Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          t7CQ93aC8fUTobkomwfaq8N5yijJOPrPSMXv7ZWGfyo=
Subject key identifier:   12:AD:84:4D:C5:6B:F8:D6:C3:2C:4E:3B:C5:AB:88:CC:42:AC:DE:F9
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       019D26CD512E10E05864B8B22904683AA6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          13EE
Signing time:             Wed 25 Mar 2026 21:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:22 +0000
Files and hashes:         1: 8x2lbzATa3H4_U7d408bsEgZzKw.roa (hash: 53Kid1ogHSH7N2teYQIc9O6E1We0YD/42VIa5q1GrYE=)
                          2: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: IiH2ER4+AmTYfoxwTaiZzNErg/PMJTJbM6PFRT4SUvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:51:2e:10:e0:58:64:b8:b2:29:04:68:3a:a6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Mar 25 21:01:22 2026 GMT
            Not After : Mar 26 21:01:22 2026 GMT
        Subject: CN=12ad844dc56bf8d6c32c4e3bc5ab88cc42acdef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:da:cc:12:8d:a6:c5:84:75:57:5e:3b:ed:
                    ee:a0:93:17:6f:5c:52:cb:51:eb:16:1b:4e:54:3a:
                    99:0d:68:46:a9:42:d2:5b:45:ab:ac:80:55:e6:eb:
                    d8:31:45:a9:ee:71:5c:32:67:26:a6:12:a1:de:64:
                    2c:93:cd:c5:57:21:30:de:af:d8:4f:6e:c7:98:94:
                    91:99:09:bc:e3:b5:f8:a5:56:e4:78:d6:22:f6:a9:
                    51:b0:76:3f:71:39:58:d5:20:e0:38:3d:28:3a:28:
                    22:51:b1:2b:90:53:a7:c0:d0:fb:f5:e4:53:43:1c:
                    8c:4c:48:a0:4f:3f:0d:27:e0:44:ea:2d:4f:aa:89:
                    5f:f6:a0:1a:b0:aa:6a:be:3a:b3:c8:cc:43:01:69:
                    9a:cf:75:ef:bc:fa:2a:fb:27:9c:23:8b:33:71:61:
                    03:d0:49:37:cb:0c:fb:a8:c5:c5:c5:e7:1a:7b:a0:
                    6c:e2:37:62:aa:67:e0:ea:35:68:63:75:39:bf:a4:
                    4c:08:13:90:80:7c:53:93:4f:56:47:1b:fe:a1:f1:
                    b1:f7:3c:37:55:7a:5b:a1:a6:4e:61:b7:3e:a0:88:
                    fa:30:5d:6c:72:2f:f6:d0:02:1d:80:19:7f:d9:64:
                    d8:73:0a:58:07:bf:9b:95:86:6f:37:96:59:44:57:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AD:84:4D:C5:6B:F8:D6:C3:2C:4E:3B:C5:AB:88:CC:42:AC:DE:F9
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:e7:4f:3f:af:00:4f:9f:25:73:78:c5:9f:fa:0e:62:25:
         2a:cf:70:8e:45:11:eb:72:6e:52:62:96:b0:d0:0f:44:7e:6f:
         2d:b3:b8:e3:b4:3a:27:6f:47:79:e5:0c:4a:d7:db:1c:0e:35:
         b4:57:4f:7e:47:66:7b:de:ba:ef:e9:e6:d5:fe:1b:44:9f:c7:
         e3:91:1d:8d:68:05:4c:bd:09:a1:0c:0e:52:f1:69:fa:a3:5a:
         2b:4f:83:09:55:e8:fd:f1:df:7c:8c:66:ba:43:ec:9d:70:16:
         91:f5:9e:74:0b:51:2a:15:71:86:22:a5:92:f8:2b:58:5c:94:
         5d:e1:49:4e:61:60:5a:e7:78:c7:d8:b5:df:ee:21:65:fa:02:
         73:28:7b:41:86:e5:b6:2e:b5:6a:22:8a:bc:5c:4f:11:a6:0d:
         cd:dc:ea:e2:c6:86:ca:02:9d:ee:b8:3c:66:68:93:7d:78:c3:
         ea:4a:5b:ec:07:fb:f4:b2:8a:ea:74:17:bd:cb:41:29:71:a4:
         1b:b6:b3:66:b7:f1:49:ca:3b:26:d7:84:98:15:2f:48:b4:55:
         f6:98:78:0e:b3:e5:25:bb:01:0a:cc:42:07:92:d9:40:b9:5a:
         9d:ef:84:9e:09:a0:ce:2a:08:0c:1a:39:a1:ee:e0:c4:72:94:
         41:54:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:56 2026 by rpki-client