Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File:                     Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier:          snC8oSQgMi/ZkuJIh/XHQCtagYBFbBoxHw2KWGZI/bw=
Subject key identifier:   30:82:E2:34:10:6A:BE:66:8B:9B:67:40:2D:00:05:DC:51:D9:4E:C9
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer:       /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial:       019D26CCC9B23B16E4D385C7C2902936F573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number:          110D
Signing time:             Wed 25 Mar 2026 21:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:48 +0000
Files and hashes:         1: Xxs4ldV2enfWsLfgfxEllPDWnWo.roa (hash: 8Cn8Jb6BuKTBrGl7OMfhVUGxRn/9grjWQRc7jCMSinQ=)
                          2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: Sw4w0i69dpqdKHn2rC/DIWhM4ge6i+CpQMQOe1kiKLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:c9:b2:3b:16:e4:d3:85:c7:c2:90:29:36:f5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
        Validity
            Not Before: Mar 25 21:00:48 2026 GMT
            Not After : Mar 26 21:00:48 2026 GMT
        Subject: CN=3082e234106abe668b9b67402d0005dc51d94ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:c7:24:10:66:6b:79:58:60:25:b8:4a:ec:
                    3a:d3:79:ef:53:38:a5:44:b6:08:77:87:cc:a8:fb:
                    5f:ba:e8:9e:fb:cd:a6:06:a3:6e:7c:ac:7f:a4:af:
                    17:e7:92:3a:b5:b3:a2:0d:7b:3d:d6:67:82:2b:51:
                    f7:15:52:de:a4:f3:cd:a1:e5:0c:34:26:d9:90:97:
                    33:92:06:86:98:a8:62:6d:3f:de:cb:c0:f5:e9:37:
                    3b:fa:2d:c9:30:34:e7:15:d1:9d:d0:e1:67:ab:f3:
                    28:03:9a:56:65:4b:83:ca:6d:31:81:5e:f8:03:dd:
                    85:51:3e:96:f5:d6:c3:35:ae:34:fb:68:bd:08:03:
                    64:76:34:27:0a:78:5e:93:48:20:c7:18:70:07:e3:
                    77:44:95:3f:00:05:ad:6a:7e:23:df:3b:54:d6:32:
                    40:e0:83:c9:5d:24:51:68:21:cd:49:ec:10:91:51:
                    5a:54:e5:3a:4b:f4:32:e2:7b:0c:dc:37:0f:a6:29:
                    a9:0d:1d:1e:32:96:a8:e0:b0:d2:a3:47:eb:33:cc:
                    4f:4f:45:2f:29:39:61:09:68:08:e8:b7:10:5d:98:
                    7b:22:41:b1:fb:f0:62:1e:36:be:65:3e:6c:fa:3c:
                    2f:f9:62:dd:3b:7a:04:1a:75:81:01:32:60:bd:d1:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:E2:34:10:6A:BE:66:8B:9B:67:40:2D:00:05:DC:51:D9:4E:C9
            X509v3 Authority Key Identifier:
                keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:7a:cb:81:d8:ca:1b:1b:79:aa:21:4a:6b:48:0f:ea:0b:
         94:81:89:05:3b:ff:10:be:c7:49:12:bf:f6:70:2f:5d:45:6c:
         21:49:03:28:29:ef:68:e0:4b:32:8d:ed:17:72:f2:a4:9f:3e:
         2d:a7:74:08:8c:1a:e4:62:43:ed:6d:05:1e:dd:30:c8:28:fb:
         dc:ae:0d:c8:0f:d4:13:34:65:8f:19:95:74:36:81:e3:ec:72:
         56:d7:b0:23:3c:35:d1:3e:53:c3:3d:af:28:0f:95:a8:dd:2c:
         fc:47:dc:9f:59:75:a1:42:8c:51:38:1c:b1:de:be:ea:d6:7b:
         85:72:64:61:97:7d:48:99:cb:05:d0:e6:9f:ca:d9:87:8d:29:
         d4:9c:b0:2c:7d:58:4e:c6:fe:b6:24:db:45:34:f5:e4:ae:8a:
         0a:a2:12:1e:4e:0d:86:65:32:86:be:e6:96:04:2f:96:9f:a3:
         d9:48:78:e9:24:a5:39:8a:7e:3a:78:0b:9a:3d:73:fe:6b:64:
         81:71:9e:a6:e6:aa:3b:3e:9d:0c:ec:e0:39:47:76:86:20:ad:
         1d:a1:8d:d4:12:a7:fb:90:dc:90:2a:fd:65:55:07:7e:75:61:
         e8:be:42:ab:d9:e1:15:19:8f:62:46:97:06:89:8d:31:c7:88:
         ea:5f:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:14 2026 by rpki-client