Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          aYG8wPrsujqKYKdZx2Ajv3oWDIebk+CSg5PVNLF7uQQ=
Subject key identifier:   BE:AC:D3:02:EE:F2:52:59:4E:4D:45:38:CE:5B:1C:2F:2B:E9:80:AC
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       019D2CCF17FE624533700D4A8320E8553213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          11BC
Signing time:             Fri 27 Mar 2026 01:01:02 +0000
Manifest this update:     Fri 27 Mar 2026 01:01:02 +0000
Manifest next update:     Sat 28 Mar 2026 01:01:02 +0000
Files and hashes:         1: D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa (hash: gqWDVnk0tUa5bFlFT+UYPIPkFsYBe4H7LkGhaI+lIUo=)
                          2: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: qcZVdLS+5wxR/4y9fAwXV1WYU2X2l0yEBDDT/p2ZUkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:cf:17:fe:62:45:33:70:0d:4a:83:20:e8:55:32:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Mar 27 01:01:02 2026 GMT
            Not After : Mar 28 01:01:02 2026 GMT
        Subject: CN=beacd302eef252594e4d4538ce5b1c2f2be980ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:cf:3a:a4:17:5e:cb:5f:85:0f:94:ae:86:
                    ce:85:9b:dc:c6:4d:9e:69:87:56:db:b6:1d:04:94:
                    db:0f:db:a8:87:d0:bd:f2:e5:09:aa:90:bd:13:f8:
                    8c:e8:5a:2e:f3:ef:69:cc:0b:26:0b:07:ee:60:1b:
                    f7:31:e5:58:6f:01:a0:ae:3f:b2:91:4f:9e:85:52:
                    b9:f7:7f:06:f1:9d:ab:0a:ad:c1:78:78:e1:31:16:
                    b1:55:24:55:9c:4e:ac:a1:34:99:17:0f:59:48:75:
                    8a:37:ed:73:1c:02:e5:81:88:ca:ab:47:8f:01:65:
                    f8:e2:ec:83:e8:05:1e:a7:fc:17:5b:1d:bb:68:79:
                    43:12:f4:31:26:1b:a7:cb:65:67:1f:58:29:34:de:
                    8d:d3:f0:20:ab:96:91:1e:f1:bd:96:82:49:c0:f2:
                    65:82:37:41:0f:c2:1e:8b:00:8f:68:a1:9b:a9:f1:
                    7f:04:b8:97:1e:a4:9b:f3:db:c6:c3:9e:71:59:07:
                    9c:e9:5e:3c:20:04:68:c8:04:9b:16:59:f7:6e:b9:
                    26:4a:b6:ca:10:f0:9a:60:e1:c8:77:2e:7d:4f:22:
                    76:ea:88:a1:5e:fe:8f:7e:f4:fd:83:98:bc:38:49:
                    50:ef:b7:35:09:1a:7a:16:9e:a1:ec:66:6d:ed:f8:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:D3:02:EE:F2:52:59:4E:4D:45:38:CE:5B:1C:2F:2B:E9:80:AC
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:af:91:2b:b4:fd:ae:eb:5e:65:8c:c7:e8:fb:d7:2e:a9:
         a4:2b:4a:3e:61:2a:c0:f5:8c:00:49:70:3e:58:3f:7f:3d:0f:
         bd:c4:bd:5f:37:8c:3b:ba:d1:a6:ce:74:ef:07:e4:85:45:14:
         b5:3c:fe:b6:c6:44:b6:43:78:2f:b5:3b:6f:6b:71:5c:b4:a9:
         08:c0:bb:ac:51:40:6a:d3:88:37:84:1d:03:a3:09:d7:7b:b2:
         4a:22:39:9b:ae:85:5a:68:36:ba:34:e0:db:18:b1:0b:ae:ac:
         12:98:d5:d2:7b:87:6e:34:90:87:8c:6b:c9:ea:32:67:20:33:
         71:7c:5c:a0:9f:a5:fb:0f:ef:41:7d:21:54:cb:62:57:18:29:
         dd:e1:03:67:6b:5e:af:63:cc:5e:fa:e4:4e:fe:24:a4:18:27:
         86:73:7c:34:ad:48:cb:37:7b:b6:26:8e:19:d2:f0:f9:fc:3c:
         8b:42:f7:f4:01:4f:5e:18:85:1c:74:c8:94:46:1a:e6:9a:3e:
         fd:8f:f4:15:01:3d:3b:72:d0:7c:2c:af:bc:de:be:1b:02:94:
         48:a2:bf:38:27:7b:b2:c6:24:b2:04:97:1b:24:3c:b8:ec:66:
         dc:df:2c:03:a3:97:c0:bb:05:55:2e:d5:e4:61:53:ae:f6:ba:
         b3:2c:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:11 2026 by rpki-client