Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          ZYP+ksjVE//jbNunv+7xpyBURvJuOPWa/LNEdIeTiZ8=
Subject key identifier:   24:F2:68:A0:83:22:F1:25:89:D7:EC:6B:6D:40:A6:1B:59:50:AE:15
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       019D28F32EB14F6CD6E7DA06EF13CACA60A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 07:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:58 +0000
Files and hashes:         1: CTIK34W0gV9x3uv1-r0HDqxk6oI.roa (hash: yVsgO2IBgHOLaRgSGBJBDT5TTrMQD1SCcScxIYhY8XY=)
                          2: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: Qp3h2HQ/273lhCQCej/ll1xVo71hz/CpKUy+sSzjgT8=)
                          3: LegPI0LcRAcrLBTlGUY6DuF5bPU.roa (hash: NBAPRKnIYd+TgJ5/R1gZLE8ial4CZdJAp6oEz5nJrso=)
                          4: dZcFXy59OBgCvb8-LnAFu481H80.roa (hash: S71mkWocgYTtJLOJGQFJaSGFLZadtvbJJdWNegtQAMs=)
                          5: nffOhSPbCiWPAgtugzjWRyuC30E.roa (hash: ozFheVA8KcSrBcCrb3RelsPEg0hh8qk70m83xq3pSAo=)
                          6: sUCFmwpJav81ZSRKsG-SSJaCaxg.roa (hash: 9KxlfWrLv7YnnCH1Vf26DGRif8A8TjjKojTT9mB5Eaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:2e:b1:4f:6c:d6:e7:da:06:ef:13:ca:ca:60:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Mar 26 07:01:58 2026 GMT
            Not After : Mar 27 07:01:58 2026 GMT
        Subject: CN=24f268a08322f12589d7ec6b6d40a61b5950ae15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:99:28:6e:7f:fe:de:57:02:a2:9f:37:dd:
                    d4:e1:70:37:7b:1f:d7:0b:2f:35:39:93:c2:0b:49:
                    f6:d1:31:1d:6e:12:f9:25:41:e3:b6:24:a8:86:57:
                    bc:b4:2c:da:ff:f1:01:c9:78:24:a7:d4:dc:39:e4:
                    90:79:b7:f9:04:c0:a9:a1:05:63:03:99:d9:bd:df:
                    75:94:f3:a0:20:6c:99:c0:8e:85:40:91:0d:4f:4e:
                    f3:d6:84:e0:62:28:cf:0b:e2:a5:7e:cd:a4:8d:54:
                    e0:04:0c:a7:63:b8:fb:41:bf:a4:9d:43:32:68:30:
                    22:de:44:cc:d6:e0:57:87:61:95:3c:2c:bb:39:96:
                    85:d1:20:83:f7:8d:bf:67:50:0e:c9:c2:69:d5:42:
                    fd:c3:ed:97:f8:74:11:ae:5d:0d:02:83:54:72:24:
                    4f:29:5e:65:c2:0c:2a:06:e2:fc:53:63:6f:e7:9a:
                    70:07:71:af:77:d0:db:0c:1b:16:b3:10:f2:20:56:
                    be:9a:28:81:c6:ec:72:fc:70:9b:8f:86:aa:50:17:
                    22:80:d8:36:5a:29:9a:8f:4f:4b:11:db:88:57:a4:
                    3e:26:dd:28:01:cc:35:34:ab:6d:b6:a4:aa:77:fa:
                    ca:26:1d:68:c8:c6:c0:75:49:86:d2:87:64:81:1e:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:68:A0:83:22:F1:25:89:D7:EC:6B:6D:40:A6:1B:59:50:AE:15
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:93:20:bf:cb:04:ed:9b:97:a1:8c:b8:58:ff:68:8d:19:cd:
         d2:73:91:fc:d1:65:65:71:34:08:37:17:1f:0d:00:03:e1:f1:
         53:67:4a:31:05:8f:be:2c:77:f8:88:cb:4a:34:58:ab:90:46:
         6f:2a:99:43:1b:d4:4c:38:74:5b:a6:25:3e:df:9f:fd:5c:c1:
         6e:57:1c:7a:63:c4:0d:1e:38:b6:be:d9:65:17:89:8b:28:3c:
         8d:8b:e2:a6:c7:66:41:0e:33:d4:f2:d9:b6:e3:6b:6d:ea:15:
         00:f4:c5:f7:33:7a:cc:87:b0:65:cb:61:9f:8e:e4:85:09:dd:
         96:b9:a2:9a:65:4e:7b:7f:f6:53:ac:61:b2:50:75:f9:86:52:
         e1:90:c6:4e:e2:91:b5:bc:9a:08:ae:cf:44:94:69:32:ec:2b:
         26:12:7d:ca:2d:3c:b9:db:a2:0c:d7:d4:04:1b:74:3b:7c:bf:
         65:72:62:12:22:b2:5f:87:5b:9d:4d:d0:77:da:8d:de:82:27:
         30:0b:27:7f:36:ae:44:65:a2:5b:4d:5e:2e:67:00:4d:49:44:
         58:7e:5e:df:a4:51:c2:b2:4e:98:1d:69:5d:d3:2b:9f:55:fd:
         45:70:d8:5c:bf:03:5d:3a:3c:de:60:34:d0:8f:c0:ae:e6:b4:
         e6:52:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:34 2026 by rpki-client