Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          A0wTziT+pRwq0gV4sYfqnEEs/XcVXGm19aKiNImRMmY=
Subject key identifier:   CA:A7:03:26:09:50:CA:6D:B5:98:B5:03:26:9B:BF:A4:8A:D9:A5:CB
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       019D2695D075A51A363C67B5B9F42CA4696B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1498
Signing time:             Wed 25 Mar 2026 20:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:45 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          5: tSkM6kNefyzWcq-Fe_mE4IRCVaE.roa (hash: 2epHrxdOpaEpNiQeQg138M3TB4rHHEC4AOBSXw7Qyrk=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: 3f7AX0bsW3BaNnMyoLbPf8ORD8VjdJWNym07nPZAato=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:d0:75:a5:1a:36:3c:67:b5:b9:f4:2c:a4:69:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Mar 25 20:00:45 2026 GMT
            Not After : Mar 26 20:00:45 2026 GMT
        Subject: CN=caa703260950ca6db598b503269bbfa48ad9a5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6e:87:12:0a:9c:b6:94:b9:4d:70:09:96:c9:
                    53:4e:9f:2d:27:2c:6e:93:58:53:33:e0:df:41:9c:
                    a4:87:04:33:c7:b8:d6:62:28:a5:d4:13:53:62:f1:
                    0b:bc:c7:f2:2e:b4:b5:6c:95:4f:f0:cb:d3:6a:30:
                    30:84:ec:25:c7:8f:0f:d4:c9:58:59:99:fe:e4:91:
                    eb:26:98:2f:6f:99:c3:b1:5d:01:27:81:9c:93:a7:
                    1d:b3:c0:1a:52:ba:65:6c:ee:b0:9c:c4:44:dd:be:
                    24:5c:33:37:1f:d2:36:79:7b:80:7e:0d:37:e2:19:
                    af:78:36:c0:8c:cf:4c:ef:10:08:72:57:a0:7a:47:
                    d0:82:d5:a3:7f:0c:f9:e4:20:b6:90:ec:34:86:04:
                    70:10:f9:a3:9c:a0:1a:0a:fb:33:03:29:52:1d:d6:
                    ed:9d:4d:10:84:b8:d1:de:39:a3:8f:e8:c2:c2:7c:
                    d6:98:14:98:1f:db:ab:f4:aa:d5:c3:79:6a:0b:97:
                    07:b0:61:77:14:1e:37:d1:32:91:31:26:12:8f:44:
                    cc:da:4d:c6:40:7a:fb:23:82:aa:b6:69:e5:af:56:
                    e8:5b:b8:fc:b1:64:8d:34:c5:54:cc:94:b8:a1:09:
                    12:d8:09:77:e8:21:82:d0:0c:a2:6e:25:19:c5:87:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A7:03:26:09:50:CA:6D:B5:98:B5:03:26:9B:BF:A4:8A:D9:A5:CB
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:62:3d:e8:11:e2:c7:8b:3f:50:2a:b1:2e:59:93:03:0e:
         1c:a0:78:42:f0:60:bc:34:e5:8d:8e:be:74:61:c0:1b:ed:63:
         ad:ca:2c:4b:8b:2b:01:03:48:5a:d6:5e:a2:f4:ac:6b:e3:08:
         06:20:57:b1:07:82:3d:65:61:b5:96:04:22:1f:f1:68:aa:2a:
         a1:1a:51:16:58:53:22:89:4f:95:81:f1:bf:78:d2:1f:bf:91:
         1d:21:4a:ff:0b:8c:1b:f3:4a:90:08:3a:2d:0c:f1:e4:3d:90:
         d0:56:0e:5b:7f:2c:5a:1a:f6:d8:01:76:95:c9:3e:fb:db:3b:
         48:50:80:ee:9f:3e:de:53:49:f2:26:22:4d:d5:75:f0:c3:7c:
         eb:2f:eb:a7:45:1e:99:46:c1:78:d3:fd:39:89:df:45:c9:39:
         73:ed:e3:48:0b:16:59:28:1d:a7:07:8c:f9:fd:47:95:e9:ed:
         84:9f:c1:f8:46:e3:36:00:dd:ee:93:ca:7e:f5:04:53:44:0c:
         8c:2f:95:0f:d8:5c:6d:28:be:46:5a:3f:c9:8f:b5:c1:d3:00:
         75:23:4e:e7:a1:a5:c9:a7:01:23:8f:71:c6:91:eb:26:b1:dc:
         fc:ba:8e:a6:d7:93:45:06:65:49:05:41:bb:9a:f8:0a:33:fe:
         84:cc:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:12 2026 by rpki-client