Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File:                     yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier:          9HR9wGOeL/or6gOEORPx/fQor9myFqLb6j2bmLi9S/U=
Subject key identifier:   C2:45:93:82:16:3F:A6:79:A3:A8:FE:8C:86:05:1A:09:AA:99:0C:9A
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer:       /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial:       019CAB344882E2E23B5EDE1494BC6997E64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number:          17C6
Signing time:             Sun 01 Mar 2026 21:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:56 +0000
Files and hashes:         1: Q1i1i1A5Ui6K8xWYOMC8b2cLIys.roa (hash: K5UU540aeacTeWENSm+dTa5dIuRJreM1pon8ZgCMcE8=)
                          2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: amGM6mh+wq6RI5fefXpDX6THcCUQqeSMfrTVd6HVnMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:48:82:e2:e2:3b:5e:de:14:94:bc:69:97:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
        Validity
            Not Before: Mar  1 21:00:56 2026 GMT
            Not After : Mar  2 21:00:56 2026 GMT
        Subject: CN=c2459382163fa679a3a8fe8c86051a09aa990c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:48:57:16:01:4e:f7:ab:eb:8e:54:c1:94:
                    12:dc:37:aa:7a:8e:12:15:10:60:76:46:74:88:b3:
                    45:a3:ab:02:6a:61:2a:cb:22:82:55:5c:ac:ac:2c:
                    85:6a:90:93:9c:cd:18:3b:3c:17:2c:49:d0:cf:87:
                    4d:e0:64:6f:43:3b:ca:2a:63:32:78:d4:ec:ff:bf:
                    47:cb:0a:79:84:69:a5:94:1f:47:3c:83:a8:7e:49:
                    7a:de:a0:70:00:83:c3:26:13:81:7f:36:72:51:73:
                    e9:d4:89:05:b0:4c:f6:5a:ac:0b:1d:e2:46:07:3d:
                    ef:62:27:a8:0c:87:e2:8f:3d:7a:56:95:ef:31:05:
                    a9:50:f7:f7:2f:f9:7a:0e:24:8c:4b:8b:98:f7:04:
                    e7:53:4e:ec:64:cd:fe:5b:18:ac:a5:4f:7e:27:cc:
                    b7:ff:b5:b1:ca:78:b1:e1:47:35:e9:d3:87:d6:d9:
                    32:91:d6:5c:58:0d:bb:60:d4:26:ef:3a:c4:1f:6d:
                    bf:fb:0e:34:c4:91:a0:a8:7c:61:a1:eb:5b:45:1e:
                    13:66:39:02:77:c7:34:d9:b2:cd:09:f4:02:4c:4a:
                    e0:0c:24:19:b6:36:f2:c7:eb:bd:01:c9:fc:01:43:
                    ac:16:62:ab:30:08:27:8d:0e:e8:45:4e:41:8d:0e:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:45:93:82:16:3F:A6:79:A3:A8:FE:8C:86:05:1A:09:AA:99:0C:9A
            X509v3 Authority Key Identifier:
                keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:7e:91:ab:dd:e6:f5:75:2e:b9:e0:aa:a8:fc:2d:09:f7:
         0d:e3:2a:57:74:40:05:bd:da:af:ca:19:c8:7b:aa:6f:4f:61:
         d7:fe:9f:27:88:4b:e0:e4:8c:75:a7:83:e4:83:99:87:29:23:
         0b:b9:04:09:78:3d:1b:e4:7c:90:53:7f:c1:10:77:f8:f7:55:
         b5:ea:ba:6c:6c:aa:b3:16:fb:66:6e:80:bd:e1:fe:e5:f1:17:
         56:2c:54:b0:5b:6d:9a:2f:ac:61:21:42:b2:ae:2e:72:15:a0:
         7a:b9:51:d4:63:a5:bd:b6:ac:ce:73:4e:3f:74:f0:e3:5d:a0:
         06:52:17:f0:b2:bf:ec:d9:ef:5a:fa:ef:80:27:41:5a:b9:11:
         9d:6b:51:4a:84:9d:a4:a7:87:be:fe:d2:9a:04:e3:99:7b:8c:
         50:1b:9a:c4:a9:1c:06:4d:ba:98:a3:e7:07:8f:83:56:9a:44:
         f1:0e:0c:1b:4f:bb:20:be:d7:6b:a3:39:b4:a4:e8:50:e0:21:
         b1:09:f3:ae:a1:a4:3e:8d:4e:f1:d9:54:fa:80:02:82:4a:4b:
         63:68:c1:18:4c:8e:1e:b8:87:94:7f:6a:f2:0a:5e:a0:a5:d5:
         89:30:76:26:29:3e:fa:89:2e:6c:82:01:f6:66:e9:dd:6b:21:
         07:b7:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:21 2026 by rpki-client