Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          Xz3KpFonDMB7UlQ2lqcGgdVU+z+Q+v8X7aI8DsVQKG4=
Subject key identifier:   0C:8D:D0:F7:03:1A:27:C6:FC:42:F1:A8:11:36:06:25:BB:82:17:C9
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019D2960E0577F26C2D85F14CA078AE73FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          1880
Signing time:             Thu 26 Mar 2026 09:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:47 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
                          5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: OgqxZJHpHYCWZttnwaT8+HJaVwn1teN8qrwk+bY+8nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:e0:57:7f:26:c2:d8:5f:14:ca:07:8a:e7:3f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Mar 26 09:01:47 2026 GMT
            Not After : Mar 27 09:01:47 2026 GMT
        Subject: CN=0c8dd0f7031a27c6fc42f1a811360625bb8217c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:9a:9d:44:ed:15:e5:e9:02:29:49:df:d5:
                    1c:4b:a7:e8:e4:ed:97:0f:e6:80:e0:7e:c7:83:ae:
                    f8:fc:6c:ee:98:83:08:09:c1:d4:d9:62:6c:f8:ac:
                    dc:99:84:31:22:00:95:ed:22:76:29:f0:68:8a:dd:
                    04:82:65:9b:bd:a9:41:e4:44:8c:35:5b:dd:5d:df:
                    a9:1a:7c:16:ba:f7:18:a1:7f:ee:b7:d0:89:b7:46:
                    94:08:ce:e5:7b:94:3b:47:3c:f7:66:61:e6:86:5f:
                    bb:31:ea:d8:53:b7:d7:85:81:d7:7c:8d:e4:13:d4:
                    c4:af:a3:16:ff:6d:3e:9d:a3:12:fc:98:0d:73:2a:
                    cc:a3:08:c6:94:7b:05:f9:8f:09:92:c0:a7:d5:5b:
                    bc:9d:b5:3d:fe:f5:05:1c:20:d6:54:37:13:2e:f4:
                    93:65:60:a3:15:1d:e3:62:51:b8:e7:ac:51:47:0e:
                    f2:1b:d6:c2:e0:ec:a0:6b:87:db:82:84:43:a2:3b:
                    2d:f7:e3:3b:66:8e:64:9a:26:e4:1c:88:3f:fa:50:
                    94:30:b0:cc:db:a4:e3:35:33:a0:fc:65:61:55:42:
                    c7:ac:57:a2:97:d8:22:55:8c:7b:c8:d2:53:c2:f3:
                    5a:c9:33:3a:9a:95:5a:28:66:78:0a:de:cf:b7:0c:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:D0:F7:03:1A:27:C6:FC:42:F1:A8:11:36:06:25:BB:82:17:C9
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:4c:df:2d:d7:8b:9c:bc:ce:47:a3:3a:05:81:04:5f:95:
         ea:3f:ab:46:23:da:0d:60:4d:00:ce:f8:57:7c:07:03:36:22:
         67:24:0e:ad:5e:fd:d8:69:96:fb:8f:e6:70:be:df:ba:80:71:
         46:3a:65:ca:67:dc:e3:1f:c4:cc:90:a5:e4:ac:45:b7:a2:c9:
         32:3f:a7:ba:c7:06:13:54:00:90:6f:6d:19:cf:40:50:82:eb:
         65:7a:41:00:d8:ed:02:20:51:0b:ef:57:54:fa:1e:f8:b2:2f:
         9a:ae:30:44:f0:76:c3:32:f2:13:82:bc:ce:8e:28:a9:db:d3:
         7b:af:f9:7b:54:ee:9d:d9:35:d7:91:71:ad:0a:ee:dc:af:69:
         be:12:6e:d0:a7:48:a8:19:3f:05:08:dc:8b:68:8e:a3:4e:23:
         1b:c4:6e:96:29:52:c0:c9:16:0b:b2:7c:99:3f:b9:3a:c6:82:
         e8:ca:71:12:90:19:39:38:c6:09:61:50:a7:b4:cf:41:e6:96:
         92:d6:0b:fe:38:9e:90:5e:92:34:89:0a:60:fd:8f:4f:1c:fd:
         8c:5b:84:7c:e8:aa:17:5a:21:79:6c:b5:71:eb:33:87:69:b3:
         79:17:8b:a0:70:d8:df:75:cb:46:d2:79:8b:fe:b6:9f:c2:a6:
         bc:a4:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:14 2026 by rpki-client