Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File:                     cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier:          3t8EWGVE5CmseBW1fGnCylofd7MnduFUcSPJKR2oO/Q=
Subject key identifier:   5C:A7:E0:67:6E:E1:F5:25:DF:21:B7:F4:87:49:08:63:3A:EB:4F:66
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer:       /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial:       019D273A924298536318BCD9D6175E13340C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number:          0B51
Signing time:             Wed 25 Mar 2026 23:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:42 +0000
Files and hashes:         1: 71mCI3KMqJb1fWbhA5VAOz_YwlY.roa (hash: Yhy9snU417VssGNDPJuFTqPzX5TH460OslWhtb60W/w=)
                          2: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: XGTGMCRUEvOgBT69zWNu9o/q7TvFal+buSYd7OXY3IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:92:42:98:53:63:18:bc:d9:d6:17:5e:13:34:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
        Validity
            Not Before: Mar 25 23:00:42 2026 GMT
            Not After : Mar 26 23:00:42 2026 GMT
        Subject: CN=5ca7e0676ee1f525df21b7f4874908633aeb4f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:83:da:1c:38:49:01:26:26:06:eb:56:90:
                    cd:a3:dd:99:ca:82:50:2a:87:be:98:a8:4d:99:91:
                    46:74:0e:6f:24:e5:08:1a:05:db:ae:f8:a6:b6:18:
                    2e:e4:38:5f:07:47:9b:17:33:70:eb:7b:9e:80:15:
                    6c:8d:e4:0e:d4:e9:92:75:5d:d1:a5:a2:a6:81:4d:
                    31:8c:3f:90:70:89:18:a7:04:14:f0:50:8f:a5:81:
                    87:89:89:41:09:46:f7:a9:b4:de:a1:a3:fd:7a:98:
                    63:d3:68:2d:50:f7:43:63:a6:bc:c8:0b:85:77:4e:
                    c6:87:4a:4c:1d:e4:3f:b3:ff:38:2c:77:87:ed:55:
                    b1:44:86:ff:03:2c:85:f1:8a:f5:a9:7e:4a:90:91:
                    77:7b:0e:22:82:a9:75:45:52:91:03:e6:2f:fd:d9:
                    8e:95:42:c2:b3:27:5b:53:29:bc:83:36:42:a0:6b:
                    e1:51:11:ba:ab:4c:e5:f8:59:12:78:bc:9c:ba:cc:
                    c8:5f:39:8c:39:c0:27:1b:1b:88:74:b6:9b:bc:2d:
                    6f:ac:0a:fa:e9:0b:30:a9:2e:ab:74:06:3d:6c:c7:
                    7e:db:2d:e5:90:b5:a9:d9:9e:ef:c2:9c:1e:39:39:
                    35:af:36:fe:17:38:0d:37:db:7b:ff:92:75:cc:aa:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:E0:67:6E:E1:F5:25:DF:21:B7:F4:87:49:08:63:3A:EB:4F:66
            X509v3 Authority Key Identifier:
                keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:ef:a8:5f:a9:97:f3:40:8f:97:06:ac:27:67:87:3e:d3:
         5e:b6:f0:3d:c2:8a:28:69:a1:ee:10:0a:c2:6a:55:2c:49:48:
         34:2c:0b:42:8e:2b:2c:b1:65:43:3d:88:0f:78:f2:cc:18:65:
         7f:91:46:8b:57:e6:c4:72:1a:cf:01:53:23:e7:62:8c:87:54:
         b3:12:5e:b6:17:42:74:3b:56:25:d0:ae:25:fe:ed:25:4c:ab:
         b2:1e:0b:4f:3a:39:a5:6b:57:21:e0:dc:2a:9d:21:19:7c:40:
         90:4b:00:9d:25:c3:2e:e0:3d:3f:79:fe:1f:a3:68:1d:e8:2f:
         5a:5b:a4:1c:e8:44:54:e6:44:0c:f1:2b:f1:78:46:8c:c9:1b:
         e3:47:0d:f2:64:cd:2d:f4:89:ab:c2:8b:cd:a9:bc:51:15:d0:
         cb:21:cc:5c:50:3b:ef:43:83:82:5f:f1:c3:c2:78:e6:bb:fa:
         a3:6e:41:e5:66:cc:98:ab:58:47:ca:f0:0c:45:29:7d:92:89:
         45:e1:6c:c6:67:23:5d:10:36:95:7e:bc:22:78:42:a5:a8:44:
         bd:2c:21:ac:2b:e9:97:73:9d:8e:ef:b3:ac:31:6f:9f:bf:e6:
         22:f5:d4:30:39:51:4f:3a:08:0b:aa:04:e9:88:83:81:14:48:
         74:c3:e0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpJCmFNjGLzZ1hdeEzQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODRjODA1ZDRlNTNjMmExMzJjNzM5YzRlMzc1MmFmYzM1
YWU5OTUwHhcNMjYwMzI1MjMwMDQyWhcNMjYwMzI2MjMwMDQyWjAzMTEwLwYDVQQD
Eyg1Y2E3ZTA2NzZlZTFmNTI1ZGYyMWI3ZjQ4NzQ5MDg2MzNhZWI0ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzeD2hw4SQEmJgbrVpDNo92ZyoJQ
Koe+mKhNmZFGdA5vJOUIGgXbrvimthgu5DhfB0ebFzNw63uegBVsjeQO1OmSdV3R
paKmgU0xjD+QcIkYpwQU8FCPpYGHiYlBCUb3qbTeoaP9ephj02gtUPdDY6a8yAuF
d07Gh0pMHeQ/s/84LHeH7VWxRIb/AyyF8Yr1qX5KkJF3ew4igql1RVKRA+Yv/dmO
lULCsydbUym8gzZCoGvhURG6q0zl+FkSeLycuszIXzmMOcAnGxuIdLabvC1vrAr6
6QswqS6rdAY9bMd+2y3lkLWp2Z7vwpweOTk1rzb+FzgNN9t7/5J1zKrzhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyn4Gdu4fUl3yG39IdJCGM6609mMB8GA1UdIwQY
MBaAFHGEyAXU5TwqEyxznE43Uq/DWumVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQt
OWY3MmY4ZGVjNDY4LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQtOWY3MmY4ZGVjNDY4
LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocbvqF+p
l/NAj5cGrCdnhz7TXrbwPcKKKGmh7hAKwmpVLElINCwLQo4rLLFlQz2ID3jyzBhl
f5FGi1fmxHIazwFTI+dijIdUsxJethdCdDtWJdCuJf7tJUyrsh4LTzo5pWtXIeDc
Kp0hGXxAkEsAnSXDLuA9P3n+H6NoHegvWlukHOhEVOZEDPEr8XhGjMkb40cN8mTN
LfSJq8KLzam8URXQyyHMXFA770ODgl/xw8J45rv6o25B5WbMmKtYR8rwDEUpfZKJ
ReFsxmcjXRA2lX68InhCpahEvSwhrCvpl3Odju+zrDFvn7/mIvXUMDlRTzoIC6oE
6YiDgRRIdMPg7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:25 2026 by rpki-client