Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          4qfejOGW6ZMFCZAkRpbWxTGjKT9vwkAK/GNjoNY3nNE=
Subject key identifier:   37:06:FF:4C:D9:1C:5F:6A:3A:EB:E5:2E:5D:FA:2E:45:F4:B8:CE:C2
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019CACB4BDE053978D440CBA8A08A4CC3673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1563
Signing time:             Mon 02 Mar 2026 04:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:52 +0000
Files and hashes:         1: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          2: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          3: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
                          4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          5: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: 6m/unrSwdGXjS3+zKCo6NGEhVG29feK0LbFiGtKIP4I=)
                          7: yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa (hash: uZrw316MsEk/l2BZfI6IcKecY27h3x31Etnd61KuR2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:bd:e0:53:97:8d:44:0c:ba:8a:08:a4:cc:36:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Mar  2 04:00:52 2026 GMT
            Not After : Mar  3 04:00:52 2026 GMT
        Subject: CN=3706ff4cd91c5f6a3aebe52e5dfa2e45f4b8cec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:44:8d:51:87:be:e3:d8:48:f1:33:ff:e7:
                    c5:62:69:b7:72:2d:f7:53:5b:41:e1:54:34:d2:6e:
                    ce:05:f2:33:88:7f:e9:33:0a:e6:76:88:cf:a2:de:
                    7e:cd:a4:f2:6f:c6:c5:4e:a1:71:1b:70:81:9c:01:
                    a3:e3:9f:92:fa:c0:23:bf:e3:cc:ac:d3:80:12:e8:
                    f7:d6:19:49:fd:c1:e7:e2:24:15:21:45:31:0e:97:
                    91:f3:56:b7:99:be:b4:bd:10:8d:97:2a:21:50:52:
                    9f:17:66:80:85:bc:0c:6c:87:05:33:78:23:d2:47:
                    2f:9a:05:79:1b:5b:08:50:15:43:2d:62:c0:30:00:
                    4d:22:40:ac:ef:d0:76:24:57:ab:e5:55:76:46:7c:
                    9e:b9:c4:fb:8d:9d:fa:29:e8:15:4b:1f:7e:58:cd:
                    9a:f6:8a:f3:b9:ab:c2:41:2a:2c:5a:85:a7:e4:70:
                    2d:cb:f0:d4:92:40:ac:6a:9f:aa:bc:1b:c3:58:c5:
                    7e:9c:0a:59:7f:07:39:da:ea:dd:d2:c8:74:8c:e6:
                    89:fb:4c:88:31:d1:ac:ba:ec:17:b1:36:d0:30:50:
                    f0:9c:ae:aa:47:25:0e:01:f9:79:ee:e7:82:19:2d:
                    1b:39:e3:e4:5d:97:5c:67:e4:48:d7:e1:53:30:3d:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:FF:4C:D9:1C:5F:6A:3A:EB:E5:2E:5D:FA:2E:45:F4:B8:CE:C2
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0c:8d:ab:3d:53:64:f4:f5:41:ed:2d:20:05:c1:f9:60:95:
         30:1c:58:06:d8:d6:f4:f4:4f:2b:77:50:6a:95:57:36:f0:04:
         4c:63:f6:60:79:8f:3d:35:92:34:bc:ac:de:78:2f:64:cc:de:
         85:f5:47:08:49:9b:d9:64:5a:9b:6f:de:e4:ff:e4:ba:2f:28:
         d6:67:24:b5:ae:bd:2f:ba:e9:fe:50:91:28:6a:43:c9:50:0c:
         8c:ef:4d:d5:7f:e8:68:bb:b8:fc:17:e3:2b:47:e9:28:ec:1d:
         ac:4b:6b:b3:73:86:f2:82:f5:62:82:74:65:ba:ea:b8:98:eb:
         6e:f0:67:9b:16:c3:70:df:b0:1a:36:dc:e4:8f:18:94:bf:36:
         5e:db:db:52:85:a2:32:aa:b0:17:ac:ec:e9:97:3e:b1:69:ab:
         1f:21:ae:db:8f:d5:43:ff:b6:57:f4:59:8c:53:e2:1c:29:73:
         df:45:99:13:26:5f:e6:03:de:46:d8:14:c0:54:83:95:df:06:
         25:18:e8:73:ea:03:2b:31:1f:68:65:9d:cd:c4:d3:0c:11:15:
         e9:64:1d:02:ac:a0:82:78:d7:06:ff:78:a8:d2:6d:4e:7e:fa:
         b5:fd:65:4f:61:9b:d0:76:5f:09:ed:a7:de:66:b1:04:47:cd:
         81:a4:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:23 2026 by rpki-client