Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          TgW+bi7Z6XEp8XlO8RRiWN53dyo5pkRzl5d+YceI+T8=
Subject key identifier:   E3:1B:45:40:1B:E5:40:E8:1F:D3:57:C8:84:13:48:13:3A:34:78:6C
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019CABA1F59B25DC783B065150C90B9BCC05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          185B
Signing time:             Sun 01 Mar 2026 23:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:43 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: eY0buK/dgEd1tqAA7/87Kc/ELjOFni1xeXzjmNPPIyA=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:f5:9b:25:dc:78:3b:06:51:50:c9:0b:9b:cc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Mar  1 23:00:43 2026 GMT
            Not After : Mar  2 23:00:43 2026 GMT
        Subject: CN=e31b45401be540e81fd357c8841348133a34786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:06:fb:f5:d6:b9:08:2d:e9:15:9a:ce:0b:
                    79:22:14:01:65:c5:62:06:82:eb:13:69:6d:b2:57:
                    78:1a:4d:e5:b5:6e:c6:27:69:82:43:d7:2e:ee:b9:
                    74:cd:eb:73:af:b6:db:c1:d7:49:87:9d:59:b3:22:
                    4b:43:ce:03:1a:48:3b:0e:e0:62:97:7e:6f:c0:a1:
                    43:14:35:54:92:d0:8d:78:a0:85:0e:85:cb:75:dd:
                    85:2b:33:aa:53:80:2c:9f:8d:78:b2:18:3e:8a:83:
                    c0:19:a2:b4:e1:10:39:f0:b9:99:14:44:0c:50:8a:
                    24:93:ee:61:d9:53:15:ba:14:6f:0d:39:ab:86:85:
                    e8:a5:7c:ea:b4:5f:b5:88:4c:0b:1e:a3:6b:39:3b:
                    9c:ed:d1:22:e4:84:c1:5e:31:cc:e5:ea:f7:bf:1a:
                    ca:33:27:70:f1:9c:3f:12:6a:ea:6a:79:b0:80:bd:
                    28:c5:95:28:18:3b:ec:30:d5:13:74:c7:bf:5c:d5:
                    3a:4a:57:62:72:12:12:0d:d6:a6:30:f3:ba:68:b0:
                    46:c5:c4:6a:93:77:0a:57:b0:ba:64:eb:b9:9a:d6:
                    67:47:30:f1:e7:6e:25:b8:21:19:6e:3b:89:8b:a6:
                    bc:fc:6f:81:ab:1c:b8:ee:32:b9:f0:28:4b:57:80:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:45:40:1B:E5:40:E8:1F:D3:57:C8:84:13:48:13:3A:34:78:6C
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:66:6e:43:c7:8a:86:99:1b:60:c0:1d:ef:3e:c4:8a:7c:
         0c:92:06:91:ee:f7:47:fe:22:c5:17:80:54:45:a0:69:fa:08:
         ca:91:db:a6:48:3c:7f:24:af:35:26:8c:a1:c9:8c:28:79:1b:
         9c:d6:b6:cc:00:83:be:02:14:e9:84:39:e5:d6:b5:1a:5e:4d:
         4e:5c:17:42:e5:f3:27:38:22:b4:23:67:b9:fe:39:89:98:82:
         0f:6d:45:f0:36:0d:35:37:01:60:38:d8:a1:b1:d5:c4:7b:bf:
         91:4d:01:4c:73:9b:18:de:f5:19:3a:6f:4e:6a:f7:c0:14:26:
         99:84:7a:7f:2f:96:1b:b7:ff:f7:56:4c:9c:c8:72:3f:fb:e3:
         d5:14:8c:21:8a:1e:7a:95:0b:74:d2:e4:62:80:c8:9f:30:97:
         d5:fa:aa:1d:1a:23:82:36:c8:23:61:be:58:43:cd:2f:7c:3f:
         1c:23:64:b8:52:2d:0a:ea:8e:cf:36:02:f4:c8:d5:48:e5:ab:
         37:4b:4b:21:be:75:e3:0c:27:d2:6b:9e:d0:4b:30:18:7e:b1:
         9c:5d:04:a8:32:df:d7:74:26:23:4e:81:9f:f1:84:fe:6a:5c:
         a4:6d:32:a5:53:8b:2c:16:78:b1:9d:03:a5:09:2c:e6:71:78:
         6a:f8:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:39 2026 by rpki-client