Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          WHQeGP2wgVkwWuFyATFyaTcquxVWxZOXeQv5gmVstN4=
Subject key identifier:   CF:11:56:38:33:DC:60:43:0C:36:EB:5F:A2:87:28:62:AE:6C:01:94
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       019CACEB5D750ADDF8F58FDC35BEA881D7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 05:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:31 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 4lI+lWsS0e5Y/qXGIrHoP0eGE0eA0mBnLPM+O/jaGXg=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:5d:75:0a:dd:f8:f5:8f:dc:35:be:a8:81:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Mar  2 05:00:31 2026 GMT
            Not After : Mar  3 05:00:31 2026 GMT
        Subject: CN=cf11563833dc60430c36eb5fa2872862ae6c0194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:ab:22:2c:78:c6:7d:c5:03:b8:dc:a8:21:
                    81:2a:70:f3:9a:3d:b5:35:ef:31:c7:4f:d1:97:5e:
                    69:9a:71:03:d6:36:64:60:8a:5f:3f:6f:76:db:4f:
                    e4:16:2d:33:6f:90:f3:43:84:f8:ad:aa:ae:0f:fa:
                    28:20:4f:6d:dd:c1:22:ca:eb:65:9d:d9:36:f2:bb:
                    5a:a2:ab:b1:f1:03:8c:63:5e:af:4b:9c:71:2c:54:
                    8b:0a:67:8b:88:c4:8d:9f:91:b0:f1:36:02:0d:38:
                    03:46:48:e0:5e:c4:94:61:fc:65:e7:1a:77:34:50:
                    40:ac:e0:55:5b:2b:c7:8e:31:ce:65:d1:9d:bc:5d:
                    af:b2:7d:7e:f2:29:a7:30:ca:c5:4a:45:91:20:3f:
                    e0:26:d6:33:70:0d:33:25:8b:7a:1a:24:73:a1:4e:
                    6d:37:60:ac:44:49:f9:e0:5e:49:04:27:cd:22:04:
                    ab:39:5a:df:f4:00:38:7c:88:03:05:dd:52:02:98:
                    20:23:58:b7:b0:3e:40:d3:cf:d0:aa:c4:c4:e2:1e:
                    43:fd:24:8f:ce:74:ad:c4:6e:c4:8e:8d:eb:86:22:
                    7b:b9:12:92:39:f6:23:f1:9e:b8:c7:1a:1d:e4:a8:
                    f9:91:8d:09:5e:bc:76:5a:a5:31:a8:95:4a:5c:3c:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:56:38:33:DC:60:43:0C:36:EB:5F:A2:87:28:62:AE:6C:01:94
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:ed:9b:14:1d:ea:7d:15:98:74:5c:54:6d:66:af:73:dc:
         2e:ba:c3:78:ca:ff:27:00:32:6a:cf:03:1f:40:a4:a1:a3:52:
         ed:e0:8a:28:e8:4c:0b:17:af:f4:d1:2e:65:f8:33:6e:8a:e0:
         77:25:08:8b:33:db:e3:32:86:68:4a:aa:d1:f8:c1:fc:0a:94:
         44:1c:b0:19:76:1e:eb:57:ad:20:ff:b3:35:b4:3e:6c:75:1a:
         67:28:57:bf:e9:e3:ef:54:4b:dc:db:5b:71:42:12:c9:41:fb:
         cf:ce:0f:c5:0a:c4:c7:3f:d6:c3:09:09:47:1f:ba:98:c6:16:
         66:60:8b:65:ab:7f:12:02:79:e9:25:bd:62:2a:e3:0e:5d:98:
         76:2f:85:d0:91:7b:58:97:2c:16:fd:c7:74:8b:aa:84:cc:86:
         e9:5f:d9:23:92:a9:66:71:96:72:95:90:2c:02:4a:42:5e:e4:
         8b:c4:14:4c:4a:e6:16:73:69:30:98:08:22:98:5c:65:d7:06:
         d6:e3:db:b4:fe:d6:60:ca:95:3c:37:14:70:14:84:7f:ff:7c:
         8c:e2:93:16:94:c5:5f:04:cc:f5:92:82:43:56:06:ee:0d:54:
         8b:1d:c6:13:81:38:b2:46:87:57:31:3c:ac:4e:72:ff:d6:f2:
         1c:df:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:11 2026 by rpki-client