Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          oHvynKMsUIytgujhsnANumaEI+bzIqmUiYxCswgZ/LI=
Subject key identifier:   4A:9E:87:2E:90:91:14:8E:7B:D5:CD:D3:3A:54:AB:A9:87:D6:80:BC
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019CAB3474BC3365BDDEEAF111B51624BD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          183E
Signing time:             Sun 01 Mar 2026 21:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:07 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: CoOWsD_WMrov0INrtlO9ijHEvvk.roa (hash: Sr0i40WcN6Y0+OoNtGn/lvWuAn5kO+cpjLNdnf5+TGE=)
                          3: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          4: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          5: qaZbA-D1etRlTM-FU--ac0dB_ss.roa (hash: BN6YD3t+6V0VWjVd4lNO3C0Ljn5myDizRC13ZwN4dhY=)
                          6: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          7: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: SFtFtG6rqFa8Vqz+3d9Un1vQebNpr6fxUtpD6o//D0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:74:bc:33:65:bd:de:ea:f1:11:b5:16:24:bd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Mar  1 21:01:07 2026 GMT
            Not After : Mar  2 21:01:07 2026 GMT
        Subject: CN=4a9e872e9091148e7bd5cdd33a54aba987d680bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:bf:c9:58:58:58:84:9d:61:b4:e4:f8:29:
                    f9:42:bd:e9:18:31:5d:98:24:50:b2:f2:bb:d1:44:
                    33:a8:79:15:f6:02:8e:6e:d0:cd:c6:a8:9c:8c:6a:
                    88:34:be:a2:47:a8:2c:ba:f2:d6:88:01:1f:f5:37:
                    68:7e:23:b7:58:5c:6c:30:42:f4:78:91:00:38:f2:
                    da:71:00:ab:38:69:69:90:04:36:46:03:48:c7:29:
                    ec:44:44:38:3a:b2:ec:b4:87:04:df:21:14:b1:42:
                    74:97:a8:20:af:16:c5:b3:33:d8:f6:49:30:83:70:
                    be:68:e5:84:17:85:82:5d:96:76:62:5c:01:a1:6b:
                    af:85:fd:a5:ef:27:4b:fb:7f:2c:df:c2:28:d7:c3:
                    f0:a3:09:b0:9e:74:38:df:36:f8:c8:70:5d:aa:b3:
                    2e:98:5c:44:86:f6:ad:29:88:a1:f4:e7:21:fe:8c:
                    65:f7:bf:a3:e2:ff:29:31:14:fd:ae:cf:3b:1d:8a:
                    1a:c9:41:2a:08:4b:cb:dc:a4:56:60:84:15:fd:6c:
                    63:45:bf:07:ce:10:30:ec:5c:02:7c:5a:38:79:4e:
                    fd:df:47:ec:ba:db:bc:81:96:49:87:9b:9c:10:bc:
                    a9:63:65:f6:e6:d7:8c:46:af:4e:04:46:fb:c5:f6:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9E:87:2E:90:91:14:8E:7B:D5:CD:D3:3A:54:AB:A9:87:D6:80:BC
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:28:62:25:17:c5:c5:20:36:17:79:16:bf:b2:a9:0b:35:09:
         07:56:c8:4c:e8:27:8a:4e:3b:cd:a9:2c:0e:66:cf:df:db:74:
         06:e9:90:eb:3e:ed:6d:6f:95:d8:37:ef:13:2b:70:e5:f3:74:
         9a:34:08:0e:ce:fc:b5:b9:7b:6b:bb:32:cb:97:0c:16:9f:ba:
         73:b8:4e:49:d8:8b:99:4d:06:2a:83:4d:fd:e2:0b:73:eb:d3:
         2c:95:23:fb:ac:25:d2:db:99:2e:44:26:4e:6a:ee:3b:c8:3b:
         7c:80:3a:ea:9f:e6:c7:ec:41:7f:09:ca:45:a7:af:4b:e8:ee:
         d1:db:1c:aa:56:49:05:e9:70:02:22:4f:94:57:ed:61:27:0c:
         17:09:01:11:89:bb:b0:8e:93:2f:1c:bf:c3:19:8a:24:04:ce:
         86:9e:dd:a4:ef:9a:0a:18:68:90:da:4e:38:60:11:6d:4a:65:
         4d:35:c9:8e:30:cb:1e:a9:2f:81:37:8a:61:56:1f:a8:c7:4c:
         18:dc:83:e6:62:b4:9b:23:0c:a5:3c:6e:0b:6d:7b:d2:94:e9:
         40:52:98:37:71:ef:e0:42:29:3d:05:d6:b4:89:d9:c0:a1:4b:
         fa:15:56:0e:61:c2:e6:54:95:8c:4a:aa:29:d5:85:12:66:5f:
         e6:19:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:20 2026 by rpki-client