Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File:                     _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier:          KFALDhLc5YvT7iKfzbpyIB+/56aMIA6wrzXVfcR4IJ4=
Subject key identifier:   74:56:7B:3B:9B:3E:CB:76:AB:79:AB:99:4E:15:E7:C3:FE:A2:1D:50
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer:       /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial:       019CA9B375B9CC20757327A88108CBBEF40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number:          03B1
Signing time:             Sun 01 Mar 2026 14:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:36 +0000
Files and hashes:         1: Z9p5PRsPJcpcfVYqAkMqyBk3034.roa (hash: w8kHokFeQrpMZQbH5ifwyBNepwmmhZrhfy48stCdHV4=)
                          2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: ZWuM9AREOHb4g8KfXAyFEhYgpCdq2VBGHAfgn4cQquY=)
                          3: hsde82Yn0Zai2KfVvOVvRJQkb6s.roa (hash: asD6OtDzLwUtMA2lL6s9NrcsSrhXt/W0aGYMIPz5FEY=)
                          4: ri3qi_3hbETchxAIYuVxET53Irk.roa (hash: E9/Qz2B3fdQEYvjVj/oCKg6LSUvau7pLbXfE6BliNuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:75:b9:cc:20:75:73:27:a8:81:08:cb:be:f4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
        Validity
            Not Before: Mar  1 14:00:36 2026 GMT
            Not After : Mar  2 14:00:36 2026 GMT
        Subject: CN=74567b3b9b3ecb76ab79ab994e15e7c3fea21d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:9c:b4:06:64:fe:8c:8a:fd:f1:f4:9b:78:
                    c2:6c:a1:8e:92:4a:26:40:83:98:e4:10:87:46:b3:
                    55:3b:51:2a:46:d8:4f:2c:60:1e:37:b9:3d:5e:44:
                    da:a4:05:48:a4:24:f1:8b:3e:db:d7:7e:c0:72:f0:
                    a1:27:c5:be:a6:99:d0:d1:ac:9e:cc:04:7c:b6:ee:
                    6d:22:76:9c:e1:a2:0f:86:69:40:be:dc:1e:f6:b7:
                    c1:e6:a2:d6:75:ff:c2:2b:e8:3f:4b:07:6e:85:00:
                    94:31:8b:55:5b:43:ee:82:04:5f:b0:60:0c:21:f3:
                    0e:08:c2:51:02:76:7d:66:88:15:e3:54:c7:8c:05:
                    ad:74:49:ff:ea:ec:29:5a:ec:fa:11:a4:3c:7a:89:
                    c6:42:2b:77:9b:c8:9f:66:71:5a:38:b3:ea:a2:18:
                    63:08:54:60:76:2f:e7:31:9b:8c:0b:88:a1:0f:c6:
                    55:17:8e:47:6e:b1:3c:9c:6e:f2:28:a0:08:e5:31:
                    98:ed:e4:65:fb:13:36:36:e4:76:5c:10:c4:84:4a:
                    4d:4a:f7:37:0f:9b:3d:c9:c9:bb:ac:f9:9d:c3:2d:
                    fe:12:40:14:41:18:89:fc:d2:be:fd:22:51:fa:46:
                    bd:f3:fd:9a:8f:b0:09:cc:a6:7b:85:62:68:51:8e:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:56:7B:3B:9B:3E:CB:76:AB:79:AB:99:4E:15:E7:C3:FE:A2:1D:50
            X509v3 Authority Key Identifier:
                keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:14:27:e1:4c:b2:03:55:d7:20:a1:4a:d8:a6:16:73:2d:
         00:05:63:f8:c8:40:ec:5d:00:63:c6:16:a1:57:47:e2:55:92:
         80:ff:81:5a:b3:57:90:00:64:7b:a3:8a:73:0d:1f:9d:2c:58:
         4b:8e:0c:c0:c8:e6:01:e9:fa:03:61:be:05:db:60:5e:bc:fa:
         df:f8:30:31:c6:e7:ff:f7:07:a2:89:83:ae:5c:a8:9a:38:d8:
         72:7a:30:44:ba:df:2f:39:59:ea:d8:77:07:16:59:9c:de:6b:
         2f:d9:44:1d:2a:24:71:7f:b0:ba:89:29:4a:7a:97:5b:12:a6:
         f4:84:fa:1c:b0:b2:93:32:13:88:23:9c:6d:14:3f:4a:a0:b5:
         fd:ec:bd:93:43:a4:6f:a5:96:3b:1c:cd:97:3c:2c:24:a7:fa:
         0f:01:23:d7:6e:85:85:4c:06:9f:9c:fa:e5:b9:b5:ef:64:70:
         8a:94:d9:df:a3:dc:af:f8:48:04:89:f6:ce:ef:a5:5b:99:a0:
         6b:45:92:9b:9e:1b:df:91:2e:76:e8:83:4e:03:72:b2:f7:2a:
         d4:99:7e:61:3a:96:a3:a9:4d:de:6a:39:de:08:c7:86:b9:af:
         4f:d9:1b:75:c5:4e:55:d0:e9:7b:00:b5:3f:98:c8:b7:52:57:
         81:a3:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:49 2026 by rpki-client