Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File:                     yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier:          cRTd72Ob7WJlcY5vkylQou/K2NDaKe2ttDwxp9iHk6U=
Subject key identifier:   3E:37:0F:AC:AB:DA:A9:49:BC:5A:5B:12:24:AD:A6:50:65:1A:79:A6
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer:       /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial:       019D2AA9196F525C7117277297E9210BBCAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number:          0D8E
Signing time:             Thu 26 Mar 2026 15:00:18 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:18 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:18 +0000
Files and hashes:         1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: L1wjeHqDrFtCZwggaFz47jd5OCEXv8AD+SONo/xwKfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:19:6f:52:5c:71:17:27:72:97:e9:21:0b:bc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
        Validity
            Not Before: Mar 26 15:00:18 2026 GMT
            Not After : Mar 27 15:00:18 2026 GMT
        Subject: CN=3e370facabdaa949bc5a5b1224ada650651a79a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:c1:24:ba:07:4d:2e:d2:49:09:c2:d5:b7:
                    87:56:94:b5:3b:a6:71:66:5c:c3:4d:7f:ac:80:df:
                    94:2a:43:52:f5:1e:a3:f9:c7:e6:dc:50:aa:54:1b:
                    f5:45:bc:e2:44:79:74:eb:66:b3:bb:e3:4b:77:53:
                    d7:41:56:da:d3:86:78:06:c9:67:e9:98:f9:49:71:
                    d3:4c:e2:ec:37:0e:34:5f:e1:51:1e:f8:69:b5:a7:
                    05:99:61:77:58:ae:3c:57:84:21:97:1f:37:39:f3:
                    ab:93:1a:e0:8c:a6:b9:ae:4b:65:71:a8:2f:5a:f9:
                    11:34:ae:22:09:e3:9f:84:4e:57:a1:ee:ef:ea:04:
                    4c:f1:62:a3:69:91:93:a7:1c:c9:ef:1e:cd:a8:dc:
                    bd:57:61:7c:46:1b:64:e2:3f:a1:09:4f:2e:75:38:
                    c8:00:c7:c5:ec:a3:74:54:73:ac:33:62:ae:b2:ac:
                    8a:c6:cf:88:6b:7e:d9:28:a1:43:c7:8d:1d:fe:c9:
                    32:b1:d5:18:fa:59:e0:09:7a:f0:ac:c4:0e:df:77:
                    39:d1:62:39:8d:83:0c:9c:c9:e2:52:57:bf:41:27:
                    b5:1d:d5:f8:6b:28:27:eb:9e:8d:dd:d4:3b:d9:61:
                    59:bb:08:00:ad:e5:f4:6e:49:60:ed:e3:28:7a:e4:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:0F:AC:AB:DA:A9:49:BC:5A:5B:12:24:AD:A6:50:65:1A:79:A6
            X509v3 Authority Key Identifier:
                keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:dd:80:30:e4:db:62:37:02:e3:68:29:8f:98:7e:48:63:59:
         55:ee:74:d7:e6:60:46:cf:29:28:f4:97:0f:4e:46:ce:44:f3:
         a2:95:49:db:61:3d:fa:aa:a8:56:da:a2:18:67:15:ce:09:c8:
         11:4c:71:96:ee:26:fb:37:b7:29:1b:18:d7:3f:41:38:a6:07:
         99:2a:53:ea:29:21:5e:f2:d0:73:a7:ae:8b:47:6f:58:8d:5b:
         30:2b:ce:6e:a4:a4:42:8f:1a:e9:ab:ef:96:e9:5c:65:85:cd:
         ab:f4:7b:b4:ce:78:df:fb:c5:f0:e6:0e:e9:72:fa:ec:05:85:
         3c:74:17:d9:82:34:78:ec:80:17:54:cc:14:9e:c0:14:7d:8d:
         b1:88:ec:e5:a5:12:ea:6b:af:cd:e6:76:80:81:e4:59:32:4c:
         b0:d2:4a:c1:35:e7:5e:4e:c1:04:f8:60:08:6d:c2:28:3b:4d:
         7f:79:6a:e8:01:7b:0c:2c:f6:cd:16:43:03:72:c7:07:83:0f:
         85:72:3f:13:48:d2:86:7c:9e:8b:61:3d:77:f6:47:ea:02:90:
         32:41:9f:06:c2:0c:20:5c:e3:40:72:7e:7f:ee:3b:e1:45:37:
         1c:5a:47:02:c7:e0:56:f8:1b:a8:df:ee:8f:29:f1:6f:c9:e7:
         44:f7:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:31 2026 by rpki-client