Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File:                     2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier:          eyeEOFompIkfpHPPqrHkbF38u1EXvcr/K3lpEMoQ7jA=
Subject key identifier:   15:08:E1:3E:EE:F2:FB:1E:3E:32:F3:C4:31:5C:BE:B3:DA:38:B6:CB
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       019D284E500CF5BEB5EA8821A9E06145781A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number:          15F2
Signing time:             Thu 26 Mar 2026 04:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:54 +0000
Files and hashes:         1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
                          2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
                          3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: z7I84kwNcAQ/GZauz6nkBMr4Xf5quDAdMxfV+isuTlA=)
                          4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
                          5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
                          6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
                          7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
                          8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
                          9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:50:0c:f5:be:b5:ea:88:21:a9:e0:61:45:78:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Mar 26 04:01:54 2026 GMT
            Not After : Mar 27 04:01:54 2026 GMT
        Subject: CN=1508e13eeef2fb1e3e32f3c4315cbeb3da38b6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:99:b9:08:ba:c3:81:6a:f3:77:da:7b:f9:
                    e9:21:fd:08:08:71:66:62:ca:10:87:d1:5a:87:4d:
                    72:17:c3:bf:9f:d6:0c:32:c5:96:8d:d0:21:05:ba:
                    9b:82:02:41:b9:01:88:22:d7:74:fe:82:10:64:8b:
                    3f:fa:b0:c0:a3:e7:23:0d:10:18:3a:19:4e:32:ef:
                    fe:7d:7f:2a:32:6b:19:e9:f1:43:49:c7:e0:24:93:
                    89:a1:03:68:95:00:87:6a:c2:77:e4:23:b8:1e:57:
                    18:ce:bb:c0:90:a7:9d:3a:38:12:03:87:57:76:36:
                    be:1f:32:29:58:be:c0:70:c2:6f:57:41:f2:bc:88:
                    37:80:72:44:61:96:93:cf:06:4d:d8:af:d0:36:ab:
                    43:f8:2c:18:de:97:c8:a5:df:89:e3:bf:a0:4f:48:
                    08:14:59:14:8f:10:9b:58:87:fa:b5:af:0d:b0:26:
                    fb:9c:b8:fb:11:54:57:99:b6:67:4d:d2:e8:62:0f:
                    9a:aa:b4:b4:58:04:81:3c:7c:d9:6c:69:18:b3:8c:
                    84:d0:d9:26:63:58:e4:a8:cb:9b:38:b1:ec:e5:c4:
                    e7:3b:c1:fa:52:6e:70:9f:df:e3:27:2f:17:fd:b8:
                    c1:e2:ea:cf:79:fd:b8:ba:eb:7e:54:8e:ef:3d:4c:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:E1:3E:EE:F2:FB:1E:3E:32:F3:C4:31:5C:BE:B3:DA:38:B6:CB
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:aa:58:cc:d1:73:25:8f:6f:23:23:2c:05:1a:09:c7:2d:
         89:e6:69:11:d5:b7:88:d4:f6:1c:7e:88:d6:8d:99:61:1f:f7:
         d2:89:c5:cb:e7:ef:8b:b9:f9:73:6a:16:0f:f9:54:8c:41:18:
         40:54:23:8a:95:c6:26:a5:fc:69:3f:c3:49:3d:48:db:6f:8f:
         10:4c:7a:39:f9:26:fa:17:37:ad:bb:93:36:d6:59:2b:1f:ec:
         70:96:06:8c:2f:23:96:8d:15:8c:27:5e:4e:4e:d6:56:8b:8d:
         6c:8a:e0:d4:6b:82:9e:40:00:7f:f3:d5:e6:73:b1:23:62:48:
         a0:55:78:d6:ed:d4:de:de:b8:04:e1:b5:c7:28:d7:0d:a1:4a:
         95:8b:d1:11:6d:a9:e6:a0:3d:a3:87:5f:2c:07:c1:95:92:e1:
         ce:16:98:fa:d8:6d:ed:8e:3f:78:98:7a:d0:1e:77:fa:0a:60:
         55:b6:41:a9:de:71:dc:5a:10:d5:73:2b:9f:ee:64:2d:20:ba:
         ea:cc:27:a5:ac:55:53:b5:28:53:60:2c:ab:3c:ce:31:50:d2:
         7c:65:fc:6a:18:41:e1:19:dc:14:ff:75:f7:2b:d9:0d:2a:8e:
         54:bb:98:de:f3:e2:ed:df:a6:c2:47:c3:61:ed:2a:d9:6a:4e:
         c4:fa:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:49 2026 by rpki-client