Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File:                     YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier:          pTcylSYrdF6XP4/ADJTsYNqtLCC/Or3n5FZzZdn2KOE=
Subject key identifier:   82:D9:12:4E:F4:51:6A:40:15:13:42:20:07:ED:24:64:80:30:A8:4E
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer:       /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial:       019D281681968EF10F1793B9A936CABF91C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number:          0459
Signing time:             Thu 26 Mar 2026 03:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:56 +0000
Files and hashes:         1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: ZGHuCp8kiAqJ/YsiUrdEZJljj5Kd9xfpewgIIXLNqOc=)
                          2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:81:96:8e:f1:0f:17:93:b9:a9:36:ca:bf:91:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
        Validity
            Not Before: Mar 26 03:00:56 2026 GMT
            Not After : Mar 27 03:00:56 2026 GMT
        Subject: CN=82d9124ef4516a401513422007ed24648030a84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:5f:58:87:b8:04:3d:47:51:df:b1:a1:cd:
                    eb:f0:2a:6c:f4:ef:26:ac:76:d7:89:eb:c5:c9:62:
                    37:c4:78:dc:7e:c9:e3:ea:c3:00:51:6d:e7:f0:f4:
                    28:ef:8e:a6:47:51:88:c0:27:d3:1b:f9:be:1a:eb:
                    09:e8:42:d5:5e:80:90:00:70:24:6c:de:ea:90:fe:
                    0a:23:29:1e:26:ea:6f:8f:d9:4e:04:df:22:71:5b:
                    77:35:e9:76:1f:57:6b:9f:8f:56:9e:1d:0d:14:4e:
                    83:7e:23:8c:34:cb:bb:e0:ec:50:c6:08:83:5c:20:
                    89:78:b7:63:ee:2a:f2:62:a6:a9:4d:1c:79:f9:22:
                    70:8b:15:a7:80:8e:4d:01:b5:80:d7:5b:29:0c:e7:
                    87:b7:fb:7d:08:09:52:75:00:10:7e:f2:12:5c:c4:
                    c7:b4:21:e7:f5:28:2e:73:de:37:9b:e2:e1:8f:6e:
                    cc:8a:6c:22:07:09:d6:cc:02:36:e2:44:29:6e:0f:
                    95:3c:70:22:ab:81:87:0d:bc:e1:35:fd:57:65:3e:
                    cd:de:1a:be:19:17:0e:d7:18:83:a8:ab:33:e3:21:
                    3e:f7:62:b2:0b:81:85:0b:81:20:04:43:58:07:0a:
                    36:fc:a0:36:ba:f7:25:bc:4f:e0:a5:d2:5e:45:82:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:12:4E:F4:51:6A:40:15:13:42:20:07:ED:24:64:80:30:A8:4E
            X509v3 Authority Key Identifier:
                keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:f1:aa:ff:ae:d6:60:cc:57:89:c9:13:bd:d5:d9:69:7b:
         6a:6a:f7:3d:4c:8c:02:41:45:92:f8:16:40:74:8a:5d:64:94:
         58:a8:c5:3e:37:59:c2:d0:a2:c7:0e:8a:ba:5e:4c:68:dc:7f:
         de:a3:a6:ca:58:27:91:18:d0:65:cf:b9:67:92:ab:09:d3:96:
         ff:91:f0:cb:87:8d:b1:df:24:25:98:c8:2c:98:f2:a2:73:8d:
         1f:5d:ac:3c:0f:ad:ea:5a:db:62:ba:c3:22:44:5d:e9:1c:e7:
         07:10:50:75:bd:66:81:e9:1c:74:cc:67:22:bc:e4:7b:4e:dc:
         1f:29:02:58:ba:b1:1f:01:79:44:2b:66:47:f2:89:c4:43:95:
         55:ee:aa:08:bd:fc:71:55:02:e6:99:20:d9:e6:ef:20:2a:94:
         2a:8d:9a:c4:e9:bc:1f:a2:31:35:7f:ac:2f:d3:6e:de:7f:4e:
         5a:69:f3:84:56:b2:c9:22:1c:ab:2f:fa:7e:98:da:04:ff:25:
         a7:05:06:02:f0:3e:0a:1e:ef:1f:b8:ea:bc:fd:88:60:a9:ff:
         3a:22:4d:af:47:59:e3:86:70:6c:62:cd:a1:f3:8b:f2:a6:55:
         20:e9:82:fc:bf:55:ca:33:9a:42:39:a1:1e:d3:21:0b:6e:9a:
         ee:2b:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:10 2026 by rpki-client