Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File:                     yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier:          77rBdcU6gvWd4hAOCG8c520plTCVABVuHgLPkE4rLYc=
Subject key identifier:   BA:4E:5B:A5:49:62:E5:62:7A:57:B3:90:1B:03:30:86:62:00:02:CF
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer:       /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial:       019D26CCFE6EBD2105966F9E12B1824B8765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number:          03E3
Signing time:             Wed 25 Mar 2026 21:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:01 +0000
Files and hashes:         1: wD8_-hEjASCZZpotXoShnTDKTeU.roa (hash: eQRgbUsop5I6bDoMNdewwPQSLHLClo0n6vUjAG9/Tq4=)
                          2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: SvlDxoS1toMaqIjhJGN+HtpMpiuKj93ZvxTbbIaI75U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:fe:6e:bd:21:05:96:6f:9e:12:b1:82:4b:87:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
        Validity
            Not Before: Mar 25 21:01:01 2026 GMT
            Not After : Mar 26 21:01:01 2026 GMT
        Subject: CN=ba4e5ba54962e5627a57b3901b033086620002cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:90:14:16:45:5a:46:c5:11:84:42:94:ea:
                    e1:17:bd:ba:2e:05:d2:93:98:15:5b:40:b7:6f:e9:
                    fd:73:4a:cd:c8:8f:c8:ed:80:42:e3:fc:0b:b4:95:
                    ef:78:90:9b:4c:65:00:2f:ef:1f:84:48:e7:7f:4a:
                    4f:54:d6:de:34:7f:54:13:0a:9e:03:92:2b:01:e4:
                    48:91:d2:3a:28:1a:28:c1:ea:31:cd:28:eb:ae:3a:
                    0f:0d:82:3c:36:ba:9a:a0:fe:b1:1d:8b:a1:6f:5c:
                    5e:6b:f5:b0:d5:28:8b:c7:3c:1b:43:24:68:e4:7c:
                    0c:30:ba:04:33:2a:7a:0b:9f:84:4c:31:6e:b2:04:
                    28:f3:16:20:c3:39:ef:ef:39:83:89:39:6f:9d:4b:
                    68:7f:14:e4:75:b8:2c:62:41:e8:9f:0f:9c:ad:91:
                    49:f6:92:22:f7:4c:95:97:96:be:db:cc:28:38:98:
                    cf:8d:83:93:bf:38:de:f7:c8:fb:47:a2:9a:01:a3:
                    4a:23:8c:b1:67:77:3d:19:ac:dd:c2:f1:1a:a9:30:
                    b7:7b:bf:a7:00:2e:13:e0:ae:c5:fd:ec:61:29:95:
                    4a:92:87:2c:33:b1:bd:41:b9:fd:d9:35:2a:c9:9e:
                    13:bc:46:4a:6d:9c:71:98:e5:6b:26:13:c3:39:66:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4E:5B:A5:49:62:E5:62:7A:57:B3:90:1B:03:30:86:62:00:02:CF
            X509v3 Authority Key Identifier:
                keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:a8:a8:ec:ca:95:c7:d8:99:ad:2c:57:9b:08:30:be:21:
         79:7a:2b:13:d3:5b:40:e4:5b:db:cf:75:42:79:05:3f:c3:fb:
         94:f1:c5:76:50:2a:12:1f:f9:83:cb:11:8f:11:1a:92:37:15:
         48:90:c4:51:53:c8:43:95:0f:f4:4b:97:57:a7:ba:fb:33:a0:
         5b:b1:b7:5f:0d:3b:bb:bd:f5:7f:a1:82:5d:cf:40:36:8d:47:
         c5:09:f5:40:e5:b4:43:39:b0:5f:f8:aa:d0:9f:1f:8b:82:67:
         ce:7a:b2:8d:cf:ff:eb:f6:73:9e:4c:5f:ac:26:01:c3:ec:d2:
         39:e4:9f:d4:45:37:2e:21:d1:fc:af:c1:a4:e4:09:c0:68:63:
         45:6e:2e:82:c1:21:a9:b9:68:54:07:e5:71:99:77:9f:84:d6:
         d8:d3:ae:9b:5e:a0:3f:35:f9:bd:5b:6a:e9:c2:54:82:db:9b:
         89:ea:f4:98:29:d4:29:be:85:9e:ac:56:8c:67:03:49:8a:90:
         14:ef:fd:fc:ff:be:14:22:c8:dc:7c:64:8c:5e:bb:39:e3:98:
         ff:db:c3:ab:82:d7:91:6d:c5:3b:d7:d6:d3:ca:2d:56:e5:63:
         ee:54:a5:3b:96:01:7d:87:f2:71:d9:1e:30:d5:36:ab:5e:c7:
         9a:73:50:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzP5uvSEFlm+eErGCS4dlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWNjNGZlYmI0ODc5OTZkNGVlMDFkNTNiMTFmODQyMDNj
YTgzNjcwHhcNMjYwMzI1MjEwMTAxWhcNMjYwMzI2MjEwMTAxWjAzMTEwLwYDVQQD
EyhiYTRlNWJhNTQ5NjJlNTYyN2E1N2IzOTAxYjAzMzA4NjYyMDAwMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuOQFBZFWkbFEYRClOrhF726LgXS
k5gVW0C3b+n9c0rNyI/I7YBC4/wLtJXveJCbTGUAL+8fhEjnf0pPVNbeNH9UEwqe
A5IrAeRIkdI6KBooweoxzSjrrjoPDYI8NrqaoP6xHYuhb1xea/Ww1SiLxzwbQyRo
5HwMMLoEMyp6C5+ETDFusgQo8xYgwznv7zmDiTlvnUtofxTkdbgsYkHonw+crZFJ
9pIi90yVl5a+28woOJjPjYOTvzje98j7R6KaAaNKI4yxZ3c9GazdwvEaqTC3e7+n
AC4T4K7F/exhKZVKkocsM7G9Qbn92TUqyZ4TvEZKbZxxmOVrJhPDOWb5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpOW6VJYuVielezkBsDMIZiAALPMB8GA1UdIwQY
MBaAFMqsxP67SHmW1O4B1TsR+EIDyoNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGIt
YTdlZGM0Yzk5OTQ3LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGItYTdlZGM0Yzk5OTQ3
LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeuoqOzK
lcfYma0sV5sIML4heXorE9NbQORb2891QnkFP8P7lPHFdlAqEh/5g8sRjxEakjcV
SJDEUVPIQ5UP9EuXV6e6+zOgW7G3Xw07u731f6GCXc9ANo1HxQn1QOW0QzmwX/iq
0J8fi4Jnznqyjc//6/ZznkxfrCYBw+zSOeSf1EU3LiHR/K/BpOQJwGhjRW4ugsEh
qbloVAflcZl3n4TW2NOum16gPzX5vVtq6cJUgtubier0mCnUKb6FnqxWjGcDSYqQ
FO/9/P++FCLI3HxkjF67OeOY/9vDq4LXkW3FO9fW08otVuVj7lSlO5YBfYfycdke
MNU2q17HmnNQdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:37 2026 by rpki-client