Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          8lPpYbDr7TyaS+Z+4fxVATmYaqAAS6gQX6rV2L6gQAY=
Subject key identifier:   41:16:E5:15:9A:09:50:1D:B3:09:9D:61:05:C3:0C:FC:CE:09:F0:0D
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019D2B4EBAD615425856A9592FBB77F6899F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          0792
Signing time:             Thu 26 Mar 2026 18:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:13 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: sC4mrHojMoC4++irujycr6+aomKyjTlzNofsxskjWEo=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:ba:d6:15:42:58:56:a9:59:2f:bb:77:f6:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Mar 26 18:01:13 2026 GMT
            Not After : Mar 27 18:01:13 2026 GMT
        Subject: CN=4116e5159a09501db3099d6105c30cfcce09f00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:30:63:5e:ec:0c:90:70:8c:2d:44:85:96:
                    2c:01:ef:f8:bc:b2:81:9f:5d:06:8c:0b:0a:20:35:
                    2e:f5:e9:33:ba:9c:3f:2b:f2:d9:a9:7b:d7:fa:f8:
                    d9:20:ce:f5:4c:50:47:10:86:d0:77:da:6f:c6:3f:
                    8a:33:fb:81:4f:14:f2:c6:fc:5c:86:90:6c:f6:da:
                    33:a7:ba:26:02:c7:9d:fc:69:a6:41:66:fe:59:45:
                    8c:2c:2e:eb:26:39:e9:d9:7a:63:4b:d0:75:05:0d:
                    d7:01:26:bc:b9:f2:46:7c:32:90:4d:3c:3f:1a:5f:
                    59:e4:6d:6f:ad:c0:03:fd:3d:c9:55:5e:da:82:cd:
                    19:0f:f6:99:ea:4e:51:2a:c6:14:c9:31:c7:c5:45:
                    27:f0:0c:65:f2:67:49:c7:0e:15:e9:77:22:44:4a:
                    27:4f:18:ab:0a:9d:1b:19:1e:14:7a:21:d3:0f:ba:
                    d0:53:4e:ee:86:dd:c3:da:b7:5a:51:cb:f1:57:02:
                    a4:86:e9:66:e4:3f:12:cc:0e:29:5a:3e:d2:ec:50:
                    ff:12:69:93:7d:e7:a1:b0:c0:95:52:12:98:30:77:
                    1f:2f:14:62:c3:a5:70:6a:01:32:54:5f:ba:3f:7f:
                    b9:c2:bc:17:04:2b:90:c9:ae:7d:9d:98:60:6d:72:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:E5:15:9A:09:50:1D:B3:09:9D:61:05:C3:0C:FC:CE:09:F0:0D
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:9b:dc:79:ad:6f:ff:84:62:71:c5:9c:bb:db:05:22:a7:
         61:f1:ad:24:d8:2b:f5:a5:d1:e2:10:e0:88:c1:fa:1b:a2:96:
         9f:e6:d7:37:7b:4b:fe:e2:d3:4b:fd:2e:8d:a4:99:b4:20:8d:
         cb:55:e3:36:ce:b9:a8:35:57:99:31:56:c5:40:0a:76:20:58:
         01:ed:84:f9:b1:25:b0:c7:2e:cb:ce:be:79:69:69:49:9b:7f:
         39:5f:52:f8:23:85:09:4a:7e:d6:f5:fa:9a:06:2c:2f:7b:ac:
         e9:79:37:a0:70:49:27:6f:73:78:89:e2:41:6e:9a:84:11:16:
         a4:2d:6f:33:0f:cc:4c:6c:39:5a:4d:e6:14:08:82:22:5f:46:
         66:12:d6:6b:5c:e1:cd:e5:eb:16:20:d8:9f:0e:5d:bb:fb:36:
         37:2c:71:c4:60:b0:b6:74:90:42:7a:c6:75:e2:ec:1e:42:a2:
         9a:05:5d:47:f6:d3:e4:7d:e4:a0:67:23:8a:c2:b6:6a:e7:c7:
         53:0a:23:05:c7:5e:5a:46:e8:d5:25:e9:c5:83:3a:2e:04:88:
         cd:0d:6f:1f:b4:a8:37:83:dc:fb:e4:6d:61:f6:80:1e:b0:6e:
         05:70:cb:99:60:2c:38:44:9f:b0:b4:88:59:83:f3:e9:19:8e:
         39:43:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:35 2026 by rpki-client