Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          7w2mINraozJnmSUn95bchm5e39cFAVQUjitvV5AWYd4=
Subject key identifier:   16:5D:B7:EA:54:6E:CF:C6:15:24:35:C3:9B:DE:51:08:74:DC:41:C9
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019D296146DCBF949853F742FD3D7913A974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          0770
Signing time:             Thu 26 Mar 2026 09:02:14 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:14 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:14 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: /PPIGvNGl+GFaMbj2J09Jr3MFvffTGnfkINx2XKkp9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:46:dc:bf:94:98:53:f7:42:fd:3d:79:13:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Mar 26 09:02:14 2026 GMT
            Not After : Mar 27 09:02:14 2026 GMT
        Subject: CN=165db7ea546ecfc6152435c39bde510874dc41c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:5f:c1:c0:6c:35:b2:49:4f:58:46:d1:b1:
                    66:a2:e4:18:79:93:bf:93:84:77:21:f3:cd:02:88:
                    42:4d:2a:1f:b1:73:14:93:96:8e:38:c6:d2:37:8e:
                    59:e0:18:4c:75:6a:d8:15:e7:94:b2:08:80:c6:29:
                    90:2a:51:46:20:56:23:bc:13:01:76:7f:67:ab:95:
                    48:9b:26:af:fe:26:33:a1:58:3a:45:be:3b:12:c2:
                    57:09:33:92:4e:68:36:9f:67:a8:f6:f3:24:b0:08:
                    36:f5:49:50:8c:2f:93:9f:b9:a0:d3:43:59:9b:7f:
                    1a:79:b3:f6:03:62:a4:83:35:0b:f7:85:55:96:35:
                    c2:66:1d:d5:41:ec:4f:02:0e:47:e8:8c:e6:59:f6:
                    9c:17:92:85:aa:91:5d:0d:57:d1:91:54:43:99:46:
                    d5:a5:ac:bc:fd:be:25:35:56:2d:af:cf:ef:f9:38:
                    c8:e6:63:63:81:0b:b0:25:62:74:24:86:2d:7b:c0:
                    c0:d1:5b:9c:b5:fe:3f:23:f9:d6:d1:69:33:e9:40:
                    f2:30:5e:12:ac:6e:ff:e4:9d:10:05:eb:6c:5b:b6:
                    47:83:53:58:88:88:d7:a5:dd:2f:1e:a7:54:54:8d:
                    1d:6a:a0:2b:5d:c2:98:5e:08:cf:45:cb:b7:ef:b0:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:B7:EA:54:6E:CF:C6:15:24:35:C3:9B:DE:51:08:74:DC:41:C9
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:69:cd:e4:87:7e:b8:45:3f:e5:c1:ad:4b:35:22:5d:b5:d3:
         0b:9f:4b:90:71:d6:9e:f4:33:6e:91:ce:df:bb:2a:93:d4:5c:
         ee:7d:d4:1f:48:68:1d:61:e4:95:7f:98:75:4b:41:75:93:48:
         09:d0:02:77:8d:ac:b1:18:a6:26:f2:76:04:c6:b3:a9:6f:c5:
         43:bc:f6:e8:39:5b:35:3f:c1:07:38:f8:a9:71:99:32:c1:65:
         99:5d:a2:9e:5c:0e:0b:16:7e:53:15:eb:c5:ef:8c:b0:c3:33:
         0a:51:62:5a:f0:bf:80:12:81:c6:71:1f:0c:5c:87:70:47:89:
         c3:76:37:c3:e5:95:ae:ae:29:9a:8a:cf:3a:02:c5:c6:66:41:
         8e:97:45:85:4a:1a:c1:13:95:64:10:f8:51:1e:88:79:c5:d0:
         03:ba:15:ab:93:bf:d9:4a:53:7a:16:9d:57:ca:65:63:07:db:
         2d:a6:29:26:5f:1a:03:01:58:7c:c2:11:e5:3b:d9:07:b5:4a:
         6d:ed:f6:22:0e:dd:fb:2c:a1:52:1e:91:95:2f:d5:3d:dd:26:
         04:34:38:f9:a8:de:47:bf:04:35:8a:ac:9e:f9:16:e5:f8:f8:
         74:4c:f3:b5:22:2d:6b:12:e5:2c:d2:2a:85:24:49:7b:d1:df:
         d8:b8:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:02 2026 by rpki-client