Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          JvND2s+OuQOAQVLZm45GvWKV45D9lW2hc5/E1W4cOpo=
Subject key identifier:   47:B7:C6:17:4F:D9:3B:F1:B1:3A:2A:02:F2:5D:B2:83:5D:11:9B:4F
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       019D27723800CB7911437CC5B934FA862F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          06FB
Signing time:             Thu 26 Mar 2026 00:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:29 +0000
Files and hashes:         1: U1sfV9HH8u88t2HBLjDAkG-CyLg.roa (hash: tpq5q5jvhF2tXurj200oQaFHHR4X1vOHV0qottraasM=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: 7xm0Nd8nxKq3sIA2onC0IsQKGR2mG1f4mTwaxzlER/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:38:00:cb:79:11:43:7c:c5:b9:34:fa:86:2f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Mar 26 00:01:29 2026 GMT
            Not After : Mar 27 00:01:29 2026 GMT
        Subject: CN=47b7c6174fd93bf1b13a2a02f25db2835d119b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e6:45:a5:fe:58:9e:81:d6:aa:64:1b:03:91:
                    83:6e:0d:91:6b:c4:76:e1:01:53:a1:a6:c0:8c:2c:
                    d5:27:da:bc:43:24:85:90:e0:cd:27:08:1b:5c:a9:
                    74:e0:af:a8:82:5e:cc:95:4a:c9:67:ca:93:ea:d9:
                    17:62:85:23:f0:a9:39:f5:fa:0c:be:c1:ed:b2:b0:
                    8a:87:b6:62:cb:5b:e7:67:ad:8f:d9:12:b8:24:3b:
                    65:f4:6c:05:b2:5c:43:f4:ff:62:6a:9b:8f:12:2a:
                    cf:17:aa:87:c1:e6:77:4b:96:30:82:21:0b:ee:e3:
                    9c:dc:29:bb:f9:fe:f1:85:79:fd:e9:6f:be:06:70:
                    a0:c6:43:5e:f2:0b:7d:8b:f0:c4:93:27:81:f5:c6:
                    5c:03:b7:99:2c:ed:ee:f2:31:42:22:f7:60:1c:21:
                    83:ba:ec:d0:fb:f0:37:b8:08:fb:cc:74:38:ea:d7:
                    02:81:9a:25:be:fb:0a:d5:39:97:d2:f9:e8:6b:23:
                    72:3c:8a:a0:5a:ed:ef:54:7d:31:f1:32:a2:87:4d:
                    92:a2:79:c1:ea:95:6e:bb:0b:91:79:27:c3:45:66:
                    96:84:bc:1c:55:45:a2:53:a1:98:8e:0b:65:61:ed:
                    44:54:bd:c4:c6:72:df:28:c9:83:d2:c0:99:6b:af:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:C6:17:4F:D9:3B:F1:B1:3A:2A:02:F2:5D:B2:83:5D:11:9B:4F
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9c:0f:be:f1:4e:6e:4a:64:ea:e6:9a:fb:92:c8:ab:e2:4d:
         db:1d:e3:eb:a3:20:8f:4b:be:66:c9:e4:c3:84:68:9a:ae:7f:
         12:f8:1f:b6:a3:7b:92:01:c5:b4:74:fc:8a:72:b5:c0:f7:57:
         f9:cc:22:ce:9e:27:e5:77:93:cf:f4:c6:69:99:f9:50:c8:e4:
         76:70:28:8b:4b:67:a6:67:3b:bc:15:fd:1f:1d:6a:07:a4:5d:
         cd:8c:6a:95:56:da:30:c4:91:2d:c7:2b:49:c7:3e:a7:9e:70:
         53:06:d6:78:52:aa:1b:8f:d8:6c:6f:ee:2f:05:a4:8b:66:32:
         eb:5c:d4:f1:a2:8a:bd:4f:25:b5:c4:9c:d9:51:c9:34:01:5c:
         91:8f:63:ff:4e:8d:60:a5:b5:2a:c9:1d:91:eb:a9:da:0e:a5:
         6e:f3:83:f9:e8:8c:b0:1c:03:a8:09:6b:09:7b:48:f4:31:c5:
         89:67:68:9f:75:da:d4:81:51:69:05:af:13:c2:7e:4d:94:fe:
         d7:cd:6f:f1:aa:c6:b2:f3:84:15:26:f2:0a:9e:14:72:0b:42:
         c8:c7:c7:83:5e:2c:50:1d:e8:30:c2:c8:ba:c6:d6:4e:67:d5:
         3c:d9:00:69:b5:42:fa:41:44:58:f7:07:d1:43:a1:98:fa:6f:
         8b:aa:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:09 2026 by rpki-client