Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          OnYFTZzS/u35HiAw3t3NJd6Nss7Vz5oqdUWoG3OWz6c=
Subject key identifier:   8F:4C:47:0E:D2:AC:F6:35:DC:2E:ED:88:3B:62:05:AF:91:55:B0:86
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       019CB091E32BDDBF81267B037CD7744E22FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          01F6
Signing time:             Mon 02 Mar 2026 22:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 22:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 22:01:16 +0000
Files and hashes:         1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: icMUH7wfzRC1bYz6f5Rxn+8ROMATRFWCWmFYhYRT44A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:91:e3:2b:dd:bf:81:26:7b:03:7c:d7:74:4e:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Mar  2 22:01:16 2026 GMT
            Not After : Mar  3 22:01:16 2026 GMT
        Subject: CN=8f4c470ed2acf635dc2eed883b6205af9155b086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:a1:82:93:3e:da:27:d4:8b:6d:5d:10:50:
                    e1:c4:ea:06:ea:92:bb:1f:c4:c3:4e:e2:04:29:b7:
                    ac:b1:f1:d0:d4:5f:b5:ca:66:75:6d:88:93:99:45:
                    06:ef:98:12:3b:e3:b4:25:3b:88:d8:b6:63:25:47:
                    2a:ba:d0:e3:95:c9:95:4c:b3:e4:29:c7:50:0b:d9:
                    85:d5:e6:e4:db:b7:4e:bd:1d:52:d4:45:25:33:0d:
                    30:e3:a9:ca:50:73:cb:12:e6:f0:9c:b9:30:d8:d9:
                    f1:f8:59:94:50:72:4e:59:f0:3a:aa:ac:6c:f0:97:
                    3d:75:82:08:b1:e7:9f:af:da:40:f1:8f:c3:5e:b5:
                    0e:60:ae:b5:c5:56:6b:d6:2a:e0:ef:9e:be:53:f4:
                    cf:30:18:8c:70:6a:1e:41:f6:1b:1c:60:45:af:a5:
                    3d:13:cb:a7:78:07:1f:39:b4:cb:90:be:36:57:e6:
                    d4:c3:75:f8:f4:2a:e8:07:6a:78:08:88:5c:ee:09:
                    c1:ce:45:df:6b:8d:ca:13:c3:22:8c:46:c4:a1:dc:
                    be:d2:23:a2:66:43:e5:36:49:08:17:50:8b:7c:c1:
                    51:70:12:32:5b:77:a0:c4:29:93:15:7f:33:53:93:
                    a2:1d:44:28:9e:12:59:b8:2c:db:19:2f:5b:cb:43:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:47:0E:D2:AC:F6:35:DC:2E:ED:88:3B:62:05:AF:91:55:B0:86
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:17:fe:98:97:53:57:45:50:db:fa:fd:53:11:ce:24:01:30:
         79:e1:fa:1d:4f:04:14:a6:7f:61:58:13:8b:a2:d4:e9:0b:94:
         95:72:88:c7:7b:f7:2a:69:d2:e9:c0:6c:94:db:1b:d5:46:c7:
         c1:e3:b6:23:b6:43:82:ce:b0:71:b9:29:81:17:53:51:da:69:
         64:1f:26:9e:60:9b:62:5c:f7:bf:7a:c1:41:76:87:fb:57:93:
         fa:b7:f8:c0:c5:d3:63:30:16:e1:e6:e9:45:4e:3a:09:c4:fe:
         b0:a1:ee:b2:8f:23:ee:9f:2f:c0:de:7e:cd:1d:63:19:4e:14:
         86:45:30:d8:e4:d6:bf:71:38:8d:eb:22:f7:3f:6b:93:61:ce:
         f7:1c:6c:76:04:1d:b7:79:62:6c:a8:4f:71:59:37:ef:f9:1d:
         54:fe:4b:98:6b:f0:c4:95:78:51:f1:49:62:6c:a8:81:38:4c:
         1d:32:51:b2:6d:b4:d1:7c:2c:29:10:30:33:0a:ce:7d:e3:60:
         53:23:4f:16:16:81:2e:1d:a3:97:07:42:2d:44:48:e6:73:d9:
         44:b9:d2:be:ab:b0:98:0f:c0:5d:ca:7e:53:fb:96:b2:c2:16:
         bf:64:a7:b4:7d:f8:ab:48:17:d2:63:40:cb:38:cb:f8:4e:7c:
         62:7c:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:28 2026 by rpki-client