Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File:                     yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier:          eFRgMxyAaGk9M1qCjsJ7dok9LQKtQBmOHg1f4CRXivY=
Subject key identifier:   E9:56:9D:C7:54:8E:41:34:5C:4B:F5:29:CD:4F:45:6E:1C:96:8F:DD
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer:       /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial:       019CAC46B3B0925730A3805C50DBFF106369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 02:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:40 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:40 +0000
Files and hashes:         1: 6xzwjLfc074wzpSsasUFpTvwQ78.roa (hash: fXZfzg+UYAPpupI96tb5/VxIz5QW19/qQNhNNMcTUWI=)
                          2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: WisRUqeJSObro8kHc9/y6AG0757jOl85m/qQD1SmPiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:b3:b0:92:57:30:a3:80:5c:50:db:ff:10:63:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
        Validity
            Not Before: Mar  2 02:00:40 2026 GMT
            Not After : Mar  3 02:00:40 2026 GMT
        Subject: CN=e9569dc7548e41345c4bf529cd4f456e1c968fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:9d:f2:05:2f:d2:8c:9b:4c:a3:e5:47:7c:
                    63:b9:9e:82:8a:5f:8b:22:02:79:c5:44:4e:a4:42:
                    75:07:f8:7e:e1:2a:ea:5a:a8:a0:7b:28:e4:7b:f1:
                    a7:3d:94:75:c8:90:5a:9c:b0:c5:35:f1:33:15:41:
                    f1:c0:6e:7c:9d:59:f6:59:63:4a:70:e5:7c:84:9a:
                    05:b8:e8:af:09:6b:ec:58:77:c0:13:65:8d:da:80:
                    b5:21:7b:0c:16:8e:12:18:70:17:ca:d4:e0:b5:08:
                    6c:30:05:17:e5:1b:2c:f6:77:48:db:65:a2:b3:ed:
                    8a:ff:5e:88:35:03:73:08:07:a4:da:8b:68:1c:4f:
                    51:11:a2:1b:fb:37:a9:6c:c8:13:26:68:52:9e:4a:
                    a7:09:1e:6c:ac:ad:7b:ec:78:5d:ea:b9:8e:62:bb:
                    ec:f5:b0:f0:6a:d1:04:54:53:d4:2f:0c:48:b1:d9:
                    6c:65:1c:53:4b:e4:2b:05:2d:91:00:0e:51:f3:e5:
                    d7:f2:01:dc:0f:b7:25:9e:11:5a:be:6d:ee:b8:93:
                    dd:b4:2a:0a:2c:8c:6e:78:c1:16:49:0f:fa:6e:9a:
                    aa:d8:78:61:44:dd:4e:11:d6:0e:7f:f1:d0:8b:82:
                    ba:d9:24:51:f7:78:2f:de:57:a9:4b:fb:5f:07:5d:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:9D:C7:54:8E:41:34:5C:4B:F5:29:CD:4F:45:6E:1C:96:8F:DD
            X509v3 Authority Key Identifier:
                keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:40:e1:5b:98:ad:58:75:5b:8e:98:9f:91:ca:36:53:f7:b7:
         05:8e:8c:54:6a:2e:4e:5b:49:f8:36:e8:ba:a0:9f:7f:b4:a1:
         eb:54:9a:b7:38:01:4d:9c:ad:e3:93:c7:ee:40:f1:18:16:af:
         3b:4d:b9:3d:1c:1f:66:1e:e2:25:b9:47:51:fc:f1:3a:78:8d:
         cb:8d:fe:4d:f0:f5:b0:72:86:93:85:c7:55:0f:e4:2b:30:f7:
         1b:9a:55:c5:0c:25:ee:dd:e0:ed:90:2a:9b:9a:c2:d6:a4:2c:
         fe:51:ee:be:96:b5:27:14:48:56:01:78:11:9c:f1:8f:0e:c6:
         e1:36:1e:27:a1:a1:ef:03:e1:12:a7:79:93:c5:e4:c5:22:98:
         e2:2b:fa:86:bd:9f:1a:43:c2:f3:69:d2:9b:94:5c:4c:04:7c:
         3a:f4:d3:70:ca:b8:a5:b3:79:81:f9:0b:e4:4d:82:8f:44:56:
         98:a5:ca:d9:62:64:d2:ee:4c:9a:80:7f:df:10:02:ab:72:2a:
         46:0d:7f:26:09:ed:97:f5:d1:9f:5c:7e:9e:e8:ff:81:73:98:
         b4:07:dd:ff:46:20:5d:66:40:12:73:84:fa:19:77:8b:04:fd:
         cd:66:1f:4b:7e:04:a2:4f:6d:38:6d:a1:88:0a:99:fa:d8:dc:
         f3:15:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:06 2026 by rpki-client