Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
File:                     YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json)
Hash identifier:          DvSkxOJ3v2SDkvH0whyJllfkqz1tkY7YOJH+EUhuNf8=
Subject key identifier:   97:DD:EC:D6:16:8D:FA:64:89:F0:C5:11:50:7C:B7:0F:63:AF:29:02
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Certificate issuer:       /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial:       019D26287724934F03A4DAC8BC94F4F63B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
Manifest number:          0F99
Signing time:             Wed 25 Mar 2026 18:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:19 +0000
Files and hashes:         1: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: vNppaFBhUOQ0w1bebVHLncMliw7y6/0AN+ucIyH3/qY=)
                          2: znwOPYUIO45R8GUX2z4werIuXYc.roa (hash: djo2WYmGgjAnHWXHkweLZQsTJ0zv8CcnVSaiehBnT1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:77:24:93:4f:03:a4:da:c8:bc:94:f4:f6:3b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
        Validity
            Not Before: Mar 25 18:01:19 2026 GMT
            Not After : Mar 26 18:01:19 2026 GMT
        Subject: CN=97ddecd6168dfa6489f0c511507cb70f63af2902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:81:65:9d:85:dc:9f:03:5e:3d:e3:ed:39:
                    df:fd:d0:b3:26:9b:26:37:43:16:f4:f1:00:50:24:
                    f2:ff:ae:db:69:e1:16:d4:d7:ca:ff:19:fc:85:b8:
                    51:d8:fb:d5:2e:b1:76:ba:14:09:f9:f4:2a:9c:cc:
                    3c:8e:ba:b7:7e:34:ef:40:a3:e0:19:5e:b5:0c:bf:
                    7b:0a:55:66:59:d3:d2:ae:23:0c:96:b9:60:3f:9e:
                    0b:e4:87:e3:de:3c:00:8b:e4:5d:51:2a:1c:df:21:
                    cf:12:a8:44:21:43:d3:8b:a0:a8:fb:0a:0f:4d:b4:
                    5a:49:62:34:e7:b4:64:6d:81:59:1e:ba:3c:c7:d8:
                    42:42:ad:13:fb:d1:57:1e:1b:2e:db:f0:96:a9:71:
                    cc:f5:ed:97:90:d2:7a:31:6d:9e:e3:24:78:27:06:
                    af:79:e2:7b:38:cc:e5:67:a5:87:47:64:31:12:bb:
                    18:23:44:94:b3:1d:72:11:8f:a2:1b:3a:23:8f:b5:
                    db:27:a0:3c:7c:ec:26:28:09:1d:b8:a6:af:85:32:
                    c2:95:a8:1a:35:36:b5:64:32:e9:fb:f9:b8:d5:5d:
                    86:06:6b:99:76:3f:d3:b8:be:0f:ce:57:8c:c7:2c:
                    4b:60:26:a4:83:9b:dd:6e:42:9a:1b:64:33:7f:71:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DD:EC:D6:16:8D:FA:64:89:F0:C5:11:50:7C:B7:0F:63:AF:29:02
            X509v3 Authority Key Identifier:
                keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:79:a4:af:e8:fe:f2:13:7b:5e:99:95:bc:7a:ee:17:d7:
         8f:ff:0b:b9:92:7a:bc:9b:ca:39:bd:e8:9b:ff:17:2a:80:30:
         7a:1c:91:13:17:16:e6:64:70:8c:91:44:95:d6:72:c6:32:08:
         47:26:9b:d5:06:98:53:09:72:e2:a5:b4:0e:23:ea:71:ce:97:
         47:47:be:2d:d1:e2:de:a5:00:85:b4:87:7e:57:74:87:b1:1d:
         04:6a:98:90:56:fe:b2:e1:ba:c9:47:c8:13:d5:d7:be:2b:ab:
         7f:54:49:e2:ad:eb:c7:4e:f3:70:e9:b0:27:00:46:03:a7:69:
         3d:30:ad:61:43:9c:c5:60:c6:b7:21:91:30:52:0c:4a:f8:73:
         8a:2a:84:3a:d3:43:a1:aa:de:23:3d:30:c0:42:2b:9a:b9:7c:
         71:28:72:ce:9a:be:0c:07:6b:36:61:9c:a0:76:d6:11:ec:c2:
         bd:79:61:d8:fe:e4:f7:d5:5a:24:f6:ec:80:0a:06:d5:76:7f:
         70:60:5d:4b:14:f3:77:89:53:e3:be:0e:d6:e9:b7:9e:12:8d:
         98:ea:a3:5f:fa:b7:11:79:3b:f0:ca:f0:c6:9e:f1:2d:92:41:
         d6:63:84:8d:3f:c1:41:2b:5f:bc:30:79:3c:6e:de:7e:e1:dc:
         16:cc:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:45 2026 by rpki-client