Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File:                     yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier:          JVfGbybrrVO1Lkxdm830pAiOK/5GbeEQVsHoWcekqc0=
Subject key identifier:   E1:00:BC:3A:54:08:13:57:B1:D1:CB:DF:54:E4:25:65:29:1E:19:E4
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer:       /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial:       019D2703EE3323D7260D38960D58C57B92B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 22:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:02 +0000
Files and hashes:         1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=)
                          2: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=)
                          3: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=)
                          4: nf4A4HCstvpa-65TJj04mTKWQoM.roa (hash: sgwGBrZAZly4O4y3WPWRW8wBHIIzPULSvh12WgBbRv4=)
                          5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: i/yD6n/Il+HUVBo9t7CGBKr3icCefBbKYXUtaUIcerU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ee:33:23:d7:26:0d:38:96:0d:58:c5:7b:92:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
        Validity
            Not Before: Mar 25 22:01:02 2026 GMT
            Not After : Mar 26 22:01:02 2026 GMT
        Subject: CN=e100bc3a54081357b1d1cbdf54e42565291e19e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:83:cd:1b:c4:6f:f1:33:8c:87:52:7d:94:
                    8f:c4:ea:7d:d6:d9:9e:a4:d8:f7:76:37:95:2d:fb:
                    19:f2:77:1e:04:d5:0e:7b:d6:df:5d:27:be:10:0a:
                    dd:aa:db:32:3c:2e:73:b9:18:6b:bb:e5:90:d4:5c:
                    4c:c9:94:7f:32:96:7a:28:1f:93:20:dc:ac:dc:b8:
                    1c:18:c2:86:e5:35:77:38:37:9b:f3:92:85:04:0c:
                    6d:5d:b4:78:3e:cd:17:66:6e:e8:1d:14:19:1a:7e:
                    03:9a:8d:ba:94:73:ec:42:8d:e9:5d:89:4b:39:db:
                    ae:25:31:17:3c:32:07:c6:bd:dd:6e:4c:ae:1c:04:
                    58:8f:58:04:12:38:f0:99:0d:50:ab:27:f2:28:91:
                    c6:64:8a:37:2b:1e:b3:9b:5c:59:be:55:8d:53:88:
                    6f:ef:9f:1b:f5:88:6c:70:a8:b2:42:0c:00:94:bb:
                    46:ff:06:7d:1b:70:be:c4:32:d9:ff:46:a6:14:ea:
                    90:fc:d5:50:87:de:05:dc:37:0a:fa:98:50:e7:b3:
                    25:04:ae:19:57:5f:9c:0d:69:4b:b7:69:7f:9d:4c:
                    26:7e:4f:7e:e1:b0:aa:23:e0:c8:d3:8d:79:45:a2:
                    4f:9b:b8:10:68:4f:dc:e6:f8:fc:c9:36:c0:9a:40:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:00:BC:3A:54:08:13:57:B1:D1:CB:DF:54:E4:25:65:29:1E:19:E4
            X509v3 Authority Key Identifier:
                keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:ee:f3:56:e2:20:b9:65:b0:04:ed:ff:65:e5:ff:49:6a:
         3c:86:37:58:e0:a7:d3:5f:4a:44:69:b9:12:62:62:a7:b6:2e:
         99:b7:90:90:56:bf:e0:15:ea:1d:93:3d:73:9d:fd:c9:fc:73:
         79:83:34:8d:1f:bf:40:00:04:b5:31:84:9d:60:87:60:a6:10:
         d3:19:ec:a6:2a:4d:ed:cc:51:7e:03:2f:1b:05:e7:0f:13:2e:
         22:88:4b:d3:fd:8b:5a:49:7a:52:1c:de:fa:da:e3:69:6f:3f:
         41:1b:b9:39:e7:32:e1:bd:19:66:44:f1:a5:9b:5a:9d:62:8a:
         4e:ce:5d:f3:a7:fd:34:9f:6c:7d:f0:5f:3f:39:be:d1:1e:6c:
         b8:4c:74:2d:fa:85:58:b4:87:a5:c7:49:93:f7:9c:01:89:94:
         29:41:4b:84:70:c7:58:52:32:82:c0:e1:60:cd:c6:57:2f:dc:
         2f:9a:61:76:71:e8:47:35:8e:40:18:26:f3:0f:9e:8e:41:76:
         59:46:70:73:b8:aa:af:b8:c3:e4:0d:51:c0:43:73:e5:d1:c5:
         a2:6b:30:ee:eb:37:32:fa:a4:78:5b:cf:b6:9a:60:b4:48:03:
         be:5c:74:e6:0a:1e:97:b0:f6:1a:5c:c1:34:71:d6:ef:dc:fe:
         e6:d9:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:37 2026 by rpki-client