Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File:                     CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier:          Vq9u1PhIw7/QlNPEYE2CwlONosWh1L/5uJj6ClOISH8=
Subject key identifier:   69:26:C7:81:98:FB:F8:D7:08:72:7C:37:F1:E6:FA:FA:30:76:05:22
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer:       /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial:       019D273B267B45A7B5DEF9C44823DC1B7F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number:          65
Signing time:             Wed 25 Mar 2026 23:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:21 +0000
Files and hashes:         1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: 2T1vKz/v32XhpDLAiAPS//l1RPHyYgPDARXvCLLUGW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:26:7b:45:a7:b5:de:f9:c4:48:23:dc:1b:7f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
        Validity
            Not Before: Mar 25 23:01:21 2026 GMT
            Not After : Mar 26 23:01:21 2026 GMT
        Subject: CN=6926c78198fbf8d708727c37f1e6fafa30760522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:74:25:ea:55:57:dd:1e:a8:70:57:e3:d9:
                    a2:32:70:49:69:ba:19:22:c7:55:a7:e8:e3:f4:32:
                    6f:4a:f8:b2:4b:08:11:2b:42:53:8f:0f:d0:38:bb:
                    25:18:81:d0:8a:48:e6:8d:d9:87:de:d4:8c:9d:7f:
                    55:08:a4:ab:6c:76:cc:fc:5b:36:c1:b8:ff:39:3b:
                    93:02:6f:02:a4:01:4d:0a:af:c0:f1:f3:40:f3:07:
                    ca:60:90:59:96:dd:98:cf:c3:3c:ba:35:a1:50:26:
                    ab:03:a4:17:19:bd:e6:bb:d9:aa:68:07:1b:41:b0:
                    44:e8:06:31:6f:45:7e:4c:9f:46:33:8a:cf:8c:79:
                    c3:8f:cb:1a:1e:99:e2:57:e5:6d:1b:c1:0a:12:69:
                    ea:e4:59:8c:86:0c:ef:b6:51:50:24:5b:64:e9:4f:
                    1a:80:90:09:bb:3b:84:70:9b:d6:68:92:97:44:e1:
                    b4:42:36:51:b1:9b:51:7b:45:f4:ea:d5:ae:35:6c:
                    11:05:82:9e:98:37:9f:a4:eb:4f:93:ca:73:1d:85:
                    98:bf:00:32:8a:38:3e:19:f1:86:db:90:48:be:d3:
                    52:05:31:70:04:e2:63:81:4b:7b:69:c9:e0:36:83:
                    63:16:8f:da:10:9a:2e:f3:4e:cc:87:37:86:ca:26:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:C7:81:98:FB:F8:D7:08:72:7C:37:F1:E6:FA:FA:30:76:05:22
            X509v3 Authority Key Identifier:
                keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:f6:9a:d6:78:d2:d1:c1:99:d1:d5:46:1e:ac:ab:dc:f0:
         31:ae:8c:75:58:22:90:4d:d8:d4:48:c6:a6:bd:8c:06:5b:b8:
         b0:87:23:de:0a:42:e3:25:f1:9a:43:b7:88:8e:a2:46:09:f0:
         a2:fa:5b:9c:e3:1e:fb:d7:2e:0e:12:fe:88:8e:7d:7b:e0:9a:
         87:e4:b9:e9:cc:31:c2:fa:3c:75:4a:97:a7:2a:27:38:67:ce:
         a9:89:f0:14:5d:62:1a:89:6a:b1:23:da:ac:f7:07:94:8b:97:
         f0:d6:da:55:d2:b3:1c:41:db:b3:52:bd:77:8d:23:d5:92:a6:
         b0:9b:a5:4d:34:2a:1e:d4:76:c4:74:29:b9:c7:21:91:33:72:
         85:09:78:9f:69:1b:53:3b:39:4a:2f:93:82:c3:38:f0:4f:7e:
         35:03:87:90:83:d3:c1:3a:6e:08:1d:3c:51:86:6a:e1:0a:14:
         65:19:1b:09:9e:d2:32:38:2f:74:d3:19:57:97:48:1c:00:5b:
         34:61:78:41:d7:00:c8:4b:36:2c:e4:cf:6d:dc:86:6d:71:9e:
         b3:28:12:0b:c4:31:51:83:c2:22:80:31:03:65:87:e3:10:50:
         bd:2b:14:80:aa:0b:3b:8a:dc:fd:4b:f3:f4:57:06:06:3f:27:
         bb:f6:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:42 2026 by rpki-client