Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          j/8QzwM+wt1TRWgov7bg6rpHGHOmiNZRspqz+cgX2cI=
Subject key identifier:   F9:48:6B:14:D3:D5:F3:13:02:68:2D:7A:C8:2F:EA:6E:F2:99:DC:0E
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       019CB091A2E9054DA3BCFC10ABEF94E7C8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          0407
Signing time:             Mon 02 Mar 2026 22:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 22:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 22:01:00 +0000
Files and hashes:         1: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (hash: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: RZDhrzOzgpUx3+9oF0e6vTt6fXAIVF2k1ae0RXVPc40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:91:a2:e9:05:4d:a3:bc:fc:10:ab:ef:94:e7:c8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Mar  2 22:01:00 2026 GMT
            Not After : Mar  3 22:01:00 2026 GMT
        Subject: CN=f9486b14d3d5f31302682d7ac82fea6ef299dc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:e9:f5:de:f2:a0:42:3e:bb:55:4d:8a:2e:
                    c1:6f:1f:ac:5d:6d:31:55:22:71:82:dc:e5:53:3b:
                    0a:1f:ee:e2:11:e5:60:da:34:d0:26:4b:c9:30:ee:
                    f0:86:fa:4e:57:dd:f0:ba:c2:cf:3d:c6:a3:4b:a0:
                    32:b0:db:c6:8e:0e:13:9b:05:f8:cf:8c:1d:2d:51:
                    39:19:73:01:23:db:28:44:a9:f2:cb:00:81:e9:04:
                    fd:a9:54:81:72:c0:b2:5f:44:5b:b8:b8:a2:01:a7:
                    de:23:ca:25:ee:dc:5b:a6:a3:98:f7:68:e3:95:c3:
                    45:73:0b:34:bb:3f:4e:10:3b:56:5f:7f:ca:d7:59:
                    97:d0:8e:c1:da:3c:fe:e7:1c:84:ad:a6:39:33:33:
                    84:c9:48:ea:0c:bf:57:5b:f8:78:9d:aa:ea:5a:d2:
                    7a:d5:78:a0:3a:29:17:06:80:93:f6:73:61:d6:01:
                    f4:46:ee:43:4f:d6:bf:75:7e:97:fe:98:84:a5:56:
                    73:81:7a:f0:a4:04:07:85:21:e7:2c:09:c0:14:ac:
                    50:a6:e8:a6:a2:9d:18:dc:fb:f7:e8:5f:6e:7e:44:
                    15:ad:a6:78:2f:97:b9:65:5f:cc:40:84:0b:17:2e:
                    50:d7:da:49:6c:46:0c:b5:6d:e5:db:a4:33:dd:a0:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:48:6B:14:D3:D5:F3:13:02:68:2D:7A:C8:2F:EA:6E:F2:99:DC:0E
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:1d:5f:94:a9:16:bf:e8:e6:62:70:ab:1a:e9:db:f6:2a:
         3c:a3:7b:89:45:7b:58:a4:fa:36:8a:04:8e:b4:51:b2:88:57:
         24:23:29:db:10:81:89:aa:0d:f5:7d:aa:ff:95:99:1a:ed:a3:
         16:61:71:1a:10:9a:e4:59:c9:e1:08:d9:0f:be:1a:01:39:f2:
         68:aa:04:4a:6a:1c:d7:84:07:17:50:4f:ff:d4:36:91:a0:7a:
         7e:2a:38:d7:9a:18:e8:e9:b6:78:46:10:22:bf:d3:3d:68:9f:
         12:b3:59:2d:99:2d:f4:ec:34:4a:fb:b5:ff:44:8e:15:6a:a6:
         27:dc:f1:a6:8c:12:ce:0a:39:8f:9c:fc:09:b4:0d:f3:f3:b1:
         ee:70:10:cc:3f:00:b3:af:72:be:78:be:a6:76:b2:01:44:b0:
         70:cd:dc:4d:6a:8a:40:54:b7:56:90:ff:36:23:86:a3:22:ce:
         8c:5b:13:d5:9f:8f:be:ba:36:f5:85:38:55:60:11:d7:82:df:
         8d:06:48:7f:f5:be:d5:4d:35:78:bd:9a:36:5e:2f:e8:0d:4d:
         8c:5e:db:74:85:9e:13:8e:0b:7b:bb:4f:19:ad:b7:5e:0f:0b:
         69:fd:2e:ed:44:e7:38:ed:1a:a0:0e:0a:16:19:fd:0f:a5:0c:
         a2:b0:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:23 2026 by rpki-client