Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          U290n5CkEEQ++8pPHbMpnP/wGr3ozG0KlY7ROJwPAvc=
Subject key identifier:   6A:1D:80:8E:AE:1C:01:06:75:CC:7C:5D:EA:57:04:36:BB:45:37:AC
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019D2816E7F4D8F6AE5B2B3FB0202E1E411F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0C51
Signing time:             Thu 26 Mar 2026 03:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:22 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: XU6b7eJt430IWunGZ/+zzujLcgWu3f2vQvtGK5Z5o1o=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:e7:f4:d8:f6:ae:5b:2b:3f:b0:20:2e:1e:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Mar 26 03:01:22 2026 GMT
            Not After : Mar 27 03:01:22 2026 GMT
        Subject: CN=6a1d808eae1c010675cc7c5dea570436bb4537ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:38:de:d1:f4:e1:1a:c2:b1:24:d9:db:9a:
                    83:a0:94:a1:89:42:6a:dc:e7:d1:44:a4:b4:b3:95:
                    c9:63:54:c8:27:3a:c0:42:6f:8e:a3:19:f8:dc:37:
                    82:b9:ed:d7:4a:8d:8a:f8:48:c6:90:ec:18:a3:c4:
                    2c:5f:ba:3b:eb:0d:14:ec:a4:4f:dd:4a:68:8d:73:
                    cf:a1:2b:d4:7c:bc:89:8c:24:fe:2f:8e:f8:53:e0:
                    de:bd:19:d0:f1:58:08:c3:8f:fd:58:0e:3f:d6:01:
                    9c:36:67:40:4e:39:6a:52:7e:4b:02:67:f9:18:4c:
                    38:5a:84:c9:d2:89:1c:ec:b1:1c:ca:32:a7:37:55:
                    aa:ec:3a:3b:f7:81:1e:8a:19:ba:17:0c:2b:a6:2f:
                    a4:0c:0f:37:b2:6a:5c:a3:a9:3b:dd:c2:7d:8d:32:
                    c2:2b:3e:2c:8c:03:74:68:d2:ec:31:91:13:e6:6c:
                    8d:b6:92:50:26:c3:64:0c:8c:89:22:a2:28:62:6d:
                    16:d8:f1:54:9d:5b:3b:e6:b0:db:62:ca:b0:d3:89:
                    02:b6:1e:ee:48:b7:6d:e7:3d:5e:54:d5:f4:7d:45:
                    6f:fe:b5:65:b9:8e:a3:5a:f5:a3:27:ce:9d:87:3c:
                    7d:60:30:52:6c:78:9c:72:37:90:8d:53:f3:8c:7c:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:80:8E:AE:1C:01:06:75:CC:7C:5D:EA:57:04:36:BB:45:37:AC
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:42:e7:25:a2:47:02:ee:5d:eb:96:a9:f9:b5:89:c4:1e:
         3c:41:1d:a3:4d:66:e3:a8:51:54:25:31:74:ef:37:20:3c:df:
         99:a5:d0:84:75:25:c0:71:b9:48:2b:40:53:62:2f:b7:50:68:
         9a:19:8d:ca:37:7d:75:ca:de:55:c7:f2:1f:98:23:96:3d:ca:
         41:ce:0b:20:73:28:82:a4:18:fc:ba:ec:c8:47:9d:04:c3:68:
         9f:a9:14:b2:ef:3e:7d:73:03:06:a2:d7:bc:ba:02:f5:c9:eb:
         24:2f:e0:33:c7:34:b6:c8:10:d2:f8:67:12:40:03:57:62:2e:
         72:21:d5:0e:9b:0b:05:0b:25:66:45:56:bf:99:32:80:f3:25:
         e3:97:28:4e:e1:dc:ca:b0:36:7a:73:6f:56:c3:a2:23:ee:5e:
         72:f4:a9:b0:39:78:5d:4f:25:68:71:e7:2c:ae:5b:80:05:04:
         65:e7:1d:a4:66:d0:51:07:67:41:3b:f2:78:92:0f:51:ee:ca:
         f4:5b:57:40:eb:a7:4b:dd:f1:ac:a2:7a:4b:b7:9d:0c:5a:43:
         a1:51:6a:29:2c:94:e0:8b:e3:14:33:17:05:58:bd:d6:68:44:
         68:41:91:af:f4:14:d0:16:89:77:c0:93:16:0b:df:c7:32:96:
         fd:58:53:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFuf02PauWys/sCAuHkEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3
OTZjMjgwHhcNMjYwMzI2MDMwMTIyWhcNMjYwMzI3MDMwMTIyWjAzMTEwLwYDVQQD
Eyg2YTFkODA4ZWFlMWMwMTA2NzVjYzdjNWRlYTU3MDQzNmJiNDUzN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YE43tH04RrCsSTZ25qDoJShiUJq
3OfRRKS0s5XJY1TIJzrAQm+Ooxn43DeCue3XSo2K+EjGkOwYo8QsX7o76w0U7KRP
3UpojXPPoSvUfLyJjCT+L474U+DevRnQ8VgIw4/9WA4/1gGcNmdATjlqUn5LAmf5
GEw4WoTJ0okc7LEcyjKnN1Wq7Do794Eeihm6Fwwrpi+kDA83smpco6k73cJ9jTLC
Kz4sjAN0aNLsMZET5myNtpJQJsNkDIyJIqIoYm0W2PFUnVs75rDbYsqw04kCth7u
SLdt5z1eVNX0fUVv/rVluY6jWvWjJ86dhzx9YDBSbHiccjeQjVPzjHybpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGodgI6uHAEGdcx8XepXBDa7RTesMB8GA1UdIwQY
MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt
OTg4MGYwNGRiOTRhLzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh
LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATilC5yWi
RwLuXeuWqfm1icQePEEdo01m46hRVCUxdO83IDzfmaXQhHUlwHG5SCtAU2Ivt1Bo
mhmNyjd9dcreVcfyH5gjlj3KQc4LIHMogqQY/LrsyEedBMNon6kUsu8+fXMDBqLX
vLoC9cnrJC/gM8c0tsgQ0vhnEkADV2IuciHVDpsLBQslZkVWv5kygPMl45coTuHc
yrA2enNvVsOiI+5ecvSpsDl4XU8laHHnLK5bgAUEZecdpGbQUQdnQTvyeJIPUe7K
9FtXQOunS93xrKJ6S7edDFpDoVFqKSyU4IvjFDMXBVi91mhEaEGRr/QU0BaJd8CT
FgvfxzKW/VhTQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:57 2026 by rpki-client