Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File:                     2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier:          CsRAdvBvL3goTCmI58vp5u9e+GOywG9RnUnxa7FBm+A=
Subject key identifier:   AF:6A:D9:36:3A:EA:45:F5:4B:6B:26:04:82:16:A0:2A:5D:A2:70:61
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       019CAAC5FD593DA207B7A488898210D1F1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number:          15B1
Signing time:             Sun 01 Mar 2026 19:00:27 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:27 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:27 +0000
Files and hashes:         1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
                          2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
                          3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: 4pwY/p+G5bVVh37Bb3xDv6qwCepHqHx3lD5MtVm/oCU=)
                          4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
                          5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
                          6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
                          7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
                          8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
                          9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c5:fd:59:3d:a2:07:b7:a4:88:89:82:10:d1:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Mar  1 19:00:27 2026 GMT
            Not After : Mar  2 19:00:27 2026 GMT
        Subject: CN=af6ad9363aea45f54b6b26048216a02a5da27061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:ba:6e:62:59:c5:58:63:5b:a3:de:6f:0b:
                    26:ed:ad:91:1e:dc:56:19:a3:14:a3:18:a2:6d:18:
                    9b:f3:80:a6:aa:c6:5c:ac:85:96:b3:58:d4:67:e7:
                    a8:6d:6b:10:ee:bd:a8:a5:ca:5f:21:84:b0:4d:1d:
                    d2:18:b6:26:6f:ff:06:dd:39:6f:39:ef:fd:61:ab:
                    fd:e2:b9:50:02:7f:59:a0:3a:42:5e:59:be:75:1d:
                    a0:13:3b:67:d9:f7:8d:ec:ca:01:ca:f1:8c:e1:77:
                    0b:ad:a4:f0:61:c1:a7:a9:ad:cb:00:18:b0:ab:25:
                    09:5f:bf:d5:47:cf:ce:70:51:70:e6:69:9e:93:6f:
                    b9:b8:0a:0c:dd:6e:01:15:7a:3a:79:d9:46:11:ac:
                    47:ca:b0:01:bd:7f:a9:56:f1:4a:f1:12:a3:2d:cf:
                    68:94:c9:53:51:27:da:91:84:26:d0:ad:d2:9c:1f:
                    8f:b0:8b:16:da:15:06:ea:09:5d:d7:6c:d7:2b:e8:
                    57:5e:4c:2a:fc:f7:c0:17:48:30:d2:0d:36:f6:78:
                    9d:d6:59:64:bc:18:b5:44:52:1d:d3:72:55:0f:57:
                    80:86:0f:2f:b3:35:ce:74:30:52:bc:f9:38:84:ae:
                    21:df:ff:c2:6d:35:d7:a0:6d:1e:f5:58:ee:6b:d0:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:D9:36:3A:EA:45:F5:4B:6B:26:04:82:16:A0:2A:5D:A2:70:61
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:28:15:13:65:d0:f5:ee:58:6c:63:a0:3f:42:e7:69:4b:
         4f:77:b4:6e:f3:87:73:ba:b9:2e:f2:ce:3b:2f:66:a7:d8:4b:
         c7:a7:7d:2e:b0:f5:43:eb:cd:83:73:9f:cb:6d:6e:88:11:da:
         ed:f6:0d:70:2e:d4:0f:57:25:8e:8d:f9:34:50:79:ce:96:2d:
         ce:c1:39:60:0f:b9:01:7a:6f:2c:6e:5a:86:4e:81:2f:d0:57:
         5c:30:1e:1b:37:32:19:e4:e7:0f:0d:73:fc:73:c7:69:bb:cf:
         75:14:15:7c:e9:cb:6c:bb:e5:de:d5:18:1a:af:72:1e:2c:19:
         f2:ae:af:f3:51:1a:4a:c1:c8:f8:e2:eb:0c:32:3b:3b:cb:d0:
         8c:e0:be:da:10:6e:20:e7:3f:48:a5:e6:06:40:78:58:a2:da:
         03:95:d2:f3:2a:b5:7f:8d:dc:60:64:c4:4c:2a:a1:4b:94:d7:
         7d:03:03:5d:92:cd:e9:3a:3c:a1:c6:83:fb:22:60:4c:8e:a0:
         a2:a5:58:d4:41:5b:65:1e:d5:b9:b7:81:43:db:a2:41:7e:99:
         b8:c2:19:66:68:b8:33:aa:cb:cf:95:84:de:e7:2c:ce:45:92:
         3d:7a:87:a3:7f:95:b2:6f:94:be:5a:d0:28:a4:65:ec:76:cb:
         75:39:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:35 2026 by rpki-client