Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File:                     Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier:          duG+siyJU21M5OHWocF5xkR4+y1/ALW9B8qrQxn3Kh8=
Subject key identifier:   A6:36:6F:56:82:C1:BE:25:EC:B5:A1:CA:85:4F:2D:E2:94:3F:F9:24
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer:       /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial:       019D2884A0D5BA20D6A0B5B698587DDFF9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 05:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:13 +0000
Files and hashes:         1: ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa (hash: oseBqsFumaa6CAjnqsxKGT9XuEQTrrxmktu1Tv62S6I=)
                          2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: J0O9rSO3/dFdIyzdRJki8UQkD0Kiw4hjAqHxaXXUoaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:a0:d5:ba:20:d6:a0:b5:b6:98:58:7d:df:f9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
        Validity
            Not Before: Mar 26 05:01:13 2026 GMT
            Not After : Mar 27 05:01:13 2026 GMT
        Subject: CN=a6366f5682c1be25ecb5a1ca854f2de2943ff924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:a2:07:72:ba:bd:48:e3:29:93:c1:be:46:
                    80:05:a1:e8:83:e3:f0:0e:2f:59:73:74:ac:5b:f3:
                    cf:65:75:18:e0:61:28:9c:5f:26:21:fe:f5:6f:44:
                    96:98:aa:33:cd:af:70:92:df:5b:66:b0:f5:20:8b:
                    2b:a7:61:54:83:f8:20:15:cb:50:83:ba:43:ed:4d:
                    4c:76:a3:12:c8:f9:4e:f0:ea:ef:7f:af:f3:dd:4e:
                    93:70:61:4f:a3:b7:3f:ea:2b:c7:f0:ae:0a:ed:33:
                    62:40:cd:1e:17:39:25:d5:42:97:8c:30:90:c8:c3:
                    a6:02:9d:be:64:04:de:5b:a4:1e:3f:2e:5f:78:99:
                    74:3c:54:0b:16:fb:1f:75:ee:90:56:2e:0d:75:c1:
                    bf:fc:91:39:45:c3:c4:69:12:be:a4:ab:d4:dd:9c:
                    eb:2e:98:e8:03:10:ed:d5:3b:b6:14:a4:1d:74:3b:
                    42:1e:3b:a7:ab:a0:fc:f7:fe:65:8c:52:4e:af:d1:
                    99:07:1e:1d:9f:ae:e1:17:9a:05:b6:12:64:b2:1e:
                    b1:20:d9:24:08:01:59:a3:f8:45:6b:15:d9:28:cc:
                    0c:6e:c1:4d:47:d2:16:b6:60:e8:31:45:74:7c:25:
                    06:8e:8a:df:6d:6e:09:56:67:df:31:58:e1:8d:9a:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:6F:56:82:C1:BE:25:EC:B5:A1:CA:85:4F:2D:E2:94:3F:F9:24
            X509v3 Authority Key Identifier:
                keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:c9:67:23:0d:4b:65:e6:ba:f7:2f:4b:f3:be:c9:de:0b:
         b4:86:af:b6:51:03:66:1c:e3:6a:53:86:06:8f:df:88:7d:53:
         48:84:38:55:c2:6e:b1:d4:06:dd:a8:9a:4e:28:8b:59:e3:6f:
         e0:49:5d:55:7c:40:76:a9:ee:f7:9d:8c:03:9e:58:66:c0:36:
         c6:1f:94:e8:cb:65:c2:03:98:80:bc:e6:db:79:6f:ac:de:72:
         57:8c:eb:f8:7f:11:da:cd:ac:6b:39:d7:3e:05:d3:e8:9e:ca:
         29:ba:84:95:ef:84:ad:8e:7a:13:da:85:43:69:31:65:31:da:
         70:60:4e:5c:24:b3:0c:84:be:83:e9:02:74:6c:0f:ac:13:e8:
         f3:2a:c8:09:54:ca:83:d6:57:5d:02:f7:83:03:cc:1e:e8:9b:
         9f:f5:6e:39:4d:b6:00:32:f4:4c:86:6e:18:02:d4:5c:51:7e:
         b1:96:e5:53:d1:23:cd:22:08:e9:12:74:89:18:9c:26:6a:67:
         1e:09:ab:de:c7:44:b4:fd:a1:3d:f4:8a:63:ba:15:65:71:ba:
         9e:d8:8d:59:0a:98:6f:07:79:db:62:94:22:01:53:32:88:15:
         b6:f3:83:f3:b0:11:84:cd:9e:0f:a8:d1:f9:9c:0b:de:43:e8:
         11:16:bb:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKDVuiDWoLW2mFh93/nVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGQ1YTQwNzU0MjhhN2ZjOWFjOTRlNmQyYTJkOWE5OTJl
ZjQ4NTMwHhcNMjYwMzI2MDUwMTEzWhcNMjYwMzI3MDUwMTEzWjAzMTEwLwYDVQQD
EyhhNjM2NmY1NjgyYzFiZTI1ZWNiNWExY2E4NTRmMmRlMjk0M2ZmOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPOiB3K6vUjjKZPBvkaABaHog+Pw
Di9Zc3SsW/PPZXUY4GEonF8mIf71b0SWmKozza9wkt9bZrD1IIsrp2FUg/ggFctQ
g7pD7U1MdqMSyPlO8Orvf6/z3U6TcGFPo7c/6ivH8K4K7TNiQM0eFzkl1UKXjDCQ
yMOmAp2+ZATeW6QePy5feJl0PFQLFvsfde6QVi4NdcG//JE5RcPEaRK+pKvU3Zzr
LpjoAxDt1Tu2FKQddDtCHjunq6D89/5ljFJOr9GZBx4dn67hF5oFthJksh6xINkk
CAFZo/hFaxXZKMwMbsFNR9IWtmDoMUV0fCUGjorfbW4JVmffMVjhjZrTQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY2b1aCwb4l7LWhyoVPLeKUP/kkMB8GA1UdIwQY
MBaAFGLdWkB1Qop/yayU5tKi2amS70hTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEt
NjVmODkwMGU1YzgyLzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEtNjVmODkwMGU1Yzgy
LzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUHJZyMN
S2XmuvcvS/O+yd4LtIavtlEDZhzjalOGBo/fiH1TSIQ4VcJusdQG3aiaTiiLWeNv
4EldVXxAdqnu952MA55YZsA2xh+U6MtlwgOYgLzm23lvrN5yV4zr+H8R2s2saznX
PgXT6J7KKbqEle+ErY56E9qFQ2kxZTHacGBOXCSzDIS+g+kCdGwPrBPo8yrICVTK
g9ZXXQL3gwPMHuibn/VuOU22ADL0TIZuGALUXFF+sZblU9EjzSII6RJ0iRicJmpn
Hgmr3sdEtP2hPfSKY7oVZXG6ntiNWQqYbwd522KUIgFTMogVtvOD87ARhM2eD6jR
+ZwL3kPoERa7xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:00 2026 by rpki-client