Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File:                     Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier:          yJn3DhyesMUJ1XUtMbqJDfIfz6gScz32fbJzIvkanfU=
Subject key identifier:   1F:81:91:87:16:35:B7:BB:9B:26:C9:90:07:E5:CF:B3:D0:26:EE:FB
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer:       /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial:       019D28F23714DF27DBB08319669B468565DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number:          1374
Signing time:             Thu 26 Mar 2026 07:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:55 +0000
Files and hashes:         1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: fKiuhKZENl+cS0b/GS24bNyJDDnEqTaj6tGW7PF9sRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:37:14:df:27:db:b0:83:19:66:9b:46:85:65:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
        Validity
            Not Before: Mar 26 07:00:55 2026 GMT
            Not After : Mar 27 07:00:55 2026 GMT
        Subject: CN=1f8191871635b7bb9b26c99007e5cfb3d026eefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:66:00:e7:1b:8e:4a:f4:4c:a8:1c:2d:89:
                    7f:9c:52:c9:68:90:78:88:11:52:ea:77:b8:0e:f3:
                    df:48:e2:18:6f:c1:77:56:96:d7:c1:e5:cf:80:31:
                    08:fc:c7:bd:08:84:79:31:fa:0b:31:5f:ec:cf:31:
                    59:4f:30:af:4d:a3:54:09:cc:57:f5:4a:2d:84:e4:
                    db:d8:b1:da:c3:51:6e:19:25:15:0a:84:59:59:47:
                    61:8d:bc:7e:c4:7e:63:4b:f7:b0:c6:61:24:88:a4:
                    15:af:31:86:09:db:7c:26:83:7f:84:e5:87:48:92:
                    40:a6:ad:bb:01:71:18:ac:f0:67:e2:57:01:0f:76:
                    18:46:71:45:c2:1c:9c:30:af:da:fe:ea:1f:c9:fe:
                    cd:9c:8a:8b:ce:43:c2:be:7b:b9:96:76:75:28:f2:
                    77:28:41:91:f8:7c:cf:06:39:15:ba:ee:18:19:6d:
                    5c:97:01:0f:9e:c7:b2:62:67:85:f3:6c:68:2e:6d:
                    2e:70:2a:e4:f9:db:6d:23:a4:ba:14:e0:63:10:5c:
                    c8:b1:f9:61:7f:92:ec:ca:ea:41:7a:c3:e5:6d:78:
                    cd:8c:01:c8:39:61:10:3e:8f:56:2b:ae:de:77:8d:
                    b8:db:f3:42:4f:c0:ea:43:21:cd:67:f4:88:bc:af:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:81:91:87:16:35:B7:BB:9B:26:C9:90:07:E5:CF:B3:D0:26:EE:FB
            X509v3 Authority Key Identifier:
                keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:23:02:27:bd:3d:a6:71:13:48:e3:bb:d2:41:6c:be:ea:
         42:42:19:b2:33:ca:b2:20:2f:d3:05:56:74:ce:49:5c:63:c3:
         1a:78:5b:31:40:4f:f9:f5:90:90:f5:b8:bf:aa:31:a2:d8:bc:
         7d:ee:f0:ab:77:7f:25:78:3e:cd:bc:1e:1d:97:9f:62:0f:50:
         5c:23:ac:9a:12:46:ed:52:27:25:2e:cd:c3:e0:d8:e4:f0:d7:
         f0:a8:e0:bb:b2:43:cf:28:22:a6:cf:e1:f6:3e:b9:5b:38:15:
         0e:7e:ed:c9:32:44:83:f8:c9:53:07:94:bc:3f:7c:12:e1:61:
         c6:ad:7a:62:42:53:9c:ec:15:39:b1:59:83:0c:de:92:b5:62:
         f7:98:a4:5e:fe:b4:d5:e5:f4:f0:16:83:f6:1a:d8:89:05:17:
         d9:cf:13:08:b6:9b:92:9e:18:76:db:fe:7b:83:8d:6b:2d:3e:
         f9:b7:9d:12:89:2a:92:ff:a3:e0:55:21:7f:de:5d:52:f6:b7:
         a3:b3:94:70:b4:12:9e:c4:ea:28:36:7f:4f:ee:a9:7e:1f:9c:
         b8:44:87:e4:b1:05:d6:db:69:fc:25:8a:72:df:02:10:21:8a:
         82:5a:f5:6b:82:fc:36:cc:df:21:7d:6a:32:d6:2b:e4:15:7b:
         2b:8a:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:22 2026 by rpki-client