Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          9pbS87pTPu1ddUR8A/6VYQfhs4HfcUVqK0jErih3fmc=
Subject key identifier:   A2:11:3D:95:37:11:E6:DF:9E:4F:37:92:62:8F:7F:08:C4:EF:BE:AE
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       019D27A8F2251EA561EAE99376ABD911C5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          147B
Signing time:             Thu 26 Mar 2026 01:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:16 +0000
Files and hashes:         1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
                          2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
                          3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
                          4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: HxNi4bkRnoKv8WSb2EMo1rS9PV8gzgSLS5xOYKPlmDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f2:25:1e:a5:61:ea:e9:93:76:ab:d9:11:c5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Mar 26 01:01:16 2026 GMT
            Not After : Mar 27 01:01:16 2026 GMT
        Subject: CN=a2113d953711e6df9e4f3792628f7f08c4efbeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b0:d5:d5:42:12:d2:96:15:9e:70:46:1d:4b:
                    17:32:33:91:8e:de:51:8e:df:f5:40:11:e3:44:73:
                    13:2b:5c:09:25:ae:8a:ff:a9:8d:89:89:f5:04:26:
                    8a:2f:ac:b7:05:9e:ec:a4:de:49:99:b6:fb:f1:ff:
                    7c:c7:9e:bd:3f:1d:45:1d:45:37:bd:a3:d4:26:9a:
                    4e:d5:1d:fa:1b:7c:02:42:5d:3d:7d:d7:75:0e:25:
                    dd:47:a7:8b:8f:8e:75:38:2f:a7:46:15:24:c2:48:
                    69:54:e7:cd:69:19:59:02:82:f0:6f:17:17:7c:d2:
                    53:97:7e:e1:7a:03:3b:f6:95:f4:47:44:7f:8a:95:
                    6d:90:bf:35:5c:92:0a:50:f1:f3:a4:34:cb:4f:09:
                    b9:ff:23:ab:86:01:66:1c:97:cd:9c:6e:d2:c8:7e:
                    d2:2d:f4:b3:a3:0e:10:e4:9c:92:47:61:14:26:35:
                    e3:82:59:33:2f:4e:95:65:ae:56:9a:13:16:d4:10:
                    4e:f3:e8:c1:16:0d:b5:70:5c:be:f1:41:31:43:0c:
                    00:03:fc:ba:23:cd:fc:c2:8c:ac:0c:5b:49:0c:39:
                    ad:10:6b:42:6d:9a:52:c7:82:61:dd:b8:a6:a6:03:
                    ef:45:14:24:50:8c:a6:f3:11:8a:a0:d2:77:a7:16:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:3D:95:37:11:E6:DF:9E:4F:37:92:62:8F:7F:08:C4:EF:BE:AE
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:73:c6:ef:52:63:16:e3:4a:f6:62:09:fe:89:a0:24:e1:ff:
         e7:41:97:26:cb:e2:d6:ed:a4:39:3e:be:c8:ec:d1:58:ce:90:
         44:2d:22:f0:b9:93:10:40:7c:fe:ae:b1:f7:2d:ac:49:81:1a:
         5c:b5:8a:fb:99:7e:90:48:67:d6:f9:2f:bf:7e:df:d6:e1:8d:
         71:24:9f:23:61:90:61:16:fd:2a:fe:39:25:8c:af:9e:5c:ec:
         23:d0:9a:22:21:49:87:b8:05:d7:16:34:e6:ee:ee:52:99:5e:
         98:ee:40:cf:5c:ca:67:98:4b:82:2f:ef:bc:91:d8:a9:6e:6f:
         4b:43:df:76:e4:0e:ed:c6:10:ef:f1:af:5d:62:44:3b:c6:c6:
         48:89:53:de:95:1b:f9:d3:c1:a9:d1:e5:ac:3c:58:c2:6e:0c:
         40:ef:f3:58:bb:09:98:9c:0d:de:1b:00:f7:ca:13:9b:a5:fe:
         d3:e3:ac:ed:fa:a4:5e:3e:69:4c:63:76:ac:ec:1a:b8:7e:99:
         f0:51:92:50:eb:0f:76:05:71:3a:3a:f1:42:99:2a:76:7d:fa:
         b0:a1:48:a5:4c:75:1e:a0:2c:6d:f9:04:61:c8:ea:d9:9f:14:
         d0:0a:99:a4:25:be:4b:bf:61:c3:4f:54:5c:10:c7:71:07:90:
         ab:bb:11:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPIlHqVh6umTdqvZEcXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1
OTU5YTgwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
EyhhMjExM2Q5NTM3MTFlNmRmOWU0ZjM3OTI2MjhmN2YwOGM0ZWZiZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rDV1UIS0pYVnnBGHUsXMjORjt5R
jt/1QBHjRHMTK1wJJa6K/6mNiYn1BCaKL6y3BZ7spN5Jmbb78f98x569Px1FHUU3
vaPUJppO1R36G3wCQl09fdd1DiXdR6eLj451OC+nRhUkwkhpVOfNaRlZAoLwbxcX
fNJTl37hegM79pX0R0R/ipVtkL81XJIKUPHzpDTLTwm5/yOrhgFmHJfNnG7SyH7S
LfSzow4Q5JySR2EUJjXjglkzL06VZa5WmhMW1BBO8+jBFg21cFy+8UExQwwAA/y6
I838woysDFtJDDmtEGtCbZpSx4Jh3bimpgPvRRQkUIym8xGKoNJ3pxZyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIRPZU3Eebfnk83kmKPfwjE776uMB8GA1UdIwQY
MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt
N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl
LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHPG71Jj
FuNK9mIJ/omgJOH/50GXJsvi1u2kOT6+yOzRWM6QRC0i8LmTEEB8/q6x9y2sSYEa
XLWK+5l+kEhn1vkvv37f1uGNcSSfI2GQYRb9Kv45JYyvnlzsI9CaIiFJh7gF1xY0
5u7uUplemO5Az1zKZ5hLgi/vvJHYqW5vS0PfduQO7cYQ7/GvXWJEO8bGSIlT3pUb
+dPBqdHlrDxYwm4MQO/zWLsJmJwN3hsA98oTm6X+0+Os7fqkXj5pTGN2rOwauH6Z
8FGSUOsPdgVxOjrxQpkqdn36sKFIpUx1HqAsbfkEYcjq2Z8U0AqZpCW+S79hw09U
XBDHcQeQq7sR5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:10 2026 by rpki-client