Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          h6nxUTQxef/wuvWk/qxwC/8TzLVNmATuY8VQisU7gks=
Subject key identifier:   9D:6F:95:3A:57:09:42:40:C9:8B:5D:32:B1:DF:1C:D1:13:D5:B2:C8
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019CAC7E4CC7FEC77D37ADB4A5EC61F132C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0C11
Signing time:             Mon 02 Mar 2026 03:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:24 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: 5bzaDfVEMrjMbKTtcTBTKfzfn97pSIGCOjqdjgjj8Ss=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:4c:c7:fe:c7:7d:37:ad:b4:a5:ec:61:f1:32:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Mar  2 03:01:24 2026 GMT
            Not After : Mar  3 03:01:24 2026 GMT
        Subject: CN=9d6f953a57094240c98b5d32b1df1cd113d5b2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:6f:9d:5a:bb:12:34:6f:91:11:4b:45:59:
                    09:ba:18:0d:af:9c:87:07:af:cd:78:a3:79:c1:d6:
                    35:c8:eb:14:73:d9:97:d1:26:73:32:9b:65:78:97:
                    33:8d:54:36:27:02:9e:a6:28:a2:61:17:aa:6b:dc:
                    10:aa:af:52:3f:83:5f:be:9a:9f:17:27:41:53:e8:
                    99:e3:0f:db:46:01:b3:4f:37:cd:c8:80:c7:16:5b:
                    04:30:5e:22:14:c9:93:9d:27:bc:c3:36:91:d9:96:
                    56:48:80:44:9d:26:39:a6:66:cc:a7:1d:8a:42:93:
                    db:40:fd:a3:b8:b5:25:d8:8d:49:41:4b:38:a7:71:
                    9e:33:57:f8:6a:2a:0b:c4:01:45:78:de:11:24:86:
                    75:9d:4d:2b:ae:3c:4d:3d:41:0f:61:bb:4a:9d:3d:
                    b2:41:29:d1:1b:ba:4d:e1:96:3d:f7:2f:2c:2b:0d:
                    f2:95:3d:9a:43:98:59:27:76:56:19:e2:4a:0e:9a:
                    6a:a5:64:58:30:74:12:6a:85:e5:65:5c:d2:bc:a5:
                    76:19:fa:df:69:a0:70:97:4a:14:28:9e:4a:f2:9b:
                    17:be:75:cc:ee:46:92:de:f3:be:86:7f:f5:ee:f9:
                    df:41:db:58:1a:2b:c7:69:77:7f:91:47:62:8b:ca:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:95:3A:57:09:42:40:C9:8B:5D:32:B1:DF:1C:D1:13:D5:B2:C8
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:44:84:b6:ad:92:ef:3e:54:9f:7f:14:0a:d3:17:d0:55:ca:
         53:7b:33:e4:ab:e4:ad:34:0a:30:bb:66:08:b5:a6:28:56:7a:
         aa:15:5b:d9:da:2d:5f:90:b0:f9:cc:4b:cd:30:78:65:16:ab:
         90:ab:16:16:e9:e5:c4:74:c3:e1:b9:25:d9:cf:87:97:78:47:
         75:12:2f:b8:c9:52:5d:2b:74:88:d4:27:1f:47:ff:6a:4a:1d:
         a2:c0:7a:88:97:5b:d2:63:f2:75:bf:b2:83:d9:51:3a:6d:a2:
         b3:ba:dc:2b:f1:6f:6d:d6:e3:f9:9c:52:f6:c6:fb:32:b6:c6:
         96:2c:c3:18:b4:9e:5f:5b:86:f0:93:aa:fb:3a:c9:e6:eb:d5:
         1d:10:c4:28:5e:7d:e5:52:a4:2f:55:c2:27:db:e7:ef:d1:79:
         22:4e:e5:03:56:26:ad:9c:1b:33:bb:07:d8:b7:9f:f5:ab:23:
         af:95:c6:e6:a0:48:95:7d:4e:bd:ea:a6:c7:d9:2f:ef:51:94:
         df:51:c9:da:a9:c3:34:6c:98:4a:7c:00:4f:f4:eb:50:4d:b1:
         6b:51:c9:55:5d:9d:4b:4f:eb:07:4e:25:cd:11:9a:1c:9f:da:
         fd:7e:51:bb:03:52:06:17:7c:6f:9f:e7:50:ab:45:5a:00:1f:
         13:ab:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:35 2026 by rpki-client