Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          QXLsZwH1bSBfBdIMWfFMWH0PAE3s3jn99arV791VH5s=
Subject key identifier:   07:D3:E8:3C:AB:BC:71:C3:2F:47:2F:64:71:A7:26:AA:6E:46:F7:D5
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       019D284DC25F1BDEB5418D76DB591495DCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 04:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:17 +0000
Files and hashes:         1: VHsD8aL1vap6NAd4VLOWJjjdFBw.roa (hash: Agb4+5pAbO8W2wpY0iP++EYhU8rZOrnE7m9i9w0XK+o=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: DtS7vbnhQ4vpcPCaF+fKRjWe0fUDtv1shMZUcOe2IZE=)
                          3: pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa (hash: IH7FpqZHwFM0JUZGv3kglgPf6fO/pFT+0CvShFXfFHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c2:5f:1b:de:b5:41:8d:76:db:59:14:95:dc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Mar 26 04:01:17 2026 GMT
            Not After : Mar 27 04:01:17 2026 GMT
        Subject: CN=07d3e83cabbc71c32f472f6471a726aa6e46f7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:61:cc:ca:9d:57:0e:6a:1e:d2:e3:2b:dd:
                    be:2b:82:62:cc:12:73:dd:6a:01:66:27:ef:6c:ca:
                    1d:3e:5a:5b:6f:9c:d2:6a:fd:06:f5:52:99:47:58:
                    1c:65:12:f4:cc:fd:87:53:9f:f7:d9:45:9d:96:62:
                    28:9b:d4:fa:8d:ac:7d:9c:08:c5:2c:90:c5:67:5f:
                    33:aa:a0:d3:40:f8:33:74:8f:02:12:07:af:4b:f3:
                    87:a0:7b:81:1d:19:84:46:8e:26:51:93:3d:55:29:
                    45:43:be:42:29:0d:c4:a9:57:4e:41:52:f1:c9:63:
                    e9:75:1c:86:3a:77:4a:14:d7:f2:fd:fd:19:56:00:
                    9d:7a:e6:7c:9a:8b:5f:65:e2:a0:44:cf:a7:00:88:
                    02:a8:7f:85:87:6c:05:46:d3:f0:13:c2:70:a5:11:
                    7e:c7:43:ec:e6:6f:85:e7:86:41:4d:e6:e3:85:4a:
                    25:11:59:52:27:5f:f4:4d:47:41:aa:e1:7b:3e:e3:
                    f7:9d:80:58:da:b7:97:d2:88:ef:a7:22:4a:0e:9a:
                    7f:44:d4:c7:8f:58:43:4e:c9:4e:cc:94:e1:90:5e:
                    63:be:3a:c4:ed:20:4a:e2:0e:da:63:fa:43:11:1c:
                    54:23:01:5f:44:47:d2:3b:2b:4a:15:52:2c:03:93:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:E8:3C:AB:BC:71:C3:2F:47:2F:64:71:A7:26:AA:6E:46:F7:D5
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:44:a2:1c:af:8a:4c:04:cf:0a:22:fc:c5:b7:cf:2b:95:
         2a:4c:eb:b7:08:e4:64:9f:40:ad:f3:af:bd:ee:ed:66:24:76:
         0a:e3:45:66:46:ed:24:28:87:5e:4e:0f:6e:b8:91:b5:40:2b:
         81:6a:38:a4:6c:93:a7:b3:76:d9:8d:ed:c2:61:e1:b2:ac:fc:
         52:5a:3b:dd:f5:d6:14:95:b7:71:7d:67:ea:5c:5d:59:87:34:
         97:9c:17:48:17:25:6c:a2:e1:86:8e:f4:cf:2b:ba:6d:12:8f:
         44:6f:c4:98:ae:36:bf:8c:f2:cb:f5:92:b0:7d:c9:6d:4d:45:
         ee:69:60:e2:58:f8:f1:31:5e:68:cf:22:87:3d:60:79:e2:6d:
         19:29:e3:0e:5c:08:ae:b4:5c:97:dc:a9:10:87:83:f2:06:74:
         2f:b8:2b:4f:66:e3:62:13:3e:f1:10:2d:a7:5b:cb:ef:f9:2d:
         2d:2c:fd:b7:eb:90:0e:3c:0a:c6:94:ce:c5:f0:cf:80:ad:fe:
         1d:85:89:9e:a3:fe:a7:38:56:66:d1:91:7f:34:c6:03:86:b4:
         68:c3:c3:1c:3e:34:cd:83:01:c1:17:50:ea:6b:b3:c8:e7:f3:
         0f:47:99:a6:45:90:2d:a4:2e:55:3e:ce:5d:68:2d:83:e8:3a:
         9d:a5:9e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTcJfG961QY1221kUldy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl
NjVlNjUwHhcNMjYwMzI2MDQwMTE3WhcNMjYwMzI3MDQwMTE3WjAzMTEwLwYDVQQD
EygwN2QzZTgzY2FiYmM3MWMzMmY0NzJmNjQ3MWE3MjZhYTZlNDZmN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LBhzMqdVw5qHtLjK92+K4JizBJz
3WoBZifvbModPlpbb5zSav0G9VKZR1gcZRL0zP2HU5/32UWdlmIom9T6jax9nAjF
LJDFZ18zqqDTQPgzdI8CEgevS/OHoHuBHRmERo4mUZM9VSlFQ75CKQ3EqVdOQVLx
yWPpdRyGOndKFNfy/f0ZVgCdeuZ8motfZeKgRM+nAIgCqH+Fh2wFRtPwE8JwpRF+
x0Ps5m+F54ZBTebjhUolEVlSJ1/0TUdBquF7PuP3nYBY2reX0ojvpyJKDpp/RNTH
j1hDTslOzJThkF5jvjrE7SBK4g7aY/pDERxUIwFfREfSOytKFVIsA5MqHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfT6DyrvHHDL0cvZHGnJqpuRvfVMB8GA1UdIwQY
MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt
OTQ3ZWFkOWYxNGVkLzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk
LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+JEohyv
ikwEzwoi/MW3zyuVKkzrtwjkZJ9ArfOvve7tZiR2CuNFZkbtJCiHXk4PbriRtUAr
gWo4pGyTp7N22Y3twmHhsqz8Ulo73fXWFJW3cX1n6lxdWYc0l5wXSBclbKLhho70
zyu6bRKPRG/EmK42v4zyy/WSsH3JbU1F7mlg4lj48TFeaM8ihz1geeJtGSnjDlwI
rrRcl9ypEIeD8gZ0L7grT2bjYhM+8RAtp1vL7/ktLSz9t+uQDjwKxpTOxfDPgK3+
HYWJnqP+pzhWZtGRfzTGA4a0aMPDHD40zYMBwRdQ6muzyOfzD0eZpkWQLaQuVT7O
XWgtg+g6naWeiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:24 2026 by rpki-client