Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          oIXdzYg8cxiU6601McmSg7MEEI7Wl7uD67sK1MyaFag=
Subject key identifier:   AE:E7:7F:B9:1B:7C:93:EF:D4:EA:B0:C9:DA:1D:7B:A6:CF:7F:B4:E9
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       019D27DFA809E95893A146FE4CE196D76319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          0737
Signing time:             Thu 26 Mar 2026 02:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:02 +0000
Files and hashes:         1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: /E6VtdGOIdleLb6TOvzmLDQWpCBW9vtkDmft+iYTG6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:a8:09:e9:58:93:a1:46:fe:4c:e1:96:d7:63:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Mar 26 02:01:02 2026 GMT
            Not After : Mar 27 02:01:02 2026 GMT
        Subject: CN=aee77fb91b7c93efd4eab0c9da1d7ba6cf7fb4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:77:4e:75:a6:d1:35:56:11:24:18:4b:67:
                    5f:97:c2:a7:4f:e6:0b:07:01:68:ef:c4:ee:03:3e:
                    95:14:35:3d:d6:07:43:24:bd:dd:a3:ba:e7:a9:a6:
                    e1:f7:e1:54:4d:72:9e:96:73:75:8e:a0:f7:c5:fb:
                    ae:16:bd:3d:62:67:06:94:4e:4e:62:c6:ec:9a:29:
                    03:bc:9b:b5:37:d3:39:93:b8:87:ae:72:a8:b2:5e:
                    c4:bb:5c:2e:e0:49:cc:7c:2b:4d:ac:52:b9:f5:cf:
                    6b:e4:64:6d:c3:c3:02:bd:25:bd:40:93:da:21:30:
                    b2:1f:23:df:00:2a:33:fd:10:bc:83:c2:e9:83:b6:
                    d9:23:be:20:87:26:19:8d:01:ec:ea:54:86:78:98:
                    41:11:a6:b2:62:cd:3a:48:a4:cc:ae:65:6e:f8:f9:
                    8c:b6:d3:18:a3:16:49:2e:84:f5:f0:f7:95:81:1c:
                    20:11:02:2e:c6:aa:af:76:ca:f1:a7:a1:96:47:82:
                    6d:f3:eb:fc:e0:8b:79:38:eb:92:47:9d:87:ea:64:
                    47:88:5e:0e:93:ad:3f:eb:6b:8c:3b:46:67:e9:44:
                    85:8b:4c:7f:1c:5e:bc:47:57:3f:b4:25:3e:05:07:
                    5b:5c:8f:c0:e0:97:3a:39:fa:22:d4:ae:51:bd:86:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:7F:B9:1B:7C:93:EF:D4:EA:B0:C9:DA:1D:7B:A6:CF:7F:B4:E9
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:16:b3:19:90:52:33:98:db:59:64:3b:a9:f3:9e:a3:21:
         36:c9:11:23:32:a9:3d:1d:2c:9f:e1:b0:5b:cc:1f:fd:4b:59:
         6c:b5:6f:f9:99:e2:45:6f:a3:1a:7b:d2:f2:63:0c:50:73:d2:
         cf:04:13:88:6b:0c:af:cc:eb:33:94:14:90:ea:92:00:2a:07:
         42:d7:f6:92:45:5d:9f:3d:fe:6d:9e:68:75:4c:21:43:68:02:
         f0:74:66:c6:43:0c:3b:f0:42:93:83:af:9c:a4:2c:fe:79:5a:
         af:75:e8:15:54:ca:b3:82:bf:e3:70:d2:45:84:2b:ce:70:a8:
         3c:0b:9f:6d:9e:77:66:1f:b6:8f:7d:e9:af:52:6c:74:19:fc:
         a7:37:88:3b:81:4e:02:17:5a:d5:6c:4a:a2:f0:3d:39:14:8c:
         c1:6d:07:b0:c1:63:66:73:d4:c2:29:77:26:91:9f:ff:dc:cc:
         68:ab:c8:77:88:f4:80:ac:60:82:4d:dc:3d:56:36:a3:4b:07:
         52:cb:c0:ba:85:0e:30:4e:49:1f:a8:d2:ee:1d:e5:d6:cd:f8:
         41:71:43:13:d1:8a:89:db:1f:6b:db:28:39:08:8d:1c:52:75:
         a3:5f:a3:5f:82:94:8a:d3:aa:a2:a4:1a:79:aa:9d:b2:92:18:
         6d:64:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:34 2026 by rpki-client