Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          sKYmXYjQg2/QDPo2PWVj3anpUkvpo7DoaBC9h7HNjNI=
Subject key identifier:   8A:54:BA:F2:D8:FA:7A:66:22:C4:75:3B:76:93:CD:93:AB:12:F1:9F
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       019CAC7E35DA6F696395550C21220A40E5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0CD8
Signing time:             Mon 02 Mar 2026 03:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:18 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: y8+ynM2ZqFe6Oi8/+y/8iM4eNMSe56b3a+PWqFd5hpE=)
                          2: pgpahIBh1JVMRLJjJw7ASp6a1Cg.roa (hash: L10pq0OGKRh0sHJ3XX+pOGwbnH1MYXhkG9/kZOYZEMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:35:da:6f:69:63:95:55:0c:21:22:0a:40:e5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Mar  2 03:01:18 2026 GMT
            Not After : Mar  3 03:01:18 2026 GMT
        Subject: CN=8a54baf2d8fa7a6622c4753b7693cd93ab12f19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:36:31:2e:32:dc:df:3b:11:d8:bb:5d:bd:
                    2e:f9:9d:d2:3c:2d:66:64:d8:81:ce:ca:8d:aa:4e:
                    33:b9:f4:26:9c:87:95:8b:9a:4b:0e:2e:74:27:73:
                    5a:d6:a0:33:4b:62:e7:5e:d4:bb:6d:0d:c7:6a:fb:
                    ad:48:6b:ec:1a:b8:90:2d:db:15:c3:ee:69:ba:be:
                    1f:ba:be:0e:55:c3:73:6d:d9:34:66:2d:52:5c:c4:
                    69:ed:c1:26:8f:71:4b:76:45:c5:dc:bf:a5:83:57:
                    bf:e1:25:45:47:86:9e:80:00:b6:c1:d5:72:43:89:
                    05:81:cb:c0:cd:89:3a:7d:63:67:8f:b5:8d:14:cc:
                    11:c6:25:c1:14:ad:21:ff:7d:9c:4f:66:21:98:d8:
                    5a:0c:11:7a:4d:5f:31:a4:e1:84:af:ff:0d:db:7d:
                    1c:80:b9:b6:64:f0:8f:cb:cb:cf:82:28:ae:a7:dd:
                    d1:05:64:cc:1f:5d:35:65:03:fe:03:92:fc:18:85:
                    5d:3f:63:2d:26:aa:74:30:1b:65:33:e9:ba:ec:88:
                    80:0a:01:30:6d:43:bd:a6:cd:f4:11:7a:b2:bf:96:
                    f8:80:f7:78:a6:26:59:e9:60:09:6f:58:f6:cf:bd:
                    ff:67:ab:93:38:3c:ff:38:1f:02:59:4b:b3:ae:a2:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:BA:F2:D8:FA:7A:66:22:C4:75:3B:76:93:CD:93:AB:12:F1:9F
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:48:4c:c9:a8:c7:cb:5e:40:91:2c:d6:10:51:a0:ca:33:
         c9:72:39:b2:93:b7:5d:4d:3c:f2:4a:11:d2:f7:ea:26:c5:36:
         85:2f:e3:9b:97:b5:78:6c:95:ab:b4:22:c8:df:91:a7:fe:85:
         23:67:92:bd:ed:ba:68:e1:2e:b1:db:7a:6d:3b:cc:56:44:70:
         10:c0:48:07:ef:f7:c0:6a:bd:29:97:2b:1c:99:27:9a:e8:e7:
         ce:d6:88:96:0f:29:d9:01:4e:f2:06:03:23:fc:e2:91:7d:f0:
         98:49:5b:9f:3b:d9:8b:37:e2:14:1f:1b:3a:05:7a:59:cc:3c:
         ac:a8:6d:bb:94:b9:99:24:d8:e9:ca:c0:34:1d:16:0a:e3:00:
         4e:1c:f2:3b:91:03:26:f9:b6:f1:ab:42:c6:4c:ab:72:10:74:
         37:ad:11:64:ef:a6:d2:31:93:21:1b:76:23:c5:ec:41:75:64:
         b8:2e:40:1e:3e:82:8a:c3:83:f7:28:a7:8d:48:fb:d9:7f:18:
         1a:d7:e1:1f:7f:6e:3a:28:cd:95:f5:e5:26:33:2a:de:ef:0d:
         14:4c:51:21:74:c4:76:88:4d:75:ac:69:ac:24:2d:8a:60:8e:
         f1:aa:98:14:c9:25:83:32:3e:32:72:86:58:03:4f:1c:27:46:
         17:e7:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:05 2026 by rpki-client