Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          p9hgMK2jiAcCLrtt1n2Ko7++gktOMcDWAPU5/83fbc8=
Subject key identifier:   92:A7:C4:F9:49:0C:33:77:10:22:26:F6:14:71:CE:DD:D3:85:85:0E
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019D2696747D23197B9F327904B959410449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0A0F
Signing time:             Wed 25 Mar 2026 20:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:27 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: 9kvka4FXW15hsYLn57F2O8TDFByPTnhpnXSJidAcbKw=)
                          2: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
                          3: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
                          4: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
                          5: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
                          6: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
                          7: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:74:7d:23:19:7b:9f:32:79:04:b9:59:41:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Mar 25 20:01:27 2026 GMT
            Not After : Mar 26 20:01:27 2026 GMT
        Subject: CN=92a7c4f9490c3377102226f61471ceddd385850e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:39:61:2d:4b:2b:0d:e6:65:b1:93:0c:34:
                    92:9b:3c:6e:51:c3:76:b5:3c:14:fc:f7:0f:86:cf:
                    29:24:b8:4b:cf:07:f0:dc:92:0f:e0:4d:85:bc:07:
                    72:4d:1d:66:73:7a:2f:bf:85:7e:39:df:00:bc:4b:
                    61:6e:c5:e9:28:fc:f4:55:c8:4b:d0:d1:99:05:c0:
                    2a:75:ad:de:d1:4b:ef:74:fc:47:df:f2:1f:d5:e9:
                    ed:3c:2c:23:19:de:8b:23:d5:0f:42:b5:7f:34:94:
                    28:fc:6c:9d:e9:70:36:1c:91:d4:47:17:7e:eb:6c:
                    7a:26:ab:34:35:48:f9:65:66:84:d4:75:90:26:a3:
                    a0:01:d1:51:23:5d:25:ad:50:14:64:67:5a:a9:59:
                    bd:b0:1a:5a:3d:a3:53:38:01:fd:6b:21:4e:1e:21:
                    8d:40:34:ec:b7:f7:bc:01:9f:e0:d4:9e:ae:b9:dc:
                    65:bd:91:c1:1b:75:03:ad:a5:29:b8:3d:7e:31:ef:
                    c1:71:c2:1b:c8:b1:23:68:b5:4a:da:d7:10:eb:48:
                    8d:31:95:34:0a:44:6b:7e:83:12:eb:c2:c9:61:58:
                    99:e8:a7:a2:93:ae:2a:0f:80:9e:39:b3:91:88:48:
                    df:3c:20:e1:05:82:78:19:91:d5:33:91:bc:3a:8e:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:C4:F9:49:0C:33:77:10:22:26:F6:14:71:CE:DD:D3:85:85:0E
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:22:60:f3:a2:0c:22:bf:32:ac:3e:e9:06:38:3e:6a:6b:ee:
         53:41:0c:9b:85:15:4f:58:aa:e3:c1:50:16:93:e9:b4:2e:31:
         36:1a:36:31:73:a3:19:94:b4:ec:73:1e:d5:b3:98:3b:3b:31:
         0c:44:63:8d:50:f2:c7:d6:c8:3e:aa:9f:5f:e7:49:cc:07:6b:
         d0:d2:c4:91:e6:a2:da:ea:dd:7e:15:d2:82:58:47:54:fe:3d:
         ff:7d:81:a7:cd:34:68:38:1c:2c:0f:d2:67:90:8d:25:25:93:
         a5:b8:0d:79:c0:8c:b9:9f:8e:86:d1:14:9b:46:dd:9f:96:70:
         48:5f:2a:52:8b:cb:a3:9d:a9:50:e2:3d:a4:26:88:1a:c8:9f:
         d2:26:b7:93:f5:34:81:eb:4f:a3:18:4a:59:70:17:2d:59:33:
         21:26:f4:f7:20:fb:98:8d:4e:96:d5:98:89:81:10:7d:7f:10:
         fd:48:ad:a9:88:a2:f0:1b:6c:81:30:e9:c3:d0:07:ed:07:c3:
         be:4b:57:97:18:d0:57:73:a6:d5:e9:d7:a9:d9:6b:a2:c9:6c:
         a5:8b:6d:ac:33:21:96:0e:af:ee:f7:15:90:06:68:51:05:e9:
         86:a5:2b:42:f0:cb:24:d3:13:6b:c9:ff:8d:9b:00:39:4a:5f:
         11:2e:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:21 2026 by rpki-client