Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File:                     y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier:          3iSB2H/OojfoaFQZs4nl6mEI7Qa/td++yFiL8ZVT4XA=
Subject key identifier:   81:46:B5:C3:57:10:CF:42:FE:BA:9A:C2:0F:20:D0:CD:A3:0C:00:15
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer:       /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial:       019D27E073D0EEC9E4669DBB9BAADE8FBB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number:          1519
Signing time:             Thu 26 Mar 2026 02:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:54 +0000
Files and hashes:         1: GlWizv2ImorDlJ5qdqf22l6axV0.roa (hash: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI=)
                          2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: Sxgk9JWRjpfh35EElfaeVbmg+Ul1i47k3L7vOw1JccU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:73:d0:ee:c9:e4:66:9d:bb:9b:aa:de:8f:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Validity
            Not Before: Mar 26 02:01:54 2026 GMT
            Not After : Mar 27 02:01:54 2026 GMT
        Subject: CN=8146b5c35710cf42feba9ac20f20d0cda30c0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:95:aa:7a:d5:4d:be:0e:46:57:52:4d:b1:
                    a6:37:b3:72:6d:c1:84:af:f3:bf:0d:9e:08:44:93:
                    f9:03:25:1b:65:af:fd:25:7e:52:82:d7:76:48:04:
                    5b:f6:3e:fe:e3:a7:93:a8:95:19:e4:fe:e6:6e:5b:
                    fd:a6:3d:ee:86:88:af:40:a6:19:0b:54:aa:94:b4:
                    35:af:49:f1:00:d1:2f:cd:d7:bc:62:04:b1:d9:3f:
                    6b:09:56:36:d3:5c:82:af:ea:95:8d:17:2f:ee:64:
                    8e:8f:a6:e4:86:fa:d7:f1:55:17:43:80:aa:5c:8a:
                    c4:5c:08:24:6b:47:5d:f7:cf:63:9a:43:57:4a:cd:
                    4d:be:a6:b8:56:db:4a:01:26:ec:65:04:52:47:b5:
                    18:41:25:1a:f2:d7:00:76:c0:61:86:f0:57:5c:41:
                    9d:43:26:0d:ce:7d:1e:75:be:0c:93:70:bc:f8:c9:
                    be:78:14:b8:20:0e:e0:4b:1b:c5:20:2c:f6:cc:52:
                    8d:8f:01:90:74:11:2f:61:9c:01:a8:a4:07:55:8e:
                    61:88:e7:f8:45:ea:94:10:2f:07:7e:af:2d:e4:9d:
                    51:be:11:4b:88:bf:7e:da:a5:31:fc:6b:fb:23:27:
                    f0:36:4c:25:de:42:e6:aa:1a:26:d2:64:d2:26:f8:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:B5:C3:57:10:CF:42:FE:BA:9A:C2:0F:20:D0:CD:A3:0C:00:15
            X509v3 Authority Key Identifier:
                keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:4a:1d:d5:8c:c5:ca:93:67:4f:b6:17:d9:6e:28:60:b0:
         dd:52:e1:c2:3a:c8:9d:c4:bd:7f:d4:c0:b3:c6:59:25:13:12:
         94:28:d7:97:77:23:30:db:4b:4e:53:9b:96:9a:aa:57:2e:ba:
         ab:51:9c:da:3a:4f:82:3a:3b:7f:bd:11:f7:37:98:47:ee:e9:
         a8:4c:d2:22:43:0f:69:08:a1:1f:e7:a7:25:ca:07:68:78:20:
         1c:19:85:56:04:e4:ad:45:b1:4b:7c:f8:52:43:6d:c3:46:a3:
         4e:83:9e:00:68:5b:ba:68:64:52:44:06:dd:93:73:75:d0:88:
         51:ee:60:e5:4c:f0:5d:ed:e2:ff:d8:13:a5:b9:5e:47:3a:16:
         8d:bf:2b:6a:1e:e1:0b:ae:ad:d2:45:06:82:ab:bd:62:26:5c:
         74:0e:d5:b8:4e:51:3e:5c:63:0d:ba:f1:15:40:6d:d2:c4:c8:
         54:66:b4:ad:cb:82:49:e3:22:ef:26:20:12:16:fb:82:e2:a2:
         68:b6:23:36:7d:3c:1d:b3:e5:15:2e:10:a0:c9:12:f0:cd:70:
         7c:55:ce:a0:89:1f:0a:e6:2c:09:22:00:8a:6c:27:21:7f:ef:
         35:ad:d4:c1:57:68:23:fb:51:6c:74:1e:0e:36:d4:ce:b1:12:
         2e:1f:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:20 2026 by rpki-client