Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          jYh0jlIV6MuFxSpM7yoWzUOo7RhAc91dlQcdvnpqN/A=
Subject key identifier:   F9:D4:B2:70:39:83:4F:B2:FC:A2:54:58:9B:26:0A:BC:99:1B:13:1E
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019CAB347C240D74C6D69491196F349496FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          70
Signing time:             Sun 01 Mar 2026 21:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:09 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: wyr+fn4eVpUOSIngK3HUxOAiE/ENFJzVFdwpubCBcK8=)
                          4: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          5: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:7c:24:0d:74:c6:d6:94:91:19:6f:34:94:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: Mar  1 21:01:09 2026 GMT
            Not After : Mar  2 21:01:09 2026 GMT
        Subject: CN=f9d4b27039834fb2fca254589b260abc991b131e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:52:85:14:51:8a:04:33:5d:a0:0a:5b:b7:
                    be:12:a3:2c:37:05:88:98:18:82:4c:4f:50:3f:63:
                    07:66:bb:2b:b1:e0:ad:25:23:f8:6b:ed:0c:e8:bc:
                    8d:11:fd:16:e9:f7:51:9f:45:1f:83:a5:86:0f:47:
                    66:9a:13:a5:ba:39:69:f0:0f:66:9c:cb:4a:eb:a1:
                    a7:14:0d:15:01:7e:9d:e4:31:76:7e:b5:82:b1:9c:
                    7c:b6:2f:2a:8d:ce:9b:54:c6:a9:9a:11:2b:65:f4:
                    7c:ec:d5:0c:b3:eb:0b:82:07:48:71:25:18:14:1c:
                    76:91:c0:3a:9e:3b:ab:8c:bd:d7:ab:c8:ab:7b:eb:
                    14:77:e4:db:0b:b3:56:e6:49:dc:d0:c6:8c:93:56:
                    24:9c:e7:12:12:00:a3:3b:73:42:2e:23:98:25:83:
                    f1:17:13:a1:82:28:5e:53:80:b9:1f:78:40:42:88:
                    ff:68:0b:be:25:05:36:7b:30:62:54:83:13:1a:ce:
                    e5:d8:94:61:e0:04:86:75:b2:a1:22:3f:3a:d8:64:
                    77:ff:aa:a1:89:22:ff:fa:6e:17:05:3b:86:66:c6:
                    45:8d:5a:cd:35:87:e5:c0:66:5b:3e:e5:39:97:84:
                    d0:99:10:b7:93:ab:5f:c6:02:bb:4a:62:55:43:88:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:B2:70:39:83:4F:B2:FC:A2:54:58:9B:26:0A:BC:99:1B:13:1E
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:28:39:83:09:f1:be:40:e5:21:21:c3:d5:ae:76:a9:de:
         44:09:93:7c:1e:7f:f0:17:de:21:15:7e:82:9e:f8:ab:c0:1f:
         5e:ba:23:6f:4a:d6:f0:9b:d7:d2:72:29:d4:41:bb:ff:6a:e0:
         72:f8:78:a7:1b:fe:2a:6b:f9:aa:e5:76:53:f7:0d:69:53:5e:
         a3:b1:35:bf:ec:88:b1:67:56:d7:84:e0:dc:7f:60:4b:d8:19:
         75:5a:b9:06:8e:0c:f0:fe:e3:9b:c5:7f:70:e8:99:17:35:ee:
         fe:a8:5b:77:42:51:af:8a:a2:53:b0:c6:0a:b9:51:1a:86:2d:
         cf:f5:cf:58:4d:fd:5e:83:c5:51:09:8a:7f:a8:c8:ec:37:a3:
         e3:76:46:db:df:61:6b:96:2f:96:ff:98:7e:04:45:a4:08:e3:
         50:6e:14:c2:2c:2e:0a:14:d9:94:e2:41:9a:b6:77:57:3f:ce:
         31:17:d9:f7:21:30:c2:ff:27:c4:07:50:73:72:35:83:de:ed:
         39:38:50:40:af:e0:8a:c8:3c:b5:61:2b:81:d5:c6:3a:de:59:
         99:8e:08:b0:d6:fb:1f:e9:9d:5b:80:72:85:60:73:cf:67:40:
         48:5d:74:fb:85:72:48:20:d6:c9:60:f6:03:67:8f:f4:58:8e:
         7a:1b:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:36 2026 by rpki-client