Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          WTWAFQxMTPA6CE1WlY7sRaaWlzsvPKWHcQpY6hGcg/4=
Subject key identifier:   03:C0:43:EC:6E:D8:DB:8E:32:51:C2:A1:46:93:23:46:1B:97:FE:26
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       019D265ECC68BD9E28E4A71337D9DD93E64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          0444
Signing time:             Wed 25 Mar 2026 19:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:39 +0000
Files and hashes:         1: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (hash: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: r3BPLnrhEcK1Owq8X/osLHGJV+B9rrHl8GemJr7RZzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:cc:68:bd:9e:28:e4:a7:13:37:d9:dd:93:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Mar 25 19:00:39 2026 GMT
            Not After : Mar 26 19:00:39 2026 GMT
        Subject: CN=03c043ec6ed8db8e3251c2a1469323461b97fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:28:73:06:d9:90:e7:1e:96:0f:7f:39:15:
                    0b:1a:36:f8:d8:e4:e2:c9:65:51:03:1e:20:5b:bf:
                    6a:0b:e2:91:c4:93:31:03:ba:58:cf:d9:cb:5a:59:
                    fb:a7:42:c8:fd:1c:66:4c:c1:b7:a1:28:bf:84:63:
                    d4:fe:7c:48:de:d5:3d:94:0b:3a:6a:31:1a:c8:72:
                    cf:ea:ee:6f:e9:49:44:06:b9:d4:b4:17:71:65:7b:
                    4d:7a:bc:66:f4:a5:58:9a:75:41:ea:0d:d9:83:1b:
                    1f:da:31:4f:b4:33:9f:28:a6:cd:1b:7f:f4:36:06:
                    45:42:2d:ff:9d:25:f4:6e:18:db:61:9b:77:47:16:
                    cc:24:03:f4:f0:7b:54:36:e5:eb:6e:fb:ea:f8:12:
                    7f:40:86:a4:c3:2e:e7:44:26:b7:28:38:b9:76:d2:
                    f2:b1:1c:5a:32:29:ac:c9:14:25:51:ee:e9:f6:23:
                    2e:1c:2f:64:2c:14:1c:19:2d:cc:65:0b:c9:0b:73:
                    c1:50:3b:c0:85:19:f1:e2:db:90:56:f0:1e:94:be:
                    b8:93:ef:91:01:53:8c:48:b5:68:78:0e:8e:53:2c:
                    71:66:8a:85:97:25:00:cc:99:b5:b5:fa:97:ed:de:
                    c1:0c:92:b8:e1:cc:e1:12:64:3c:ad:b5:23:8a:c8:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:43:EC:6E:D8:DB:8E:32:51:C2:A1:46:93:23:46:1B:97:FE:26
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:8c:87:18:bf:a4:ed:b2:d1:bb:25:ce:c9:74:08:ad:4e:
         f4:0b:39:7d:2d:a2:7b:cf:9f:74:23:c8:44:9e:e5:d0:f0:0a:
         08:30:d0:6b:75:cd:43:39:4e:66:c2:14:ca:62:88:e6:b6:23:
         43:3e:50:dd:8e:24:70:29:6c:ee:39:04:fb:13:c7:cb:c8:71:
         97:39:a9:1b:25:4a:0a:b9:26:ef:90:ff:62:7e:6b:e0:6a:06:
         83:08:68:4a:94:e1:03:74:4d:a9:55:d1:40:6e:e1:fc:0a:be:
         15:a1:92:15:ee:15:38:5b:e2:9d:6a:7f:23:38:e7:51:10:76:
         e5:9a:c9:b4:b8:5b:b1:6e:61:fc:e0:a2:dd:c3:88:5b:35:e4:
         bd:65:8d:36:58:ad:10:ba:35:b4:df:54:b0:39:da:6c:96:d1:
         34:37:88:a8:24:ac:93:8c:1d:db:86:75:6a:56:bb:da:60:20:
         6e:63:13:4d:82:3d:f2:ff:db:f5:c5:38:a8:c3:08:db:f7:ee:
         59:fc:bc:8c:af:4d:46:df:c8:23:2e:cd:5f:6f:4e:5a:3b:99:
         94:ec:6c:b8:78:80:79:fb:e4:0d:39:a3:e4:dc:db:da:7a:01:
         6b:59:6f:5a:e0:d3:ea:c1:4d:a9:5a:5b:5a:45:89:53:2a:15:
         6d:1b:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:25 2026 by rpki-client