Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          hKi/TRzp1uydgjt9sgStdbh5Y5r11s93xikb2nn7OkQ=
Subject key identifier:   16:2A:51:98:DF:69:A3:D3:00:DD:7A:C0:F6:2C:83:E3:51:B0:20:55
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       019D2884416B89D5D5A5E225FC1DC3DB000D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 05:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:49 +0000
Files and hashes:         1: 8y14F0niaDLVL7hP8HOPOIkGBE0.roa (hash: iAEQXisqtNhusS787DBQONGHAa0NvsETVhbhodQ0298=)
                          2: Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa (hash: liDOGahnCT5YOOVoL1UbtXwpmdR4G1O4f4p7XQvK1gQ=)
                          3: cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa (hash: FYYQsqM4KNdf8MSB3ff4z41RrQKEvyE2KHfpzGu82Ow=)
                          4: jpcPAYO0vBwJA8ouiKgmlRSBP_I.roa (hash: ndvQcEOfrGPn5H+JU39HBzxi3s5bQEUJ9vA23XpxTsI=)
                          5: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: +NKl27VkIseIS1QIQDAUN6Ka75ieuNjEJwhS8USZ3zM=)
                          6: zPStaZsfPYqzEeXC4gEAq5tIzW0.roa (hash: rrCGM4WWxov5TxyVuLiBLthKY+9HoXWP3nXelKVvZlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:41:6b:89:d5:d5:a5:e2:25:fc:1d:c3:db:00:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Mar 26 05:00:49 2026 GMT
            Not After : Mar 27 05:00:49 2026 GMT
        Subject: CN=162a5198df69a3d300dd7ac0f62c83e351b02055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:60:fa:bd:0c:1d:61:7b:39:fc:51:00:05:
                    80:bb:66:8a:d2:7b:50:e7:03:1e:db:36:3e:9c:ad:
                    16:e4:c5:65:b2:91:27:93:b0:87:18:e9:ef:63:40:
                    56:c6:db:e1:b5:ed:25:0c:07:60:b3:33:ed:61:a4:
                    13:c6:bb:16:7d:0e:1a:98:25:3c:88:b8:92:c4:94:
                    56:8c:97:7a:b8:db:fd:63:8f:9b:7a:09:0f:09:7c:
                    7c:61:11:cf:2a:6e:91:3a:85:6c:57:ff:b7:78:5f:
                    73:32:f4:52:03:db:89:6d:be:9f:e8:26:bc:69:80:
                    b0:cd:5a:ff:d0:cd:48:e4:a7:fd:00:bf:91:9d:3a:
                    be:80:bf:05:26:5a:d3:d2:6f:05:2e:09:de:e5:86:
                    96:7a:ac:a3:12:76:9e:6c:71:af:5f:55:bf:67:ac:
                    31:27:ff:9c:1b:3c:f2:4c:4d:51:94:7d:e0:4e:df:
                    2c:e5:46:e1:5f:e6:a3:fe:2c:33:74:0a:6c:0b:af:
                    7d:1c:24:17:97:27:bb:68:92:64:91:c4:7e:8f:b2:
                    bb:f4:b3:22:65:f5:1e:06:c3:57:51:5e:52:e0:e0:
                    d9:c5:36:3d:e7:55:ac:35:f8:65:94:2e:b6:21:3b:
                    bd:ca:29:2b:ba:ea:1f:9e:f6:36:92:2e:1f:a1:eb:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:51:98:DF:69:A3:D3:00:DD:7A:C0:F6:2C:83:E3:51:B0:20:55
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:ee:f6:73:76:82:b1:7f:12:df:a5:f0:49:c1:8f:bf:93:
         e6:44:2a:f9:97:b5:b0:c6:a5:f9:bd:d3:b4:f1:37:23:d9:61:
         73:06:c5:96:e6:4c:ce:4a:7e:2b:9e:53:24:41:1a:36:ba:93:
         e5:4b:4d:2a:89:b9:42:4a:46:c5:89:3b:39:27:d7:f3:e5:08:
         30:0a:90:35:65:24:a1:cd:66:c3:2a:d1:a1:6a:75:30:bd:b6:
         ae:96:f1:b5:b4:9a:ee:ca:96:76:ec:9f:70:39:f5:e7:e1:2b:
         d9:71:3c:7f:94:53:22:00:95:de:3e:9c:c8:ba:5f:f6:ff:b0:
         29:19:70:d1:35:8b:90:fc:8a:76:5d:3a:12:31:f6:67:d6:60:
         02:04:33:8f:9b:7b:99:da:30:f3:73:5e:1e:f7:1a:ee:b2:41:
         1b:bc:87:ba:62:7e:5c:99:12:6e:1e:af:5d:d1:49:c4:97:d6:
         16:4c:1b:d1:34:c3:aa:d4:1a:f2:5b:05:86:51:86:71:22:8a:
         30:73:00:a7:b0:85:e6:db:9a:85:98:17:4a:39:ea:a6:a8:0b:
         a0:72:55:d4:a3:0a:c3:96:64:0b:6d:72:de:aa:5e:70:f7:55:
         4b:15:b8:41:d1:5b:43:54:ae:a1:38:c3:25:c1:b1:e7:ad:be:
         b0:f9:6e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohEFridXVpeIl/B3D2wANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh
MDFmYjcwHhcNMjYwMzI2MDUwMDQ5WhcNMjYwMzI3MDUwMDQ5WjAzMTEwLwYDVQQD
EygxNjJhNTE5OGRmNjlhM2QzMDBkZDdhYzBmNjJjODNlMzUxYjAyMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX1g+r0MHWF7OfxRAAWAu2aK0ntQ
5wMe2zY+nK0W5MVlspEnk7CHGOnvY0BWxtvhte0lDAdgszPtYaQTxrsWfQ4amCU8
iLiSxJRWjJd6uNv9Y4+begkPCXx8YRHPKm6ROoVsV/+3eF9zMvRSA9uJbb6f6Ca8
aYCwzVr/0M1I5Kf9AL+RnTq+gL8FJlrT0m8FLgne5YaWeqyjEnaebHGvX1W/Z6wx
J/+cGzzyTE1RlH3gTt8s5UbhX+aj/iwzdApsC699HCQXlye7aJJkkcR+j7K79LMi
ZfUeBsNXUV5S4ODZxTY951WsNfhllC62ITu9yikruuofnvY2ki4foetnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYqUZjfaaPTAN16wPYsg+NRsCBVMB8GA1UdIwQY
MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt
MDdiN2ZlZjA4NThmLzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm
LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOY/u9nN2
grF/Et+l8EnBj7+T5kQq+Ze1sMal+b3TtPE3I9lhcwbFluZMzkp+K55TJEEaNrqT
5UtNKom5QkpGxYk7OSfX8+UIMAqQNWUkoc1mwyrRoWp1ML22rpbxtbSa7sqWduyf
cDn15+Er2XE8f5RTIgCV3j6cyLpf9v+wKRlw0TWLkPyKdl06EjH2Z9ZgAgQzj5t7
mdow83NeHvca7rJBG7yHumJ+XJkSbh6vXdFJxJfWFkwb0TTDqtQa8lsFhlGGcSKK
MHMAp7CF5tuahZgXSjnqpqgLoHJV1KMKw5ZkC21y3qpecPdVSxW4QdFbQ1SuoTjD
JcGx562+sPluJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:06 2026 by rpki-client