Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File:                     YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier:          Q/nXgXMu1evT5sEtv+qvfPFBnt4CUpB6YUysDcEjpy8=
Subject key identifier:   F7:CA:5A:52:6E:87:95:21:74:97:1A:18:85:1C:E8:11:8A:12:32:DA
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer:       /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial:       019D270392E7B502A5C2B613F11C4A4EE503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number:          0FE6
Signing time:             Wed 25 Mar 2026 22:00:38 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:38 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:38 +0000
Files and hashes:         1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: 4BCtypsqxy6SW9HgxdzoSnT4Qid41I1al3LpcTnE4bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:92:e7:b5:02:a5:c2:b6:13:f1:1c:4a:4e:e5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
        Validity
            Not Before: Mar 25 22:00:38 2026 GMT
            Not After : Mar 26 22:00:38 2026 GMT
        Subject: CN=f7ca5a526e87952174971a18851ce8118a1232da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:55:c4:c1:23:85:2a:21:fb:d1:43:b9:35:
                    6b:79:0f:37:7d:b1:e6:e5:29:98:35:f5:4d:c6:6b:
                    17:0d:09:fe:8e:df:75:43:f4:3c:c0:e0:60:20:e9:
                    b6:21:bc:b9:85:41:d2:58:da:56:c8:ef:3e:96:78:
                    f9:df:02:71:24:d1:22:bc:67:c1:e8:43:8f:97:72:
                    c2:84:d1:6e:d2:6f:b3:01:44:2d:bc:87:7b:f5:8b:
                    cc:fa:5e:ce:4f:78:fe:7e:50:09:bf:20:bb:f7:1c:
                    51:ab:26:db:04:84:3e:62:f7:6f:e9:fb:2c:28:1c:
                    be:c4:db:00:70:fc:d5:a9:52:18:1d:50:dc:84:bd:
                    2e:80:54:97:0b:3d:59:d5:62:ed:25:50:9e:a4:03:
                    69:79:e4:d8:d6:8c:6f:86:8a:86:e8:eb:4a:7f:5b:
                    b0:b5:37:a1:5c:a3:1d:9f:ac:db:04:b6:74:a1:1a:
                    e2:45:32:c1:81:95:f3:5e:5e:5e:ca:44:08:24:ca:
                    7a:87:b6:3b:2c:8f:17:e2:21:21:32:35:bd:c6:35:
                    df:b7:40:ab:a6:4b:28:60:84:78:85:3d:79:eb:1a:
                    aa:3e:ae:60:19:df:15:5a:78:7c:4e:c1:67:84:fc:
                    58:08:a2:01:15:6a:47:ab:d5:29:5d:79:79:9a:1c:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:5A:52:6E:87:95:21:74:97:1A:18:85:1C:E8:11:8A:12:32:DA
            X509v3 Authority Key Identifier:
                keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:63:cb:c3:d1:e5:8e:ae:93:8d:a2:00:30:a2:4f:db:cf:62:
         df:14:53:74:81:70:da:cd:a7:8f:2b:ee:e3:46:14:73:96:ae:
         9b:ae:b3:ca:c5:99:3e:70:5f:39:c6:a6:52:cf:36:e7:38:3a:
         2f:59:d9:71:be:35:5b:b1:73:84:12:f0:6f:f6:da:80:75:3b:
         87:38:da:61:cf:c4:f5:bd:30:9b:cf:e1:9e:6e:98:91:61:c9:
         93:5c:d8:60:89:0b:d7:7b:8f:14:79:42:ab:ed:8d:22:b6:51:
         c9:a0:7b:0a:c1:e5:94:98:2d:da:20:f9:6f:37:2a:78:13:d5:
         05:6d:47:e6:f9:dc:c7:87:70:03:8d:d8:e4:89:bd:84:d8:10:
         51:b9:f3:f9:f8:3d:61:09:8a:a9:79:37:d7:c5:75:c9:70:2c:
         a9:22:0d:a3:7a:03:fd:f2:fb:33:27:3d:79:74:04:8e:ab:09:
         eb:56:d2:f7:71:44:ca:ea:6a:1a:07:2c:d9:31:69:e6:72:c2:
         2e:77:34:e5:0e:e5:ca:3b:ab:7b:3d:6c:53:87:30:39:9d:d7:
         9a:46:01:3d:26:d5:8a:5f:e3:30:4c:a7:7d:df:c3:65:cb:9a:
         1c:ec:fe:c8:46:da:cd:c1:6e:63:d2:1a:29:27:d7:31:39:80:
         53:3c:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----