Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
File:                     ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft (raw, json)
Hash identifier:          RNShQpaYzAVNdVWhO1LZEBpZAk7nWtic/GiK2izbEAk=
Subject key identifier:   C2:E4:07:B6:07:10:5A:BA:5B:54:8C:B3:06:86:10:95:B7:E7:C4:6F
Authority key identifier: CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2
Certificate issuer:       /CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2
Certificate serial:       019D3299F93A0E69941D62912599BD29277F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
Manifest number:          9D
Signing time:             Sat 28 Mar 2026 04:00:44 +0000
Manifest this update:     Sat 28 Mar 2026 04:00:44 +0000
Manifest next update:     Sun 29 Mar 2026 04:00:44 +0000
Files and hashes:         1: ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl (hash: 38+ZK2TvRb+W5/xJsA7mluDeMFc5u+vh5CApnFlPLGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:99:f9:3a:0e:69:94:1d:62:91:25:99:bd:29:27:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2
        Validity
            Not Before: Mar 28 04:00:44 2026 GMT
            Not After : Mar 29 04:00:44 2026 GMT
        Subject: CN=c2e407b607105aba5b548cb306861095b7e7c46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:32:15:d4:4e:27:da:6e:27:da:12:16:78:
                    fa:69:8c:c3:c3:b7:b5:14:cf:f8:93:40:42:86:79:
                    3e:cc:e1:0b:8f:95:8e:a1:36:da:08:2a:5b:65:a4:
                    a2:07:97:fa:48:00:39:87:72:87:6b:e0:54:1f:4a:
                    6f:32:19:8c:da:38:23:b8:73:50:7a:60:99:8d:f3:
                    e6:98:a3:ad:42:bb:56:80:86:9a:36:ed:97:c4:a0:
                    5b:00:b9:71:5b:e3:4b:ab:22:7c:c9:73:92:99:e7:
                    6c:3d:0f:2f:a1:d5:10:3d:a2:e3:03:ed:18:05:e1:
                    6e:77:f4:3c:70:a7:d5:44:79:2e:6d:c9:75:c1:43:
                    85:95:14:4e:c3:a0:2f:c7:af:89:95:e6:73:75:23:
                    ec:16:c0:21:06:d1:4c:4e:a9:d4:c6:c0:ab:6e:48:
                    e3:e9:30:ee:53:10:a7:1d:b3:f8:89:ab:bf:11:88:
                    b1:ea:42:aa:45:96:39:08:bd:6a:59:56:ad:8e:8c:
                    ba:db:13:e4:b8:d7:50:85:41:6c:26:5d:b2:ba:8c:
                    6b:0a:2b:46:c9:c3:cf:31:71:c0:b1:2c:e9:f9:e9:
                    0d:d1:1c:e1:6d:92:2c:65:4f:31:7f:00:fb:a6:e2:
                    15:2e:e6:a8:59:6d:12:41:c1:b9:ac:94:bc:4f:64:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:07:B6:07:10:5A:BA:5B:54:8C:B3:06:86:10:95:B7:E7:C4:6F
            X509v3 Authority Key Identifier:
                keyid:CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:51:a8:9e:1e:39:92:44:f8:ba:32:6f:5e:20:96:26:03:75:
         00:b7:85:6a:66:b4:44:fd:f8:04:ae:45:8e:ff:1d:e0:0f:bf:
         03:24:bc:0e:2b:6f:82:70:7a:f2:83:bf:af:f5:e1:ea:76:c6:
         3c:45:55:72:3f:c8:6d:fb:f4:f4:e7:84:29:a6:91:42:12:07:
         c0:bb:36:36:b1:4e:fa:12:4e:0b:a7:8e:4e:3b:a8:5e:47:f6:
         39:7d:7c:cf:11:06:d2:8f:b1:03:33:20:83:03:18:66:e9:7d:
         cf:4b:eb:8c:f0:1e:87:fa:24:2a:be:cb:48:83:49:0f:1d:b6:
         cb:56:1c:4f:c9:b1:38:1e:11:2b:16:ef:b0:18:99:38:2e:f3:
         5f:bf:af:5d:7d:02:e8:77:3f:6c:b4:ad:21:f0:98:d4:9b:14:
         ef:b6:d7:3e:ea:e2:6e:0b:e0:67:a9:88:56:49:97:dc:56:6f:
         b9:da:be:c7:5e:77:cd:0f:30:4e:77:4c:f5:a5:a0:35:81:a2:
         46:4f:ff:7b:52:96:1f:87:95:fb:fc:40:49:76:5a:47:e4:94:
         05:67:0f:0b:d0:d1:6c:6f:b5:39:14:2b:9b:be:0e:f2:11:63:
         5c:72:6e:b5:55:38:0e:bb:74:b2:fc:19:a9:b0:cb:58:51:06:
         7f:d7:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:43 2026 by rpki-client