Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          pfFkuhQn0ibD/dH8bz327dQ5D6Evyh53j3zpwCmMB8w=
Subject key identifier:   84:8F:F3:6D:39:25:D3:E5:FD:CC:99:3B:61:A5:16:C6:4C:2F:B2:AC
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       019D2627E61540A6FDE76A8D11143CB169B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          0819
Signing time:             Wed 25 Mar 2026 18:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:42 +0000
Files and hashes:         1: KO5O23gejTKwTsZBDSCos8cKKa0.roa (hash: 5r7rarpuE2p/gSB/Pi8UtJYwr7G/QPULfTLWSJ5jkjg=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: 0OpItvqVTfazGNGy5jloUzlv+snBzpcgAFj6rCxDVPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:e6:15:40:a6:fd:e7:6a:8d:11:14:3c:b1:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Mar 25 18:00:42 2026 GMT
            Not After : Mar 26 18:00:42 2026 GMT
        Subject: CN=848ff36d3925d3e5fdcc993b61a516c64c2fb2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:a7:7e:95:75:e1:04:55:35:ce:aa:df:2f:
                    63:6c:85:54:1e:23:bd:34:8f:62:ba:85:ff:f1:24:
                    df:60:67:4d:ad:d4:5e:97:75:7a:3b:2c:1b:d2:93:
                    78:83:4c:01:4a:30:2e:18:95:e8:44:3d:40:04:e1:
                    b6:b5:70:23:48:82:f6:78:07:3d:fd:56:af:ff:3e:
                    99:10:b0:e8:fa:97:fd:cf:b3:64:f3:43:09:c3:aa:
                    41:14:1c:6e:c3:b4:57:69:60:53:ab:0a:ab:94:5d:
                    eb:09:3c:f3:6b:9a:92:4f:65:20:83:12:ad:7f:84:
                    c6:59:39:a4:03:26:16:4f:b3:82:59:c5:1e:9b:b1:
                    9f:ca:bf:81:b2:b2:5a:d7:cb:d3:f7:ab:d7:ca:63:
                    13:31:e3:a7:f5:58:71:dd:6c:9f:ad:6c:26:5e:52:
                    b5:ae:b2:3c:cc:8d:eb:cd:07:fc:f0:4b:62:27:51:
                    79:cc:0c:18:93:c8:b0:a5:59:7d:b2:1d:b3:52:b0:
                    dc:d7:c2:a2:7d:2c:f9:12:57:96:ed:36:14:88:16:
                    d2:b4:a8:ee:a9:91:58:60:12:f3:1b:10:d9:60:ba:
                    39:51:8a:63:e7:d2:41:e9:b2:61:39:59:47:2f:7c:
                    00:78:05:53:44:8c:43:4d:99:b0:6f:15:ea:fd:e2:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8F:F3:6D:39:25:D3:E5:FD:CC:99:3B:61:A5:16:C6:4C:2F:B2:AC
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:ba:8f:1e:2c:ba:95:59:12:93:f1:4b:b2:82:e7:63:af:
         9b:51:e6:e7:1c:56:41:82:5e:51:2c:64:39:ea:ae:92:6a:09:
         3a:99:49:ab:80:8c:78:d4:22:26:4c:69:40:10:e2:49:c9:6f:
         0d:1a:da:2d:d7:85:82:44:a9:31:3a:22:bb:dc:f3:78:99:91:
         07:b5:5f:2c:58:58:f2:b8:29:ca:27:e1:19:e9:92:f8:40:af:
         c6:90:be:51:c3:85:f9:03:f9:35:61:23:62:e8:b5:da:6b:9f:
         29:e8:be:3d:50:d9:16:14:f9:63:fe:4a:33:1b:e6:b5:bb:0b:
         85:00:a2:e1:ca:cc:64:32:79:da:2d:2e:9d:8d:17:32:25:a9:
         48:28:ee:9f:10:d8:c5:fa:42:20:8e:a4:6c:87:7a:fa:f0:4b:
         61:d1:ff:6c:2c:c3:c4:ff:d1:f0:4e:50:e9:65:db:79:04:a9:
         74:3a:02:7b:88:97:c6:ba:d2:0b:67:83:bf:b6:2d:5a:38:05:
         3a:52:3f:43:da:48:18:db:6b:98:3a:1e:9a:57:db:24:6f:61:
         d0:6b:87:1f:a5:99:52:dd:0d:aa:67:b7:ca:24:a6:2c:12:13:
         d9:78:31:e2:f6:dd:0f:c0:47:fa:3b:51:16:70:fd:8f:db:29:
         11:60:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:21 2026 by rpki-client