Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          n09fpw1OHi400PMK7sadIykytGUkFT1AS+sHX3lTdEI=
Subject key identifier:   F1:7D:73:9B:8B:2F:2E:1A:4B:49:B3:0B:4F:0B:1D:C8:86:FB:2F:9D
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       019CA97D4CCF442EC91112919397B4C26522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          0ED8
Signing time:             Sun 01 Mar 2026 13:01:26 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:26 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:26 +0000
Files and hashes:         1: 9qaqud_c4V53thjjkEblp5yEtNw.roa (hash: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: FTvIqmQuaH1qnKSRQuW2DD60IrZ6EkqafMIncrfS0t8=)
                          3: h_hzjLW67wHlOyeEeE48OzILdyk.roa (hash: OBEq0IJXfkXFzJ3vqHNWHMcPsC7MjRnngy52bDrCEpY=)
                          4: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (hash: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:4c:cf:44:2e:c9:11:12:91:93:97:b4:c2:65:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Mar  1 13:01:26 2026 GMT
            Not After : Mar  2 13:01:26 2026 GMT
        Subject: CN=f17d739b8b2f2e1a4b49b30b4f0b1dc886fb2f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:69:27:9b:90:2f:0c:84:17:a0:35:4b:01:
                    b0:75:1e:e0:fa:d2:c8:cb:84:c2:1d:6f:18:34:3c:
                    e9:d8:b5:5a:5c:32:48:9d:2a:db:3a:c9:99:f7:56:
                    55:bf:00:de:5d:70:13:59:e3:9a:42:55:8b:a5:c5:
                    55:db:b7:94:e8:3e:b7:35:21:95:cb:16:72:9d:6e:
                    1a:6f:c1:03:42:2a:83:e2:28:2e:9f:89:5c:8a:f3:
                    04:00:9d:03:11:c9:5f:e2:68:17:9e:e5:ee:a0:7f:
                    c6:12:d2:73:72:86:98:aa:68:01:ec:98:d8:8d:3f:
                    1f:20:d3:5c:4a:88:76:55:40:6b:72:c2:05:c2:ff:
                    7a:c1:8a:d4:74:72:e6:85:aa:78:68:51:8f:6e:14:
                    44:49:e8:b1:ef:24:29:d8:79:30:eb:d8:42:fa:fc:
                    65:06:28:d8:82:0d:7f:71:ec:4f:3a:d0:56:14:0d:
                    79:6e:27:9d:7c:ba:35:67:82:50:e6:e4:be:3a:f1:
                    11:a0:f2:90:b1:c0:20:c9:c2:4b:34:de:33:3e:c0:
                    30:ce:5f:4d:1b:74:23:6e:0a:b2:9c:1d:1f:1e:fd:
                    29:d2:80:19:d9:9f:4f:c9:dd:2f:e2:79:ba:44:63:
                    58:6e:b1:9f:4f:b0:6d:1d:29:f6:ca:1f:bf:f1:ba:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:73:9B:8B:2F:2E:1A:4B:49:B3:0B:4F:0B:1D:C8:86:FB:2F:9D
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1b:94:85:5a:2d:37:9e:9a:63:32:68:98:4f:61:3b:19:c4:
         2f:83:1e:c1:02:20:32:e9:36:12:8e:d8:37:c7:bd:cd:ea:a1:
         62:6a:6f:01:da:6c:e1:da:38:9f:e4:d3:d8:b0:c2:36:cb:38:
         42:fa:b2:d3:ab:81:27:80:d0:f1:81:45:2f:a4:b4:58:47:96:
         e2:e6:d4:4b:79:57:4f:24:f5:07:de:f9:b2:8f:d0:24:7a:ad:
         93:01:25:e2:b3:aa:d4:74:2f:4c:e4:54:16:29:9f:f1:2a:72:
         d1:c9:87:ba:90:5e:dc:97:f9:a8:05:11:4a:e3:2a:6c:db:39:
         4b:f7:bd:65:fa:3e:39:c6:9a:1b:88:0f:8d:42:a9:9d:fc:d9:
         3f:29:f2:5e:d0:9e:65:c4:24:3e:52:43:6d:20:a4:15:d1:3e:
         0a:0d:d2:44:c5:b5:69:e6:d2:8d:34:15:dd:5a:0c:6b:82:63:
         ed:84:7b:89:44:26:d0:20:fc:91:13:93:d1:4c:9e:89:ae:4c:
         d6:f2:38:da:2c:54:4f:13:6e:10:5a:dc:18:2d:c2:d2:47:50:
         58:f3:2b:04:80:9b:bf:84:63:5a:f8:0a:c3:db:46:96:3c:8f:
         57:dc:11:71:f5:97:59:4f:3f:61:e7:1f:0d:95:90:43:9b:7c:
         2e:cb:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:40 2026 by rpki-client