Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          eZotYx/P5zwzxU9nbSNPakWDL1Fna431/2CaxrKlyoE=
Subject key identifier:   60:B2:44:24:5A:93:40:A5:F3:85:1C:F7:96:CE:D0:77:26:00:08:A9
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019CAC102C0EAD5B4F9E05AAFB158F01A378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          1734
Signing time:             Mon 02 Mar 2026 01:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:06 +0000
Files and hashes:         1: J9O43xYmuudrm9WfAZOmdxUp93k.roa (hash: WhtJDa75ObWfQgkdawtnr9LNjIHPdoA2WKgTe+sOn04=)
                          2: Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa (hash: 6F933y3s8qpnKO+0W42o75dsCOaDH4zwy7APnRRHfo4=)
                          3: R5U4tCglGzyQuzN4kbk_EuhCb-0.roa (hash: 5WlSrnWjnkuqY5Nq+W6oJFQd2APt1BSvyimKzbV6aPk=)
                          4: RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa (hash: 13P449YdimsYVanX5WDmnRd1x8g0C5ALwGee8JuRmg8=)
                          5: RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa (hash: 86/7kcMAzf3R35O/Bh30wSQsADQn2qQ5HkYOWkHNE7k=)
                          6: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: 3hkU+HY6uoW4SnbO5ygQUyt3KhUowKoVRztDgSyy+ho=)
                          7: hWTGRtX_3agCTWz-g4m3DDAVtyo.roa (hash: Ws4zA1omnKhz8kQQW18ZcdEyiBUYouQEtdV1UnGpGZk=)
                          8: i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa (hash: ZYcfcqPm8N5o+Ss1WfcUL1JVzc63P9edxulk5VhlC3c=)
                          9: jigHsNicdl1fh604Cm7gsncIpSo.roa (hash: egO5ZL+gBPeAqwobqK6rLtgltAJXbcYCPVXRe34SZBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:2c:0e:ad:5b:4f:9e:05:aa:fb:15:8f:01:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Mar  2 01:01:06 2026 GMT
            Not After : Mar  3 01:01:06 2026 GMT
        Subject: CN=60b244245a9340a5f3851cf796ced077260008a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:21:33:5b:10:e0:82:07:88:a2:27:83:fd:
                    a5:4e:64:5a:8a:ea:39:3f:78:3b:bc:86:e4:0f:50:
                    45:55:59:d9:32:55:70:92:2e:5d:9d:45:d1:d6:8c:
                    4b:d3:ce:0d:89:ad:bc:fa:87:23:77:2e:1c:d8:b8:
                    13:22:ac:35:3a:f4:b0:95:61:5c:90:39:96:50:b6:
                    e8:7f:f3:76:88:64:52:36:cc:e4:77:1c:5b:bf:d3:
                    42:3a:fc:7f:66:b2:bd:f7:6a:d1:71:65:5c:2e:50:
                    db:38:df:58:90:89:40:13:b2:ae:13:0f:0f:79:21:
                    e6:a6:45:e8:5e:0d:10:8d:ec:95:76:47:4e:ef:b0:
                    6a:53:79:67:57:77:db:07:43:01:29:9c:06:9d:15:
                    ba:5f:2c:51:48:5b:e5:af:0b:75:e2:bf:27:a0:c8:
                    64:a2:bd:f1:77:8e:d8:13:c8:ef:61:c7:13:e8:98:
                    64:4c:7a:96:f0:b4:eb:82:76:c2:31:82:08:6d:f1:
                    01:6f:e7:33:40:1e:3c:4f:41:71:71:8b:9c:19:8c:
                    55:13:99:f4:f3:35:d5:61:e2:6d:3a:c5:3c:fd:6c:
                    28:22:5c:0c:46:df:22:d1:5f:b2:22:e4:36:ef:51:
                    e4:94:a5:55:e0:d8:23:4f:be:91:0d:03:f7:44:75:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:44:24:5A:93:40:A5:F3:85:1C:F7:96:CE:D0:77:26:00:08:A9
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:f5:ce:31:19:6b:fc:f9:94:69:e1:e5:bc:8b:d3:07:f6:
         3a:cb:03:7e:3b:43:3d:3e:1e:72:88:f3:3a:45:54:d4:a6:47:
         19:92:1a:03:c7:dd:ae:75:0e:8b:d4:d8:9b:5e:63:4c:43:fa:
         b1:d8:4e:f0:da:d8:f5:60:05:90:93:1e:5a:f5:ae:59:c7:75:
         24:a3:46:0e:73:25:66:ca:7e:49:2d:64:ca:37:d8:51:3e:96:
         5f:83:0e:7a:12:e0:3c:6e:3c:fb:90:65:49:e5:46:72:e1:ac:
         11:ac:53:6d:5d:e2:32:6a:4b:81:a4:06:93:b6:d9:36:bb:47:
         c2:aa:9d:93:c2:2e:5d:27:7a:36:c0:b1:ee:18:8f:7b:63:6c:
         b3:e4:6c:ad:9a:da:81:78:42:60:ea:01:67:8e:b0:08:ed:be:
         eb:8c:d1:12:f0:7c:65:44:f4:6e:f8:a6:db:2f:16:0a:de:82:
         fc:84:03:28:b6:14:03:66:48:2e:cb:91:b4:72:0a:f4:34:3a:
         7f:67:bc:1a:f2:48:31:9b:b9:7a:de:3c:43:bc:df:df:82:16:
         60:03:6f:9f:ea:8a:90:70:45:3c:b3:63:84:a2:d5:ac:0f:17:
         fa:ef:dd:3f:13:f7:2c:fa:8d:3c:b1:9f:98:34:5a:40:43:fe:
         1c:4d:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:47 2026 by rpki-client