Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          Uw7jXqK8ycvbxq8FjdwgKZLRvfq6t5Z5CWVNtIdxu9A=
Subject key identifier:   02:85:CD:8E:F7:5B:2C:AF:8F:C8:94:27:73:02:2D:02:56:16:25:AB
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       019D28F3422709753C80FB340B776A474D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          181D
Signing time:             Thu 26 Mar 2026 07:02:03 +0000
Manifest this update:     Thu 26 Mar 2026 07:02:03 +0000
Manifest next update:     Fri 27 Mar 2026 07:02:03 +0000
Files and hashes:         1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
                          2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: ZXzVqmcUuQRcvyxVVHHp//mzNI20Oo0urIf/s4YC+rw=)
                          3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
                          4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
                          5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:42:27:09:75:3c:80:fb:34:0b:77:6a:47:4d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Mar 26 07:02:03 2026 GMT
            Not After : Mar 27 07:02:03 2026 GMT
        Subject: CN=0285cd8ef75b2caf8fc8942773022d02561625ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:e0:ca:63:08:79:19:ae:83:91:8a:36:ac:
                    79:49:7e:eb:0e:6f:a2:e4:bc:03:a6:cb:f2:34:fc:
                    c4:60:bf:78:07:f4:a7:16:98:f4:1c:06:80:ae:48:
                    18:6a:03:61:16:09:6e:50:d3:65:2a:61:8f:73:48:
                    b8:d9:7c:17:6a:a5:2a:c2:4d:fb:09:8c:e0:ad:53:
                    2b:fe:dc:42:02:f7:1b:70:67:d5:24:2a:99:6f:2d:
                    28:fb:08:9d:63:f5:0f:e3:67:fb:ef:20:6e:8a:de:
                    cd:c4:fe:91:d8:e1:06:b8:5a:d0:57:61:4c:c7:4a:
                    c0:f0:c0:2b:28:fa:12:52:ff:cb:df:b1:02:16:e1:
                    0b:cc:ed:4d:b0:fb:d6:bc:08:2c:c5:d2:e5:8b:e0:
                    cb:cd:3a:21:9f:d3:34:b2:a5:7b:1e:ed:1f:83:e3:
                    f1:bc:3c:eb:d7:c4:a1:4d:0b:ce:b5:ed:a4:be:0a:
                    53:f3:f3:18:61:a9:51:c3:10:20:35:af:8b:71:93:
                    3e:90:ff:d1:1f:04:5d:1a:f2:17:7a:47:15:1f:26:
                    61:f4:28:a0:e8:c2:de:54:97:86:34:a2:6f:4c:08:
                    d4:f3:09:aa:4a:6f:ad:73:06:a8:28:f5:24:1c:8d:
                    f5:03:f4:3f:0d:4f:a8:19:99:6e:84:ec:e0:cd:9b:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:CD:8E:F7:5B:2C:AF:8F:C8:94:27:73:02:2D:02:56:16:25:AB
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:c1:55:37:08:5c:98:d8:a7:fc:92:00:bb:75:72:de:b6:
         30:9c:0c:36:c9:89:82:e5:68:f9:85:d4:a2:2c:d7:a3:b1:a0:
         d4:8d:d4:07:eb:1c:ed:4d:ff:a0:3e:08:49:37:a5:c0:b6:03:
         1c:7b:e4:57:7b:8d:17:72:08:d7:a2:3f:85:ed:06:f2:c7:9d:
         84:45:3b:f4:08:f0:5c:dc:5b:fd:1e:a3:76:10:b8:80:1a:28:
         07:bd:c4:91:96:e4:cb:15:5c:1a:0a:d7:78:a4:8e:0b:d3:ca:
         3c:ed:e0:e7:d5:59:d4:65:8f:fe:76:eb:b4:46:f7:bf:ac:22:
         07:40:af:46:f7:49:17:9e:9d:cc:7c:86:92:0e:bc:fd:b7:26:
         fb:0c:52:97:38:cc:f9:26:5e:46:65:fb:a9:b1:95:f0:cb:76:
         01:a1:1e:49:9d:42:24:eb:99:65:01:d1:fc:8e:21:46:dc:2a:
         b7:8c:10:07:75:1d:72:7c:b9:7c:9d:4e:8d:b1:da:97:45:e2:
         d8:39:33:ec:c5:d1:5a:af:d7:c7:7c:22:6a:0c:bd:03:9b:ab:
         02:25:8a:e1:69:10:26:71:fe:3b:9e:a1:4c:34:6d:0d:bb:ac:
         9b:96:cc:c2:6a:4a:82:2b:29:36:63:4e:c3:ae:21:b2:9b:ad:
         70:a4:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:55 2026 by rpki-client