Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
File:                     YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json)
Hash identifier:          ChR98WKUO0iCGCCsiXdQ02LDPK3fHWmiQgkLiG3THag=
Subject key identifier:   EE:BD:D1:D2:53:4B:56:EA:98:89:2B:0D:BB:7A:3A:E7:CF:D9:82:DA
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Certificate issuer:       /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial:       019D258375E56625370CF15B9B5BE0F950C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
Manifest number:          12BA
Signing time:             Wed 25 Mar 2026 15:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:05 +0000
Files and hashes:         1: EcW_O48U1pEZsJh2Yr_JjNu_BoA.roa (hash: DpEyN6B4Gr1R/kNYEeKdlcGh1b4/dNO0ftKb26rcLRo=)
                          2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: ekM8y+ygfe9skVvox5PqGm4Ob4k4inAzWhOqfBCpK0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:75:e5:66:25:37:0c:f1:5b:9b:5b:e0:f9:50:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
        Validity
            Not Before: Mar 25 15:01:05 2026 GMT
            Not After : Mar 26 15:01:05 2026 GMT
        Subject: CN=eebdd1d2534b56ea98892b0dbb7a3ae7cfd982da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:c5:80:af:ee:a8:42:18:55:a5:ea:0f:4b:
                    37:fd:65:d3:fe:9f:ba:7e:62:74:3c:cf:ac:aa:36:
                    54:86:25:91:19:76:e0:a2:eb:7a:74:bb:1b:a1:dd:
                    2e:00:03:a6:9f:b9:97:6c:d4:e4:25:1b:ae:87:ff:
                    5b:05:82:44:89:1c:7e:0b:0b:29:88:13:eb:b3:93:
                    00:14:c2:4a:90:3a:c9:ca:a7:f7:e0:16:75:7c:dc:
                    93:34:f8:b8:9a:e7:58:30:8e:59:c3:b8:ad:9c:d2:
                    9a:93:32:5a:52:63:6b:8d:14:86:98:44:bb:90:56:
                    20:5e:d4:03:61:be:74:62:9e:5b:54:4e:7b:cd:0e:
                    f8:35:96:0a:b9:d1:9f:8a:1d:5c:bf:18:ea:e7:da:
                    e8:f3:93:d8:ac:db:fa:7e:d4:c8:ce:76:24:8c:7d:
                    71:fd:ad:c6:de:e0:e5:2b:20:f0:56:63:83:05:8b:
                    5d:28:26:97:f1:fc:53:a5:72:6e:60:db:2f:21:15:
                    d9:50:94:2b:c7:68:7f:04:67:84:ad:c8:6a:17:04:
                    0b:85:9b:ae:be:8c:9b:cf:1a:28:3f:a8:b2:1d:73:
                    2f:e1:0d:c7:32:00:69:d6:42:83:9a:4f:8c:7a:5b:
                    fa:2f:47:8c:73:25:fd:92:68:37:2a:0e:20:d5:cd:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:D1:D2:53:4B:56:EA:98:89:2B:0D:BB:7A:3A:E7:CF:D9:82:DA
            X509v3 Authority Key Identifier:
                keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:52:2c:78:f4:64:86:6c:c0:1c:cf:49:3e:e7:20:81:78:3d:
         b9:bf:f9:60:0b:d4:1e:23:e5:c3:f4:81:a9:e4:6c:84:ce:8e:
         ac:31:66:ab:ce:b1:50:5f:f3:d6:b9:0f:b6:5f:3b:36:e4:85:
         cd:77:fe:3e:6e:8b:14:2a:ea:6b:c1:32:35:04:c4:15:d5:79:
         20:f7:9c:b8:b5:b3:ad:6e:15:33:63:46:3f:c9:89:d3:ab:aa:
         be:d9:3d:d1:6a:80:0f:ed:c0:99:47:f2:3e:b4:5a:7d:6b:18:
         52:e4:45:fb:13:34:67:1c:4d:af:73:9b:18:53:7c:ac:4d:c5:
         4a:e3:7f:1a:d2:7c:3c:ac:62:7a:90:44:ee:41:22:2b:d6:62:
         cd:85:26:e8:90:95:90:fd:ec:e4:1e:93:5d:28:39:60:a9:31:
         a5:12:67:94:2b:91:50:48:ee:53:48:49:5a:08:b3:39:91:80:
         88:21:eb:e4:e4:db:2c:5a:81:32:64:7c:13:cf:43:08:57:72:
         bc:ad:f8:09:b1:38:03:44:98:8c:59:a8:ca:23:87:fe:88:db:
         2b:a1:ef:88:06:40:2d:0e:3c:59:b8:e8:95:75:38:f5:4a:c1:
         1c:64:7c:0f:f6:31:a2:79:b3:61:21:9a:08:53:82:b0:f2:22:
         99:c7:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client