Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          Xngk9KP/GkVGJfW5TRGZSl7tGaIt1PuF24kOkepL8sI=
Subject key identifier:   F0:16:51:0D:03:44:B8:7B:E6:74:BE:5A:DA:7E:8B:26:CA:8E:F8:3F
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019D27727F096D51684DEB4ED6708259EA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          187F
Signing time:             Thu 26 Mar 2026 00:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:48 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
                          5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: xE3KXWcP9oCqqgj4qzjHdD4hUNbwrZsCXCTx0ZChrVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:7f:09:6d:51:68:4d:eb:4e:d6:70:82:59:ea:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Mar 26 00:01:48 2026 GMT
            Not After : Mar 27 00:01:48 2026 GMT
        Subject: CN=f016510d0344b87be674be5ada7e8b26ca8ef83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:be:b2:a0:41:f0:ed:5c:73:b8:67:c5:85:
                    cb:73:09:e6:5f:a0:cf:c0:c6:d4:c2:3c:6c:27:12:
                    4f:d2:79:88:5e:48:54:14:2a:26:42:31:84:0c:08:
                    20:b1:76:fc:9c:38:3e:c2:a3:b2:8f:ef:4e:95:6b:
                    64:7a:47:7d:9b:b1:3c:63:9b:d7:6a:63:24:0e:24:
                    10:a9:22:c0:04:0d:d7:43:45:cc:14:64:b6:e1:16:
                    de:6d:62:e7:a2:15:a2:f6:9b:a9:9f:b2:b9:bd:5a:
                    49:33:db:a5:7a:5e:6b:3b:f1:06:af:00:f7:4c:77:
                    22:75:20:52:d5:0e:fa:bc:45:5a:f4:4d:35:a1:30:
                    39:af:5b:3c:4b:c2:c0:4c:5d:fe:64:87:ea:92:57:
                    24:04:a6:53:65:75:b2:0d:7e:77:66:da:79:c5:a1:
                    20:1d:0a:aa:42:64:bb:d4:87:5d:fa:87:94:8f:2e:
                    48:3b:5c:6c:06:9a:c4:8d:80:8b:ec:ce:5c:ec:2b:
                    1e:17:85:1c:2b:ec:9c:85:3c:8e:d5:72:ce:a6:c0:
                    79:cf:1a:63:75:2e:ed:20:f3:f8:3f:4a:03:c1:b3:
                    03:93:56:4c:f2:0a:fb:48:c4:a3:c6:14:2d:b8:18:
                    75:b7:32:ba:f7:7b:de:07:5d:75:3e:dc:f9:26:b1:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:16:51:0D:03:44:B8:7B:E6:74:BE:5A:DA:7E:8B:26:CA:8E:F8:3F
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:0a:11:49:28:2c:38:3f:db:40:14:86:5e:eb:33:64:6d:
         3f:76:cb:be:fb:37:1a:b3:d1:d9:e4:95:a1:52:c3:a4:15:96:
         65:df:49:dd:f8:30:77:b0:b1:67:3b:94:b2:7c:8d:b9:86:9d:
         ab:b3:1d:e8:ab:08:16:08:12:9b:db:ae:99:b4:17:70:09:d6:
         f2:32:53:0c:9f:24:5b:fa:5c:fb:2b:e5:7d:4e:0c:a7:4d:83:
         06:60:46:89:2a:2d:fd:d6:c6:94:b3:23:e8:e8:e3:e2:f5:72:
         1c:85:ff:8b:4c:1c:35:4d:99:26:fd:55:74:c2:89:8b:1e:7e:
         e6:03:e5:db:b9:59:aa:e0:40:ee:61:0d:72:83:e3:78:56:46:
         93:eb:b8:43:29:0f:7e:b0:76:cd:55:60:3f:37:0c:b9:b4:ba:
         d4:5d:15:1d:bb:b6:fa:2f:7d:3a:da:97:69:42:8c:50:8d:b6:
         1e:0d:35:3d:22:19:e9:5c:ac:94:48:5c:92:09:60:11:32:e0:
         08:47:19:e4:14:39:8e:49:38:9d:82:64:5d:22:7f:5d:f6:7d:
         c8:2f:45:a7:c4:67:de:da:04:7f:95:c5:84:e4:c2:a1:d4:ee:
         d0:91:10:a4:a8:81:18:59:6f:7c:6c:ae:19:f1:c0:8c:76:32:
         a2:fd:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:34 2026 by rpki-client