Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          3r9vifm4VygHkwokYMx2vtDSyzJ8EQ8GbJxR72jYOzc=
Subject key identifier:   4D:EB:AD:1B:C3:91:FF:E3:9E:C9:67:3D:DC:DD:54:03:98:0A:DA:45
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019CABA1CCA6B50284C58A64CA7C8F6A76E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          186D
Signing time:             Sun 01 Mar 2026 23:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:33 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: FGqFMrR+e5+a/JZ55qIGiNvfEWw5XGfZrN+T4h3pGfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:cc:a6:b5:02:84:c5:8a:64:ca:7c:8f:6a:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Mar  1 23:00:33 2026 GMT
            Not After : Mar  2 23:00:33 2026 GMT
        Subject: CN=4debad1bc391ffe39ec9673ddcdd5403980ada45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:3d:48:87:13:57:45:93:9a:3f:68:bf:d1:
                    7a:73:6d:4c:fd:f0:97:05:aa:92:a7:3c:94:73:6f:
                    98:e0:3a:63:a8:38:3f:49:14:f6:01:60:73:5e:2f:
                    ea:22:c6:5e:00:af:00:be:35:40:14:43:46:62:96:
                    85:36:ea:ed:71:77:b9:a2:29:fd:1e:8f:2a:53:42:
                    9f:ed:bc:6e:e4:79:a1:0e:3a:9d:e3:db:2f:23:7e:
                    01:92:31:d9:ba:c2:2d:f8:d0:e4:71:bf:7b:ef:f3:
                    fd:81:77:ab:3e:01:c5:9d:57:04:6f:6b:71:8c:f1:
                    5b:f5:a5:04:b9:fc:dc:c3:90:70:0d:e9:a6:f0:8c:
                    de:9f:d1:eb:3d:d9:87:b8:b2:37:d3:de:4e:5f:43:
                    af:2b:2f:68:4d:ef:61:c1:68:91:90:64:fc:c7:be:
                    0f:7e:81:de:c8:07:25:5f:6a:a0:7a:87:d7:de:ba:
                    fe:6d:72:eb:5b:60:3b:1f:16:d9:b9:93:3c:06:45:
                    67:bf:9f:86:74:b1:8d:ab:fa:77:cb:15:90:45:94:
                    68:7a:1e:2e:f5:a8:34:9c:b7:5c:1f:e2:c9:00:55:
                    a7:5e:83:12:6a:b5:71:d0:25:1f:b7:e8:61:6c:3b:
                    12:4f:75:1c:a8:28:2c:d1:1d:05:52:70:d9:1c:8d:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:AD:1B:C3:91:FF:E3:9E:C9:67:3D:DC:DD:54:03:98:0A:DA:45
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:df:e9:bb:55:c3:2f:79:f4:58:dd:58:df:1c:67:d0:93:28:
         06:eb:43:1c:20:07:8f:4c:a0:01:49:f6:00:f5:f4:77:1b:b4:
         a9:7a:7d:c8:37:f3:d1:ba:b7:79:82:c1:10:d8:ab:8e:c5:44:
         69:64:e5:75:4d:c2:39:c7:02:97:a0:7a:aa:98:b9:a0:74:30:
         37:73:a8:6e:1a:74:b8:62:f2:f0:c9:49:1c:7d:d7:6f:ad:88:
         eb:02:27:86:67:ef:84:c1:20:18:af:fa:d8:bc:e7:a2:80:fc:
         87:ae:9a:2a:2a:97:d7:6c:40:34:af:43:b7:9d:b4:1e:44:fb:
         e8:11:f6:f1:e6:32:b0:da:9c:18:06:04:bd:dc:1d:df:11:bc:
         d8:72:b1:23:ea:87:e2:0f:44:ef:69:04:d0:43:0e:46:84:15:
         cb:34:87:45:83:a7:11:89:50:be:d4:2c:d4:97:fd:08:63:f2:
         cb:e2:bb:2d:6b:ab:25:34:e9:e2:d2:30:5b:2c:38:48:d1:e6:
         1d:8c:81:d9:61:28:50:8d:f3:8b:9f:f5:31:66:cc:cf:63:db:
         68:8d:8c:1c:8f:39:65:77:04:ff:8e:8c:f4:f9:9a:32:fd:12:
         17:f5:6b:e3:5a:dd:aa:74:49:1c:09:33:ce:03:4e:d9:4d:cb:
         71:2b:60:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocymtQKExYpkynyPanbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjYwMzAxMjMwMDMzWhcNMjYwMzAyMjMwMDMzWjAzMTEwLwYDVQQD
Eyg0ZGViYWQxYmMzOTFmZmUzOWVjOTY3M2RkY2RkNTQwMzk4MGFkYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEY9SIcTV0WTmj9ov9F6c21M/fCX
BaqSpzyUc2+Y4DpjqDg/SRT2AWBzXi/qIsZeAK8AvjVAFENGYpaFNurtcXe5oin9
Ho8qU0Kf7bxu5HmhDjqd49svI34BkjHZusIt+NDkcb977/P9gXerPgHFnVcEb2tx
jPFb9aUEufzcw5BwDemm8Izen9HrPdmHuLI3095OX0OvKy9oTe9hwWiRkGT8x74P
foHeyAclX2qgeofX3rr+bXLrW2A7HxbZuZM8BkVnv5+GdLGNq/p3yxWQRZRoeh4u
9ag0nLdcH+LJAFWnXoMSarVx0CUft+hhbDsST3UcqCgs0R0FUnDZHI266QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3rrRvDkf/jnslnPdzdVAOYCtpFMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut/pu1XD
L3n0WN1Y3xxn0JMoButDHCAHj0ygAUn2APX0dxu0qXp9yDfz0bq3eYLBENirjsVE
aWTldU3COccCl6B6qpi5oHQwN3Oobhp0uGLy8MlJHH3Xb62I6wInhmfvhMEgGK/6
2LznooD8h66aKiqX12xANK9Dt520HkT76BH28eYysNqcGAYEvdwd3xG82HKxI+qH
4g9E72kE0EMORoQVyzSHRYOnEYlQvtQs1Jf9CGPyy+K7LWurJTTp4tIwWyw4SNHm
HYyB2WEoUI3zi5/1MWbMz2PbaI2MHI85ZXcE/46M9PmaMv0SF/Vr41rdqnRJHAkz
zgNO2U3LcStgog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:29 2026 by rpki-client