Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          IujEWOwS5kU1yu3GcArEK9jRKZT/Fj6q9ai5Rg4XD9Q=
Subject key identifier:   9C:65:69:80:5A:5C:AB:0A:89:4D:26:01:E9:41:A1:BE:78:62:31:81
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       019D2A0488D0586F0E7D8FCA8AEA4CE32544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          0960
Signing time:             Thu 26 Mar 2026 12:00:33 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:33 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:33 +0000
Files and hashes:         1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
                          2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: eE8HaVxhorJLXc/MOaNNqDxfVfZ3JyQdubnElFHKSJ0=)
                          3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:88:d0:58:6f:0e:7d:8f:ca:8a:ea:4c:e3:25:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: Mar 26 12:00:33 2026 GMT
            Not After : Mar 27 12:00:33 2026 GMT
        Subject: CN=9c6569805a5cab0a894d2601e941a1be78623181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:5e:f5:94:cf:91:a7:ee:b5:5a:39:a7:ca:
                    5b:d7:c0:4c:71:3d:9d:07:b7:de:77:c0:4d:b1:98:
                    f9:c7:4d:e6:0c:4f:51:80:05:6b:01:dc:97:1a:06:
                    81:35:94:e3:58:01:2e:3e:14:3c:45:1b:91:c5:f5:
                    2a:89:42:07:64:16:27:38:b9:15:a4:75:da:42:6e:
                    a6:04:67:53:a2:0c:ae:05:d0:e1:72:18:26:75:aa:
                    99:48:2d:64:f1:2e:95:c4:03:e7:8e:56:b4:58:7c:
                    ab:d6:52:a4:77:22:7d:ec:b5:91:7c:39:e8:25:67:
                    22:91:e4:d6:88:75:ea:04:b1:82:45:6c:05:14:d5:
                    81:3e:5c:b4:2c:e7:4d:8f:24:84:a4:cc:41:3e:77:
                    2c:cc:4c:55:90:54:09:0a:86:25:74:9e:27:52:37:
                    b7:df:fc:00:8e:8f:e3:75:6d:8f:fd:ac:50:95:d7:
                    a0:0a:86:28:70:49:dd:58:96:fa:0d:f6:1a:e9:f6:
                    e1:51:20:ed:bf:5c:2d:74:da:1e:f3:10:7a:aa:f4:
                    78:04:bb:27:12:10:5a:71:2d:a6:15:5f:1e:ed:00:
                    32:29:47:f6:9b:79:af:13:14:d2:1c:46:f3:32:20:
                    7c:74:9a:dd:4b:88:fb:dc:5e:c9:5c:42:ed:98:f7:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:69:80:5A:5C:AB:0A:89:4D:26:01:E9:41:A1:BE:78:62:31:81
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:ff:8e:49:11:4c:7d:be:c4:b4:05:db:e8:50:a4:fc:73:
         15:57:5a:36:df:ff:02:e9:81:b1:4d:1b:e3:7d:68:10:bc:a2:
         76:3d:e7:26:c0:d1:6e:a1:6c:6c:56:85:42:d1:ff:1f:fa:35:
         ad:53:7e:ac:59:eb:b2:93:c7:74:a7:f4:b8:1a:af:b6:41:2c:
         f9:a2:4b:1e:61:c2:6f:99:37:64:82:b9:28:31:02:82:89:fe:
         38:0f:0c:69:e5:ad:9e:3d:5e:8f:74:9f:96:7b:54:f1:d5:f6:
         05:ed:40:30:ec:3e:d2:1a:49:cf:8a:fa:96:a8:80:38:ee:b7:
         3b:d8:e5:26:3e:0b:68:00:75:89:ab:b3:a2:7e:bf:41:43:84:
         3a:00:d4:32:4d:3c:a1:af:c5:2b:aa:42:20:ea:37:5d:38:1c:
         3d:13:24:4f:70:5b:9f:f0:e0:c8:3e:e9:12:2f:88:8b:f4:d0:
         fc:d0:ba:b4:1b:20:77:af:15:3c:05:27:c5:86:38:cc:1c:fd:
         4d:d2:3e:5e:3f:34:5c:d1:31:59:26:af:03:44:69:5d:37:06:
         db:32:29:58:01:05:54:1d:86:25:27:3a:ce:c1:0f:76:68:93:
         1d:28:2c:5f:9b:af:1d:bf:f9:0d:24:fa:16:99:6f:d4:d7:eb:
         4b:2a:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:34 2026 by rpki-client