Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          En+1uMZYBu3ArO6UUfJTSR1wrK//1DuCRpMdPaLXf+c=
Subject key identifier:   31:F6:B8:4D:4B:D9:23:28:AB:CC:F9:F3:E8:09:B0:B4:34:A9:52:C4
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019CAA21C6712DFC47155EABEF30F2EC90DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          1733
Signing time:             Sun 01 Mar 2026 16:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:06 +0000
Files and hashes:         1: J9O43xYmuudrm9WfAZOmdxUp93k.roa (hash: WhtJDa75ObWfQgkdawtnr9LNjIHPdoA2WKgTe+sOn04=)
                          2: Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa (hash: 6F933y3s8qpnKO+0W42o75dsCOaDH4zwy7APnRRHfo4=)
                          3: R5U4tCglGzyQuzN4kbk_EuhCb-0.roa (hash: 5WlSrnWjnkuqY5Nq+W6oJFQd2APt1BSvyimKzbV6aPk=)
                          4: RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa (hash: 13P449YdimsYVanX5WDmnRd1x8g0C5ALwGee8JuRmg8=)
                          5: RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa (hash: 86/7kcMAzf3R35O/Bh30wSQsADQn2qQ5HkYOWkHNE7k=)
                          6: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: MQeHfqfStHfSAHg6umSGvFxxT0dwJbE5ZInlsevduJc=)
                          7: hWTGRtX_3agCTWz-g4m3DDAVtyo.roa (hash: Ws4zA1omnKhz8kQQW18ZcdEyiBUYouQEtdV1UnGpGZk=)
                          8: i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa (hash: ZYcfcqPm8N5o+Ss1WfcUL1JVzc63P9edxulk5VhlC3c=)
                          9: jigHsNicdl1fh604Cm7gsncIpSo.roa (hash: egO5ZL+gBPeAqwobqK6rLtgltAJXbcYCPVXRe34SZBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:c6:71:2d:fc:47:15:5e:ab:ef:30:f2:ec:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Mar  1 16:01:06 2026 GMT
            Not After : Mar  2 16:01:06 2026 GMT
        Subject: CN=31f6b84d4bd92328abccf9f3e809b0b434a952c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:55:ca:14:dc:0b:ed:07:9e:33:bf:0e:df:
                    a7:24:99:16:ef:17:8b:46:5e:4b:ed:b8:11:73:2c:
                    aa:93:6e:af:07:38:3a:68:b5:ed:cb:30:f5:2d:27:
                    c5:aa:2a:c1:d8:5c:92:2a:95:b2:30:b9:7e:23:ff:
                    c1:ec:77:77:e7:71:cf:bb:6d:34:17:78:b0:0e:50:
                    a0:26:20:0f:0c:ed:d6:75:79:76:3c:50:74:8b:d3:
                    ad:9e:14:4e:05:cf:7b:c6:66:ad:7d:47:42:6a:5b:
                    5d:ec:b7:ca:56:2a:32:d7:53:60:ce:4a:ec:71:bc:
                    2e:22:62:e1:05:25:7a:d8:c3:04:fc:a7:9e:84:fe:
                    78:01:19:4e:0a:ae:bd:15:42:d0:18:60:9a:79:1c:
                    65:87:67:02:4a:4f:40:41:73:05:c3:63:6b:39:9c:
                    78:35:4a:77:1e:93:b6:19:09:d5:81:f0:6e:3a:bf:
                    ef:51:36:b1:2b:49:5b:09:0a:4f:73:8a:a6:60:d3:
                    77:18:40:0b:77:1b:25:8e:73:98:94:2b:dc:50:8f:
                    0e:b6:b7:e2:66:f3:e6:e6:7e:f8:d8:70:5f:8e:01:
                    80:62:a1:1f:f2:37:88:02:ee:2d:2b:95:91:f6:fb:
                    70:3e:ee:32:6b:20:49:b8:ed:d8:aa:36:c2:c7:87:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:B8:4D:4B:D9:23:28:AB:CC:F9:F3:E8:09:B0:B4:34:A9:52:C4
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ce:70:f8:54:ce:1d:f5:7d:a1:80:77:41:5a:dc:da:6c:de:
         58:44:5a:a1:d6:c1:97:01:91:94:a9:6b:a4:66:6d:9f:36:59:
         f0:10:6e:9e:a2:d5:fe:40:68:d0:40:74:51:b0:c2:75:37:64:
         d4:7a:28:be:c7:9c:1a:5a:c1:65:e8:5a:07:78:e6:b9:fa:43:
         09:5e:7b:f5:6f:3e:a6:89:e9:7f:cd:38:e2:6d:27:fa:28:bf:
         e6:bd:bf:7b:50:61:1f:a9:ae:38:a9:34:1d:35:a9:7b:4b:65:
         42:08:fe:b6:90:45:9d:ff:55:db:b7:ef:5f:d4:5d:ed:fe:86:
         41:9f:10:f1:f7:3d:b3:90:9d:d0:2a:08:e0:e4:28:28:98:c9:
         6b:ef:1f:d3:0c:3a:9b:13:c5:b3:a2:41:d7:4a:0a:ad:e8:d6:
         c7:9c:a1:0b:c7:2f:52:9e:f2:1c:47:4c:0a:c8:83:4e:30:82:
         9d:72:06:cc:d7:2b:3d:de:6e:6a:b9:3f:82:c4:9d:ec:69:e1:
         bc:90:75:77:32:c2:5b:07:46:6c:b2:a6:01:0a:ce:42:05:af:
         ce:1f:e7:6b:de:e1:36:c4:20:95:a8:4b:e6:f6:87:1e:f2:58:
         33:70:f9:d8:17:c8:c9:ad:d9:ad:8d:fb:ec:d7:aa:b8:8d:1e:
         62:2b:1d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIcZxLfxHFV6r7zDy7JDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm
Y2FmMmEwHhcNMjYwMzAxMTYwMTA2WhcNMjYwMzAyMTYwMTA2WjAzMTEwLwYDVQQD
EygzMWY2Yjg0ZDRiZDkyMzI4YWJjY2Y5ZjNlODA5YjBiNDM0YTk1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63JVyhTcC+0HnjO/Dt+nJJkW7xeL
Rl5L7bgRcyyqk26vBzg6aLXtyzD1LSfFqirB2FySKpWyMLl+I//B7Hd353HPu200
F3iwDlCgJiAPDO3WdXl2PFB0i9OtnhROBc97xmatfUdCaltd7LfKVioy11Ngzkrs
cbwuImLhBSV62MME/KeehP54ARlOCq69FULQGGCaeRxlh2cCSk9AQXMFw2NrOZx4
NUp3HpO2GQnVgfBuOr/vUTaxK0lbCQpPc4qmYNN3GEALdxsljnOYlCvcUI8Otrfi
ZvPm5n742HBfjgGAYqEf8jeIAu4tK5WR9vtwPu4yayBJuO3YqjbCx4fOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH2uE1L2SMoq8z58+gJsLQ0qVLEMB8GA1UdIwQY
MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt
MTYzZmI3MDAzZTVkLzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk
LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc5w+FTO
HfV9oYB3QVrc2mzeWERaodbBlwGRlKlrpGZtnzZZ8BBunqLV/kBo0EB0UbDCdTdk
1HoovsecGlrBZehaB3jmufpDCV579W8+ponpf8044m0n+ii/5r2/e1BhH6muOKk0
HTWpe0tlQgj+tpBFnf9V27fvX9Rd7f6GQZ8Q8fc9s5Cd0CoI4OQoKJjJa+8f0ww6
mxPFs6JB10oKrejWx5yhC8cvUp7yHEdMCsiDTjCCnXIGzNcrPd5uark/gsSd7Gnh
vJB1dzLCWwdGbLKmAQrOQgWvzh/na97hNsQglahL5vaHHvJYM3D52BfIya3ZrY37
7NequI0eYisd0g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:46 2026 by rpki-client