Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          YJQ0ACSosQ4qsAEhyCuVq8RNcXNwqGlwK46eHAW78fs=
Subject key identifier:   CE:80:93:58:03:DB:18:E4:8D:EC:9A:40:FE:D7:5C:B1:6A:61:EE:7B
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       019D27DF5FBACEA04890AB128AAB4571FD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          1187
Signing time:             Thu 26 Mar 2026 02:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:43 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: YfX6GwdJXFtAp5BkYnk/e52mJSrHKDDu2HsEBjpYxCA=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5f:ba:ce:a0:48:90:ab:12:8a:ab:45:71:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Mar 26 02:00:43 2026 GMT
            Not After : Mar 27 02:00:43 2026 GMT
        Subject: CN=ce80935803db18e48dec9a40fed75cb16a61ee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:5f:28:f3:7e:78:2d:5b:9e:7b:a5:58:55:
                    0b:e5:db:18:82:b0:06:26:22:13:be:40:65:de:0d:
                    d8:b2:06:c7:76:71:0d:df:77:db:ae:a9:57:58:14:
                    ec:05:b6:da:46:54:db:6c:ec:39:c9:5c:c3:f7:2c:
                    47:6b:6c:84:eb:4a:af:5b:b7:95:40:e4:7d:b6:5a:
                    22:50:8f:53:bf:f5:56:12:ac:a0:a4:88:5a:08:c4:
                    3f:26:17:af:1c:f3:70:ae:51:a5:18:38:b0:26:81:
                    d2:4f:5f:d0:48:6d:46:8f:50:d4:30:f3:d4:03:0f:
                    d1:c5:96:cc:0d:65:c1:e7:c3:3e:5f:7f:37:b9:fd:
                    71:97:13:ce:54:b2:2b:db:a4:39:3a:28:d9:76:20:
                    54:6b:77:5e:37:df:2e:db:a6:69:87:ed:25:f3:62:
                    60:59:98:86:1b:76:ad:0b:2d:7f:76:01:8a:b5:9f:
                    5e:bd:7b:6f:da:26:4e:df:23:67:51:97:f0:0b:94:
                    92:01:06:fa:56:61:0b:25:f9:57:c8:81:61:bc:d1:
                    75:48:da:a7:11:92:d3:76:71:dc:f3:d8:a3:36:9e:
                    c0:87:1d:2e:c7:5a:47:cc:43:87:a4:6d:7d:d1:e0:
                    0f:73:e2:35:1e:c8:f7:66:3d:37:67:83:9b:31:e6:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:93:58:03:DB:18:E4:8D:EC:9A:40:FE:D7:5C:B1:6A:61:EE:7B
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:92:dd:b6:7c:7b:85:8b:3f:24:fd:d8:9b:3b:4d:2b:7e:
         81:56:eb:a8:79:47:2c:f3:f9:ec:a8:7d:7f:61:75:4c:bb:e5:
         f7:ca:3a:4a:39:44:f5:0b:fc:21:69:3e:2b:16:f7:6c:83:20:
         90:30:ea:d4:e1:5d:69:f1:78:c2:1a:6a:75:ca:ef:3e:38:dd:
         64:dd:ef:6e:c0:a8:2c:d4:41:08:ae:cc:a7:67:31:10:e4:1c:
         37:eb:8d:ba:c0:86:70:34:ee:0b:c6:5c:42:e5:f1:af:46:a3:
         8a:c0:4a:0a:fd:e4:57:a6:ef:b0:0b:b9:00:7d:8f:fc:a3:e7:
         c0:99:7a:38:5b:78:37:95:82:8a:24:af:a4:85:e2:cb:c3:53:
         e1:d0:a1:48:4c:90:62:6a:e5:f7:c8:b7:73:0e:03:df:f0:1c:
         a0:cd:2b:95:d8:01:17:e9:cb:bb:78:f5:9d:68:40:94:64:9c:
         8f:91:75:2d:7a:fa:18:78:6f:6e:e4:61:c5:9c:50:73:a3:33:
         dc:32:f7:f1:57:37:31:d4:d6:4a:58:22:1b:b7:b0:09:7c:bb:
         c9:25:10:03:e8:3c:d2:4b:6c:bf:ce:22:3e:ee:09:3f:dc:cc:
         16:47:d9:d6:37:4f:36:85:67:bf:6f:8f:53:a8:18:80:ae:12:
         8a:5a:db:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n31+6zqBIkKsSiqtFcf0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy
MDA1MzcwHhcNMjYwMzI2MDIwMDQzWhcNMjYwMzI3MDIwMDQzWjAzMTEwLwYDVQQD
EyhjZTgwOTM1ODAzZGIxOGU0OGRlYzlhNDBmZWQ3NWNiMTZhNjFlZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6FfKPN+eC1bnnulWFUL5dsYgrAG
JiITvkBl3g3YsgbHdnEN33fbrqlXWBTsBbbaRlTbbOw5yVzD9yxHa2yE60qvW7eV
QOR9tloiUI9Tv/VWEqygpIhaCMQ/JhevHPNwrlGlGDiwJoHST1/QSG1Gj1DUMPPU
Aw/RxZbMDWXB58M+X383uf1xlxPOVLIr26Q5OijZdiBUa3deN98u26Zph+0l82Jg
WZiGG3atCy1/dgGKtZ9evXtv2iZO3yNnUZfwC5SSAQb6VmELJflXyIFhvNF1SNqn
EZLTdnHc89ijNp7Ahx0ux1pHzEOHpG190eAPc+I1Hsj3Zj03Z4ObMebTgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6Ak1gD2xjkjeyaQP7XXLFqYe57MB8GA1UdIwQY
MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt
YzEwMmVlOTY4NThlLzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl
LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjSS3bZ8
e4WLPyT92Js7TSt+gVbrqHlHLPP57Kh9f2F1TLvl98o6SjlE9Qv8IWk+Kxb3bIMg
kDDq1OFdafF4whpqdcrvPjjdZN3vbsCoLNRBCK7Mp2cxEOQcN+uNusCGcDTuC8Zc
QuXxr0ajisBKCv3kV6bvsAu5AH2P/KPnwJl6OFt4N5WCiiSvpIXiy8NT4dChSEyQ
Ymrl98i3cw4D3/AcoM0rldgBF+nLu3j1nWhAlGScj5F1LXr6GHhvbuRhxZxQc6Mz
3DL38Vc3MdTWSlgiG7ewCXy7ySUQA+g80ktsv84iPu4JP9zMFkfZ1jdPNoVnv2+P
U6gYgK4SilrbZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:51 2026 by rpki-client