93:f9:ba:6b:32:30:32:0b:c9:
         6c:ac:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:44 2026 by rpki-client