Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier:          vDzwTTO8xfGTpwpnemUrh8txAKFUu7hvK2M6PpEYw88=
Subject key identifier:   62:47:09:91:86:61:C1:AB:43:34:2A:FE:2F:B1:F9:3C:25:51:B7:B4
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer:       /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial:       019CAA8F7469F3898B6C39232532F3F02D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 18:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:53 +0000
Files and hashes:         1: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: dsvAekZtNfqjNY4285fOoOcpd6vvr9v2gkXfwYsrDHc=)
                          2: eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa (hash: X4ZPh/wvO5yQsB9S3hDFndSj+7xXzQCq3S+mViqwfL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:74:69:f3:89:8b:6c:39:23:25:32:f3:f0:2d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Validity
            Not Before: Mar  1 18:00:53 2026 GMT
            Not After : Mar  2 18:00:53 2026 GMT
        Subject: CN=624709918661c1ab43342afe2fb1f93c2551b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:ba:5a:dc:35:ae:62:9f:1d:d9:53:26:e3:
                    9a:e1:68:92:7f:2f:87:90:51:5d:d5:70:c9:78:5b:
                    03:7f:61:ad:cf:af:f5:43:d3:f5:6d:2e:d4:6b:ac:
                    5f:dc:a3:21:32:5c:3f:dd:f1:3b:71:f7:0c:f2:27:
                    e0:d3:e9:83:87:d4:6b:74:fd:b9:03:56:5b:61:7e:
                    f0:09:4b:bb:b3:f6:5c:9b:6d:ea:08:75:f2:71:f1:
                    db:16:ef:3c:b2:47:a2:19:f9:2c:97:6f:f1:a1:c9:
                    18:4d:42:18:c7:bf:c0:24:82:1d:f8:5c:a4:04:2e:
                    14:e0:ae:d5:af:21:2d:b6:7c:ac:6b:45:6a:b8:a3:
                    ac:2b:39:a5:92:6a:6e:f6:9a:d3:d9:d1:9a:a6:cf:
                    7d:ca:f7:45:ba:9a:77:c3:44:92:09:a1:9e:ac:63:
                    08:94:7f:d2:e4:0c:59:a7:09:19:2e:06:50:19:25:
                    59:04:84:da:5e:4c:83:12:43:a5:8a:16:cb:c3:fa:
                    8c:9c:01:c5:d7:ba:2f:cf:18:78:99:40:d4:cc:7d:
                    07:d0:59:62:d7:61:46:b3:ea:c8:f6:5e:b0:e3:8a:
                    a3:b4:4b:8e:5c:9c:c3:20:e3:6f:da:98:f8:ee:43:
                    f0:fa:59:4e:aa:90:66:81:22:e1:79:51:44:43:6c:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:09:91:86:61:C1:AB:43:34:2A:FE:2F:B1:F9:3C:25:51:B7:B4
            X509v3 Authority Key Identifier:
                keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:73:d5:ec:fb:d2:64:45:40:c4:8d:30:50:f6:c2:14:6c:
         9b:e3:2e:e9:23:4d:55:c7:b2:9d:1a:e7:e6:e7:0f:af:5e:da:
         18:d1:41:eb:d5:5e:f9:7a:f2:c9:e0:cc:33:60:a9:f2:7e:c6:
         00:72:a8:03:98:34:4e:5a:62:a9:68:36:1e:bb:73:0b:a9:4a:
         2e:48:93:83:9e:01:59:c1:d7:7f:48:fb:0a:ea:c8:b5:98:28:
         5f:1a:71:80:9d:95:3f:12:79:6a:6b:f9:b3:c5:38:5c:18:20:
         d3:8a:1f:52:5b:2e:53:21:2c:86:f8:c8:b2:63:88:8e:3a:e7:
         e3:aa:f8:2f:ca:ac:91:08:df:ec:bf:a1:4a:95:1b:44:77:f0:
         0e:3c:88:be:e0:1f:b9:6b:d4:04:2c:8b:9f:ab:02:d2:27:d7:
         d0:59:3c:4d:d2:80:26:d6:ce:25:a8:cf:52:72:68:c2:ee:45:
         90:3a:8e:d4:4d:af:f9:e8:9f:b2:1c:b9:14:bc:a7:d1:d3:81:
         49:76:af:a6:72:b1:e8:53:26:4a:63:9e:7b:ed:1b:d2:49:da:
         72:23:c8:5c:59:b3:89:30:a3:dc:b8:b1:1d:09:3b:7d:8d:b4:
         3d:77:02:ce:98:bf:50:d8:24:87:69:05:57:5d:c0:02:8d:3d:
         59:6c:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:59 2026 by rpki-client