Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          WR45Aamz+HEC2Oz/wND8qndQO2dbU/wTSO33X8Vb0W8=
Subject key identifier:   35:67:FC:8E:11:BC:99:44:B0:ED:44:71:DE:A2:C7:C0:91:69:21:B0
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       019D27A8F61DC8347E8C57E6C4BF9F312E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          1317
Signing time:             Thu 26 Mar 2026 01:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:17 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: FdkxvbKU1uxNdCzaXBLwDrtRMgCRG+Yk3uQMCyFccA4=)
                          2: 934_D2624JIRUsZNBmmDTwpOWXo.roa (hash: FiP3d7XAuc29ocbFIBjW+4Kw4lfkwQpzO2BLBNwTB5I=)
                          3: B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa (hash: BvIksHHAQXEVjtiNQOfNtwSiFiMBb9MNFSH1VLW/crc=)
                          4: dr_QiPF5RowLmkVtFEqA--mi4Yo.roa (hash: kdVHR+HAMcUUf+nW4Adtpm5itFV2D+pTwJDkCvYO2eY=)
                          5: rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa (hash: Z9tQA5QlYDpA+1bJUxMIqjwvzdSZlaSgBvZRFq8GUrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f6:1d:c8:34:7e:8c:57:e6:c4:bf:9f:31:2e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Mar 26 01:01:17 2026 GMT
            Not After : Mar 27 01:01:17 2026 GMT
        Subject: CN=3567fc8e11bc9944b0ed4471dea2c7c0916921b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:7a:f9:f1:c1:4d:de:6d:ee:ff:75:28:06:
                    c1:6c:a7:6a:5e:0c:58:29:07:7d:a6:b7:c9:0b:53:
                    22:78:84:77:47:e4:0a:be:27:56:e5:66:08:55:02:
                    19:59:b3:dc:25:20:46:93:c8:45:3f:a7:47:b3:89:
                    50:57:4b:e4:5b:9e:42:70:b2:c9:50:1d:49:c2:8b:
                    19:96:8c:45:d9:5c:04:91:4d:ea:9a:da:9d:a2:a6:
                    b1:63:4b:d3:56:5f:ae:d8:e4:27:11:fa:17:13:31:
                    88:f8:51:38:c6:80:8f:ac:98:1f:69:83:50:32:06:
                    17:c3:a1:71:e4:de:17:36:f6:16:10:61:d5:86:37:
                    34:a3:52:07:cf:70:89:15:fc:10:ff:d7:02:c9:f4:
                    e2:7e:46:89:1a:c1:f2:c7:6b:f5:15:e3:87:15:f1:
                    ea:d7:73:61:84:6c:db:2d:ba:61:f3:13:c5:1a:e7:
                    ae:cc:6b:70:6c:14:fb:d0:ba:27:b7:52:35:ad:43:
                    c4:59:ad:22:24:9f:4e:0d:89:a1:b8:65:73:bd:e6:
                    23:7a:d5:44:70:1a:34:85:ca:ad:b1:91:0c:29:cd:
                    d4:89:ff:a5:29:00:15:01:8d:e3:60:3a:5d:10:ed:
                    99:b6:c4:86:4a:b7:aa:25:62:a9:77:b9:ad:33:3a:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:67:FC:8E:11:BC:99:44:B0:ED:44:71:DE:A2:C7:C0:91:69:21:B0
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:26:e4:28:46:6b:bf:13:05:a9:9f:98:ac:70:99:15:a7:6c:
         e3:4f:c7:91:0d:b6:1c:c2:5f:9e:2a:a5:f0:c4:42:2e:4e:2c:
         5c:4c:4c:fe:5b:4c:5c:af:84:15:c4:0e:60:20:d4:26:86:cc:
         a3:ae:da:18:5b:b0:fc:e9:a5:e7:67:01:a5:5e:0a:15:5d:82:
         c0:8e:b5:ba:cc:aa:7e:c4:b4:a0:ee:80:53:2c:01:13:f5:2e:
         39:97:9f:26:22:a3:3f:b5:9e:4c:46:ec:3f:9c:a2:a2:a3:8f:
         a7:91:f7:7e:87:07:c1:9d:19:16:45:e1:16:3d:c1:b6:d4:9d:
         29:20:5a:fb:2b:fa:a7:c4:aa:85:e8:1c:2b:23:29:07:49:69:
         31:61:99:d2:ec:20:ad:5e:fa:3a:da:0e:19:d6:63:e0:b0:6e:
         de:b4:90:4f:8e:e8:91:c2:27:99:19:95:c8:d7:5c:c9:4f:67:
         e8:30:0e:33:c8:a1:1a:9d:80:1a:59:2f:bc:4d:99:a7:83:92:
         d6:63:25:4b:e2:a5:e0:a8:c0:1b:4f:0b:67:41:ea:e3:0c:97:
         d4:a1:9c:a9:d5:90:e7:67:f3:ed:1f:34:ea:44:0f:96:48:04:
         dc:87:2e:f0:ae:35:96:89:ca:b3:d5:0c:48:e2:14:b5:bf:78:
         c6:4c:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:38 2026 by rpki-client