Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File:                     yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier:          EghxKWsKgosc7lIUwr0aHwpUC0jSR0IwCM2OOfA8GvA=
Subject key identifier:   34:85:76:D8:EE:14:51:D7:C9:B0:94:0F:2A:E9:3D:B5:29:9D:72:3F
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer:       /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial:       019D27DFB94A580923E1B25F935B62E272F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number:          096B
Signing time:             Thu 26 Mar 2026 02:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:06 +0000
Files and hashes:         1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: 4Ykf5ZWNHjrVDRYE7xpBSjjrB6y5aGAvGY+o79vKGO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:b9:4a:58:09:23:e1:b2:5f:93:5b:62:e2:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
        Validity
            Not Before: Mar 26 02:01:06 2026 GMT
            Not After : Mar 27 02:01:06 2026 GMT
        Subject: CN=348576d8ee1451d7c9b0940f2ae93db5299d723f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:bf:12:d0:dd:9b:fd:6f:85:88:dd:24:16:
                    25:93:49:47:36:35:d7:00:d4:32:e9:ac:5f:b6:e7:
                    68:71:17:a0:5b:47:8c:db:09:ad:85:41:04:4c:54:
                    bf:63:c5:33:e3:02:cf:65:98:69:94:65:4f:32:06:
                    da:48:50:49:5e:c1:3c:83:25:b7:6c:2b:82:94:53:
                    72:56:6b:2a:ae:d1:88:70:d1:d3:8e:bd:34:16:b9:
                    a4:63:4a:d6:cc:27:ba:ba:a9:db:81:97:38:6c:50:
                    6c:34:4e:a4:77:77:f4:e5:cf:42:b6:96:cb:82:38:
                    c4:8f:fa:fa:de:59:28:1d:52:41:5a:86:c5:d5:73:
                    30:9d:74:0b:a1:82:00:c3:ba:b9:3e:5b:cf:4c:e8:
                    72:74:f6:07:b1:d8:bd:d8:7f:e1:a7:31:0f:2c:d4:
                    77:d6:18:d8:4b:da:40:18:7d:97:2f:20:89:5f:c8:
                    53:89:4a:85:86:5c:ea:1c:44:53:0c:2f:d5:b4:64:
                    84:b1:68:ba:ff:a3:b1:5d:59:6a:a7:bc:74:1d:c4:
                    75:32:4f:08:42:c5:67:c1:87:ba:42:1f:91:10:d4:
                    7c:c3:a8:66:45:5c:fa:01:d6:78:3e:07:6b:2f:7b:
                    19:b7:24:63:b6:9c:f4:a4:90:19:3d:e3:42:55:9c:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:85:76:D8:EE:14:51:D7:C9:B0:94:0F:2A:E9:3D:B5:29:9D:72:3F
            X509v3 Authority Key Identifier:
                keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:4d:14:4e:d4:08:92:95:68:09:10:a1:52:4e:9f:67:55:
         cf:bd:96:5b:68:0e:2f:c9:97:7d:04:41:06:ec:2d:a6:7e:ce:
         8c:7b:d2:4d:33:20:41:9b:97:32:1e:6d:0c:dc:f2:92:f7:1c:
         a3:ed:3b:91:77:81:ec:1a:62:e6:ef:9a:70:f6:fd:ac:b7:f6:
         f8:f1:ed:1d:ba:79:cc:d6:17:56:b2:96:3e:c5:ad:3c:a3:4b:
         60:fb:eb:71:bd:73:33:87:f1:0d:bd:c0:5b:64:89:77:c9:53:
         4c:ee:9c:5f:2f:6e:4b:d2:16:36:4d:5c:3e:31:d9:aa:36:5b:
         61:dc:70:09:0c:a2:bf:bc:02:0c:50:e1:c0:64:d3:ea:c8:9c:
         ec:56:f8:a0:c8:13:22:f3:4d:c4:80:87:e0:13:ad:0d:1d:e6:
         f5:7c:90:e5:85:0a:68:ca:82:00:87:2c:a8:47:93:b7:09:87:
         92:2d:54:80:ff:ad:0c:b7:e4:bf:e1:36:9f:8c:42:08:10:08:
         2a:e4:d6:ce:8f:19:bd:0a:d9:2c:bd:b2:cb:97:d9:4f:ed:48:
         7d:c4:b5:53:de:e1:78:bc:a1:a1:d3:9d:c7:da:4d:0b:7a:b4:
         54:b5:59:5c:b8:df:f1:e8:49:12:5b:7e:94:f9:b2:d4:21:d4:
         b6:b6:f7:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n37lKWAkj4bJfk1ti4nLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw
MjcxM2QwHhcNMjYwMzI2MDIwMTA2WhcNMjYwMzI3MDIwMTA2WjAzMTEwLwYDVQQD
EygzNDg1NzZkOGVlMTQ1MWQ3YzliMDk0MGYyYWU5M2RiNTI5OWQ3MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ta/EtDdm/1vhYjdJBYlk0lHNjXX
ANQy6axftudocRegW0eM2wmthUEETFS/Y8Uz4wLPZZhplGVPMgbaSFBJXsE8gyW3
bCuClFNyVmsqrtGIcNHTjr00FrmkY0rWzCe6uqnbgZc4bFBsNE6kd3f05c9CtpbL
gjjEj/r63lkoHVJBWobF1XMwnXQLoYIAw7q5PlvPTOhydPYHsdi92H/hpzEPLNR3
1hjYS9pAGH2XLyCJX8hTiUqFhlzqHERTDC/VtGSEsWi6/6OxXVlqp7x0HcR1Mk8I
QsVnwYe6Qh+RENR8w6hmRVz6AdZ4PgdrL3sZtyRjtpz0pJAZPeNCVZwnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSFdtjuFFHXybCUDyrpPbUpnXI/MB8GA1UdIwQY
MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt
MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4
LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH9NFE7U
CJKVaAkQoVJOn2dVz72WW2gOL8mXfQRBBuwtpn7OjHvSTTMgQZuXMh5tDNzykvcc
o+07kXeB7Bpi5u+acPb9rLf2+PHtHbp5zNYXVrKWPsWtPKNLYPvrcb1zM4fxDb3A
W2SJd8lTTO6cXy9uS9IWNk1cPjHZqjZbYdxwCQyiv7wCDFDhwGTT6sic7Fb4oMgT
IvNNxICH4BOtDR3m9XyQ5YUKaMqCAIcsqEeTtwmHki1UgP+tDLfkv+E2n4xCCBAI
KuTWzo8ZvQrZLL2yy5fZT+1IfcS1U97heLyhodOdx9pNC3q0VLVZXLjf8ehJElt+
lPmy1CHUtrb3BQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:58 2026 by rpki-client