Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier:          eZyvbgphxOR+H25/ehRFXAExCN5J+BHinIfOWqJ2zLg=
Subject key identifier:   FD:F6:93:C5:83:7B:92:8B:9E:7E:DD:66:30:B6:0A:51:06:56:B1:94
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer:       /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial:       019D2816A5E173D37467883A6A87914F20F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 03:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:06 +0000
Files and hashes:         1: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: aEmwlDCf8jk94wwxyHF7TTJ19+XfM/LYEjnAKmDj4AQ=)
                          2: eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa (hash: X4ZPh/wvO5yQsB9S3hDFndSj+7xXzQCq3S+mViqwfL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a5:e1:73:d3:74:67:88:3a:6a:87:91:4f:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Validity
            Not Before: Mar 26 03:01:06 2026 GMT
            Not After : Mar 27 03:01:06 2026 GMT
        Subject: CN=fdf693c5837b928b9e7edd6630b60a510656b194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:c9:18:60:58:ec:32:10:42:7c:2f:c7:a9:
                    f3:cd:b5:3b:c7:e0:7c:2a:31:d4:a1:e2:3b:05:10:
                    57:4e:bc:3c:1a:58:70:d6:94:23:c9:b1:1e:b8:39:
                    a8:46:c0:c5:0c:e5:88:81:7b:4d:e3:25:47:6b:49:
                    a9:7c:92:ec:20:f5:76:6a:3a:35:95:6d:2d:48:2a:
                    c9:85:8d:89:7f:23:a5:43:c2:d6:9a:72:b1:ba:d8:
                    bc:f7:f6:fb:6b:17:6c:d5:92:05:4a:93:5b:cc:d7:
                    94:47:8e:9f:87:56:c5:4e:b2:af:f2:59:ae:4b:ea:
                    15:d0:e5:49:de:00:56:c6:9a:97:0d:54:4d:63:ab:
                    b8:be:50:d3:de:da:30:01:ef:3e:e3:77:2f:67:b5:
                    b6:67:f6:b6:d5:d3:f3:73:7f:c7:ab:0e:65:07:b0:
                    8e:22:37:69:15:01:66:8b:ae:3a:d0:b0:53:16:b7:
                    54:4a:6f:de:de:ff:39:83:5d:b8:a4:be:72:de:6a:
                    26:7f:c0:84:c5:49:89:6b:bc:6f:c3:69:d8:40:35:
                    bc:05:a1:53:0f:7f:89:f8:69:5f:fe:c6:0e:d2:70:
                    db:72:0b:6d:1f:5c:4d:90:78:95:9e:b4:1e:1d:9a:
                    f2:5a:4e:23:c8:a3:02:28:5f:3a:bf:55:0b:82:f6:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:93:C5:83:7B:92:8B:9E:7E:DD:66:30:B6:0A:51:06:56:B1:94
            X509v3 Authority Key Identifier:
                keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:19:5f:1f:4d:4d:b8:24:b8:0d:0e:07:f3:26:a1:fb:e9:
         6a:d2:d0:22:e1:53:f4:ad:86:3c:2e:eb:58:f3:eb:81:fe:f2:
         a7:43:7b:33:66:8a:94:3e:ca:0f:ef:d2:ba:01:97:66:15:ea:
         46:a3:9a:44:20:51:73:00:88:49:78:a7:93:3f:35:70:00:d5:
         76:2d:56:9a:97:69:b8:61:4a:1a:57:9e:ea:1b:be:94:3c:29:
         b7:fb:78:8d:01:15:27:97:41:1c:79:3a:7f:5f:9c:56:4b:e1:
         01:64:17:d8:05:1e:26:7a:68:46:42:04:f8:61:e4:7d:f0:1b:
         31:9f:62:dc:b5:ab:76:38:e6:76:3a:2a:d3:80:f9:e3:53:e9:
         18:21:f3:c7:9d:66:52:45:27:e5:66:c8:6b:a8:7f:f4:64:d3:
         2e:f0:d9:4f:4d:d0:30:50:69:50:6b:82:94:87:37:ca:46:44:
         3f:f5:0f:38:06:d4:c0:e6:51:37:50:b9:ce:17:fd:fa:fd:77:
         0a:05:97:8f:cf:e5:13:cd:55:76:4b:43:60:28:df:4d:6f:f6:
         13:17:89:62:32:b3:e1:c0:6c:f8:4b:ca:fa:d7:36:1e:34:83:
         70:c7:08:c2:b0:74:f4:34:a8:29:9c:8c:6e:0a:83:0a:41:51:
         ad:96:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:53 2026 by rpki-client