Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          PBE+hgfCR74lzsH2gTwtQLZmuVMgPoS2KSKoZuiQldA=
Subject key identifier:   82:FD:8E:F8:26:A2:D4:50:DC:F8:93:35:35:7E:68:67:56:60:C3:AF
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       019D2704D3D3EFED69CFC7AC91F98F6347CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 22:02:00 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:00 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:00 +0000
Files and hashes:         1: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (hash: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc=)
                          2: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (hash: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo=)
                          3: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (hash: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: wIOeUFD89EqebWNwDy3e5maCX17t620yzh0MJRXsrAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:d3:d3:ef:ed:69:cf:c7:ac:91:f9:8f:63:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Mar 25 22:02:00 2026 GMT
            Not After : Mar 26 22:02:00 2026 GMT
        Subject: CN=82fd8ef826a2d450dcf89335357e68675660c3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:f9:9c:01:31:5a:13:33:b1:94:bd:4a:54:
                    27:67:61:e6:94:09:f2:92:0f:b6:2f:10:22:2a:6f:
                    75:36:2e:76:68:f0:a8:26:1a:2d:27:ef:37:ab:2d:
                    2c:d0:43:c9:84:af:9a:70:58:60:84:f8:0e:05:06:
                    de:26:8d:1c:6b:cb:5e:ca:94:7c:b8:69:09:f9:54:
                    b9:c8:f0:54:cb:d9:de:73:a0:05:da:09:31:60:10:
                    76:a4:a8:6d:59:95:0c:af:f0:71:5c:5e:6d:6b:b4:
                    18:eb:09:20:10:f8:1f:5a:c9:b0:cd:4d:df:b8:7f:
                    eb:70:d6:56:40:13:d3:a8:f3:aa:85:1e:5c:c7:79:
                    d7:06:4f:fc:e6:27:27:4b:22:84:f4:f7:8b:ee:f6:
                    10:34:ae:3a:f0:a9:9c:0e:25:78:78:30:1b:cf:6e:
                    2c:f7:e6:c8:fc:a7:ef:c6:90:16:03:a9:76:02:c3:
                    14:66:eb:0b:1d:a4:ef:1b:18:5c:fa:63:e7:c8:8b:
                    24:a0:33:33:2d:c5:3e:ae:19:66:37:9a:48:42:12:
                    3d:51:3a:fa:4d:47:c8:7f:5e:b6:c2:1b:bc:1c:23:
                    ba:78:35:52:91:e4:b5:5f:67:91:f8:d3:7c:8b:d1:
                    4a:7d:5e:97:70:dc:be:43:0e:c7:24:4c:23:20:2c:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:8E:F8:26:A2:D4:50:DC:F8:93:35:35:7E:68:67:56:60:C3:AF
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:79:f2:98:33:7d:40:b7:fc:20:59:c7:e3:0b:dd:50:4d:
         ab:5d:07:85:3c:f3:30:8a:68:d4:13:dc:69:c2:d4:df:20:08:
         f8:ae:88:db:cb:62:3a:76:18:9d:a9:37:83:22:73:e6:b3:d4:
         ad:e9:33:97:9a:30:ea:d8:58:c8:d6:17:18:45:8e:dc:84:86:
         a8:8b:0a:72:68:bb:cc:54:9b:85:d4:43:57:3b:05:c9:b6:ca:
         fb:9b:7e:1c:c5:7d:15:ad:36:4c:7f:b3:1d:d6:cb:16:22:e6:
         9f:bb:b1:0c:50:73:f0:c3:ae:f1:92:ad:fa:8b:80:99:14:4d:
         97:37:de:47:15:02:7b:36:e3:ca:37:5c:c8:16:0e:3f:9e:61:
         b0:87:f2:32:e9:21:90:03:47:2b:b2:4d:d4:f6:06:eb:32:4d:
         70:dc:d9:cc:b7:38:95:a6:6d:de:92:91:12:88:eb:2f:72:94:
         31:40:33:00:c0:ed:7e:53:87:94:e3:22:b1:a1:5a:5b:63:f5:
         7c:8b:6d:68:ac:04:d9:02:ab:80:47:8e:94:c7:6d:5a:9d:d3:
         00:96:89:a5:ef:e2:d1:b2:fb:8b:95:6b:70:f3:11:94:29:7b:
         8d:95:b2:00:b5:b7:0b:35:2b:80:73:76:ec:62:b2:83:0a:92:
         e1:9a:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:28 2026 by rpki-client