Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File:                     Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier:          R8lu13sxVjxYys2nOujEEpQ6Szzit+6nS6XK9M7A7MM=
Subject key identifier:   A0:04:D3:C9:D5:D8:DF:C7:C9:06:CB:79:42:FD:4D:2B:2A:D4:E0:1F
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer:       /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial:       019CABA2164DA1E7578BA32C09AD4DEE9F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number:          1014
Signing time:             Sun 01 Mar 2026 23:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:52 +0000
Files and hashes:         1: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: Ju3C8EwtsWvGOULZp+3rDZ5Im0fmlU+wSqv86x0qDPI=)
                          2: wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa (hash: JaIiaqFbUadXR96s5KJcsIzRyU4XlBt77SuBIAaeHZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:16:4d:a1:e7:57:8b:a3:2c:09:ad:4d:ee:9f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
        Validity
            Not Before: Mar  1 23:00:52 2026 GMT
            Not After : Mar  2 23:00:52 2026 GMT
        Subject: CN=a004d3c9d5d8dfc7c906cb7942fd4d2b2ad4e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:d6:86:4e:78:bf:b0:87:d7:30:05:7a:c9:
                    dd:36:9f:b1:22:72:a6:18:ef:02:a7:95:79:da:13:
                    dc:5b:09:26:ce:57:7d:d6:51:f0:e4:f9:bd:d9:1e:
                    ac:2d:0a:02:61:e7:b4:dc:54:05:dd:d4:8a:1e:57:
                    50:14:7e:f9:1d:34:a8:99:cc:e6:f3:4e:e0:a7:40:
                    01:51:5b:fd:bc:75:40:4e:02:27:f1:e5:7b:da:49:
                    96:d9:6a:a2:8a:eb:15:1b:52:f5:63:53:86:3e:66:
                    a8:da:39:10:28:2c:ef:f4:ef:65:b5:e6:2d:89:9b:
                    3c:ba:01:39:48:98:ba:21:37:31:e6:7f:ca:bc:d0:
                    99:6b:37:c6:f4:85:77:f4:9d:3a:8e:95:f7:5a:21:
                    83:4e:1e:6c:e8:55:5d:1b:03:90:1a:84:10:ff:bb:
                    d5:3e:f8:41:05:17:af:fc:89:d3:67:d2:35:8e:57:
                    e8:5e:d6:f5:51:ec:49:10:85:07:0b:97:d8:53:ad:
                    71:fb:0d:ff:8b:c8:8d:66:66:e8:70:88:2d:85:2c:
                    55:7d:3f:0c:29:12:6e:ee:35:b9:a7:b5:83:ba:74:
                    d4:92:82:c0:26:74:16:71:79:a5:2e:1f:ec:87:b7:
                    11:a9:78:67:0f:9d:29:c2:8d:6f:fe:8d:85:0e:05:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:04:D3:C9:D5:D8:DF:C7:C9:06:CB:79:42:FD:4D:2B:2A:D4:E0:1F
            X509v3 Authority Key Identifier:
                keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:dc:75:5f:36:d1:f7:07:42:6f:87:bf:08:10:db:b7:41:
         0d:8d:5a:0e:bd:d2:b0:ae:3f:6c:be:02:0c:90:1a:84:cd:70:
         69:61:3f:fc:33:fa:64:81:14:14:30:60:cb:de:c2:6f:58:d5:
         27:67:00:97:ad:35:43:77:91:0e:fe:95:3a:5e:77:31:44:fd:
         4f:c5:45:6d:7a:67:42:cf:8e:72:eb:f1:df:5c:af:85:17:37:
         de:33:24:19:21:63:79:96:a6:8e:ff:16:88:f9:2d:06:67:a9:
         6c:a2:33:5f:1e:0f:4b:90:b4:ee:3c:30:b6:ff:72:d7:ad:df:
         79:bc:ad:69:79:1d:7f:25:e8:df:75:3e:ae:5a:c0:c5:82:36:
         bd:cb:f6:9b:88:78:5a:d5:b1:2b:96:a1:36:5a:b2:75:c9:f8:
         47:e4:b9:5d:a3:10:2d:c3:c3:ef:48:50:b1:75:c4:98:9a:db:
         06:95:7c:9c:3b:19:15:35:54:a7:e4:6e:ab:e4:1e:ef:2e:3a:
         45:68:00:ff:32:4d:d3:c5:19:57:71:2f:ad:69:cf:08:c6:6a:
         a5:2f:30:26:e2:78:00:64:98:08:48:47:fa:5f:ad:4a:00:c7:
         18:6f:95:83:e5:fc:91:85:ad:f5:3b:c9:69:da:64:6d:ce:1c:
         1a:0f:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:15 2026 by rpki-client