Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File:                     YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier:          9tLD2pgTGwmcpD/FyTUi/sy3xy7Pyy3me7OlR6RIIMM=
Subject key identifier:   A8:71:56:DD:AB:75:C9:9B:48:37:F5:AC:04:03:7C:6A:0C:EF:C7:F2
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer:       /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial:       019D254CAB54C22056C78471583E4876B549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number:          18A4
Signing time:             Wed 25 Mar 2026 14:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:14 +0000
Files and hashes:         1: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: ooPXJ8bvSpz9G5vqauPUnUa78OdrtKE4hmLf8NSbm8c=)
                          2: rbSihGXODQuXmGdRnxTGjpysN_E.roa (hash: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=)
                          3: xSLEYc0lt1omC0_5S_IEJQG-sFo.asa (hash: XvuqcAAROcucGiTTqNKqYAdleeXb8tap+MKCtPl4Y5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:ab:54:c2:20:56:c7:84:71:58:3e:48:76:b5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
        Validity
            Not Before: Mar 25 14:01:14 2026 GMT
            Not After : Mar 26 14:01:14 2026 GMT
        Subject: CN=a87156ddab75c99b4837f5ac04037c6a0cefc7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:b7:15:ff:57:a3:82:07:6e:d2:f0:ee:e1:
                    7f:af:14:08:8f:ab:88:ca:44:e7:e5:4a:90:bf:b8:
                    67:35:2b:85:19:24:ab:c3:15:1e:d2:1d:df:1c:a9:
                    83:d5:80:b1:be:0d:1a:ab:33:b3:7a:84:a3:97:b4:
                    23:9a:af:62:d3:80:90:1a:52:2a:00:6f:a3:d0:40:
                    86:ed:c8:4c:e4:46:d3:5a:0d:7b:b0:b6:eb:20:ac:
                    84:f3:c9:b2:09:aa:2d:c8:46:a3:39:2f:4f:14:42:
                    71:16:81:2c:b0:1b:02:a9:cb:40:0e:97:87:78:dc:
                    1e:27:7a:fd:dc:7d:a0:af:91:d8:7e:ad:4c:9e:dd:
                    3a:3b:9b:0e:6c:d4:67:5d:ed:69:e0:3d:d0:47:5c:
                    41:31:be:46:19:34:14:4a:8b:33:2e:91:7e:77:80:
                    eb:ea:69:65:9a:90:eb:2d:6c:07:80:b0:35:2c:0d:
                    da:8e:30:01:9e:05:14:0f:42:59:e8:f3:b3:d6:9b:
                    8f:5d:1e:36:87:eb:9a:6f:93:2a:0f:b8:4a:7e:83:
                    5d:82:71:c0:39:a7:a2:2a:c9:9d:a6:98:a0:36:36:
                    06:26:ab:61:ed:12:af:6b:f7:bd:e1:d3:39:1b:f8:
                    a7:15:af:0a:01:7b:67:bf:d3:ec:63:b7:fa:50:61:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:56:DD:AB:75:C9:9B:48:37:F5:AC:04:03:7C:6A:0C:EF:C7:F2
            X509v3 Authority Key Identifier:
                keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:83:a9:34:12:41:a7:bb:04:fc:b4:c2:33:b6:9b:13:eb:1b:
         f5:22:4c:92:b8:65:23:f1:0e:f3:a9:37:24:99:47:88:15:29:
         09:a3:44:b2:e3:60:5a:80:71:8c:89:a2:77:12:aa:10:da:2c:
         2c:a9:43:84:72:60:aa:9a:9d:34:3b:a0:ce:fb:41:20:99:c0:
         bc:bb:b9:26:fd:2b:43:3d:de:d0:34:b1:93:e7:63:35:e9:e2:
         f7:fa:1f:ab:c4:44:6a:60:46:b8:e5:b0:38:10:14:f5:73:0a:
         3d:2f:13:b8:3a:d2:b3:18:0e:64:60:88:cd:00:46:7e:05:49:
         33:63:62:3a:ef:1e:60:ed:26:27:64:9f:4b:0a:32:77:41:ff:
         81:33:e9:ac:33:43:2e:f4:f1:0d:13:44:33:23:42:e1:d2:00:
         86:8c:c0:e9:da:5f:8f:31:7f:34:4f:78:67:e3:d7:15:9b:e3:
         03:06:a1:a8:84:e1:65:00:f9:16:4a:9e:b0:a2:bb:c4:95:f5:
         be:ca:96:c2:b7:37:2f:35:80:03:73:ad:7e:35:85:03:67:43:
         1c:e4:9d:4a:f3:fe:f1:a4:ec:c8:8e:ab:6e:f6:a4:ce:78:7e:
         c8:90:08:3b:70:df:ae:4e:f9:3c:4b:72:9c:7d:0c:73:c5:fe:
         96:b2:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:04 2026 by rpki-client