Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File:                     YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier:          9+tyOpL36v46UUtVl3UQ7aby7g11b4DAvWXeenXcK7I=
Subject key identifier:   F8:F2:49:BA:45:70:CC:FD:62:61:6D:AE:CB:0D:86:48:D3:38:A0:E8
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer:       /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial:       019D26CD8FC5E56A15FB70A7C3616AF363CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 21:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:39 +0000
Files and hashes:         1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
                          2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
                          3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: xESEC9Fvuy0DA7Tt4gD8L2VTnd6iAP1Egz005jZak10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:8f:c5:e5:6a:15:fb:70:a7:c3:61:6a:f3:63:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
        Validity
            Not Before: Mar 25 21:01:39 2026 GMT
            Not After : Mar 26 21:01:39 2026 GMT
        Subject: CN=f8f249ba4570ccfd62616daecb0d8648d338a0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:ff:19:9d:0b:26:fb:f2:4b:ce:42:d7:9b:
                    ca:f1:14:5b:d4:7e:bc:04:86:a7:24:b6:5c:18:30:
                    04:e2:3b:05:c5:08:bb:c1:8b:32:ae:e2:c5:de:f0:
                    c3:ba:55:42:8e:6c:f1:fb:0b:41:ad:90:56:0c:29:
                    69:6a:01:5d:5b:28:36:26:0e:5b:b0:d5:35:15:54:
                    ae:eb:2d:36:99:63:8d:09:02:48:ce:5d:23:89:92:
                    72:e4:06:df:6b:bd:10:91:8b:8b:d7:c1:16:b4:11:
                    fe:ff:eb:3c:fd:01:e8:1e:ad:48:5f:86:d5:d3:1a:
                    b4:c7:2b:04:e3:2d:ab:a3:0c:62:93:e6:71:53:de:
                    67:ff:36:aa:2d:2f:ed:b0:c7:7e:bb:fa:a3:9e:05:
                    11:9d:27:ab:3c:ad:cd:39:1b:a1:b6:db:fe:e1:0c:
                    df:89:ab:a8:05:6a:5b:5b:c7:de:9b:c8:55:6b:9b:
                    c3:78:23:21:67:d6:75:bb:8e:b4:c4:3e:57:41:f6:
                    b1:07:e1:ef:6f:2d:7e:e3:3b:05:92:fa:3f:a9:92:
                    19:ba:e3:26:4a:10:46:a2:b2:54:44:46:58:40:e7:
                    53:aa:c2:ce:25:eb:9c:31:88:77:f5:e7:57:f0:0a:
                    e5:a5:c3:51:79:65:3e:a9:da:a7:6d:31:a1:27:1d:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:49:BA:45:70:CC:FD:62:61:6D:AE:CB:0D:86:48:D3:38:A0:E8
            X509v3 Authority Key Identifier:
                keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:bd:cb:45:e5:c0:3c:6a:47:ea:14:19:d3:a8:12:83:50:
         eb:81:96:96:62:b0:93:e4:ce:78:1a:18:66:c8:5f:b2:9c:03:
         aa:0d:89:2a:29:14:d8:cc:c2:42:df:e8:7e:89:39:1c:cb:1f:
         b0:ed:49:bc:9f:4a:da:bd:d6:2c:e2:ca:4f:2f:0b:7d:13:6b:
         70:98:38:40:a5:1c:09:1f:c8:37:a4:a5:90:ad:2e:e3:72:23:
         d2:53:49:d3:d9:f1:82:c5:9e:1b:fa:56:2f:de:ad:60:ae:de:
         98:14:77:2a:e7:ce:79:ee:98:93:91:9a:7d:cb:9f:9b:3d:58:
         7c:48:9e:39:8f:e0:25:e6:0c:bd:f2:d4:3a:e5:89:f1:ea:dd:
         ef:47:6d:0e:3c:c1:93:3f:e2:a2:8b:42:51:c4:29:d1:dd:93:
         f4:e8:d9:dc:81:38:4b:63:58:a3:f2:87:6d:9d:41:49:b3:60:
         44:23:37:6e:79:a4:17:89:6e:e8:e0:00:da:f7:8e:f3:dd:7f:
         0a:63:e2:b4:7d:1b:12:cd:12:28:2b:fd:fd:cc:5e:0e:2c:db:
         1e:f8:67:b5:d5:2b:40:02:f4:93:3b:2a:3e:8b:7d:6e:4a:8c:
         6d:33:fb:14:e8:e6:c4:43:71:99:22:73:ba:fc:32:7a:cf:74:
         e5:72:6a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzY/F5WoV+3Cnw2Fq82PMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZDBiMDIwNzYwM2JlNDNkODQ5MmU5ODUxMzc4YjhiNGYw
OTU5NGYwHhcNMjYwMzI1MjEwMTM5WhcNMjYwMzI2MjEwMTM5WjAzMTEwLwYDVQQD
EyhmOGYyNDliYTQ1NzBjY2ZkNjI2MTZkYWVjYjBkODY0OGQzMzhhMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9P/GZ0LJvvyS85C15vK8RRb1H68
BIanJLZcGDAE4jsFxQi7wYsyruLF3vDDulVCjmzx+wtBrZBWDClpagFdWyg2Jg5b
sNU1FVSu6y02mWONCQJIzl0jiZJy5Abfa70QkYuL18EWtBH+/+s8/QHoHq1IX4bV
0xq0xysE4y2rowxik+ZxU95n/zaqLS/tsMd+u/qjngURnSerPK3NORuhttv+4Qzf
iauoBWpbW8fem8hVa5vDeCMhZ9Z1u460xD5XQfaxB+Hvby1+4zsFkvo/qZIZuuMm
ShBGorJUREZYQOdTqsLOJeucMYh39edX8ArlpcNReWU+qdqnbTGhJx1MpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjySbpFcMz9YmFtrssNhkjTOKDoMB8GA1UdIwQY
MBaAFGDQsCB2A75D2EkumFE3i4tPCVlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDIt
ZjQ5ZmVhNTQ1ZTc4LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDItZjQ5ZmVhNTQ1ZTc4
LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8e9y0Xl
wDxqR+oUGdOoEoNQ64GWlmKwk+TOeBoYZshfspwDqg2JKikU2MzCQt/ofok5HMsf
sO1JvJ9K2r3WLOLKTy8LfRNrcJg4QKUcCR/IN6SlkK0u43Ij0lNJ09nxgsWeG/pW
L96tYK7emBR3KufOee6Yk5Gafcufmz1YfEieOY/gJeYMvfLUOuWJ8erd70dtDjzB
kz/iootCUcQp0d2T9OjZ3IE4S2NYo/KHbZ1BSbNgRCM3bnmkF4lu6OAA2veO891/
CmPitH0bEs0SKCv9/cxeDizbHvhntdUrQAL0kzsqPot9bkqMbTP7FOjmxENxmSJz
uvwyes905XJq+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:42 2026 by rpki-client