Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File:                     Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier:          jDOxUWBJoo9r0qQ6Y+KHHJDRYeacza7z2hGLJp9xAvo=
Subject key identifier:   C6:26:F8:D5:8F:B8:E6:99:A7:DF:DF:11:A0:0E:04:D6:EA:FC:56:2B
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer:       /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial:       019D265F2385EB80F5B74958618141278B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number:          0E83
Signing time:             Wed 25 Mar 2026 19:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:02 +0000
Files and hashes:         1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: 7mNQP5U9wOyoFvrTalVuyCLxDdOzcaAycrbYJeMFGoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:23:85:eb:80:f5:b7:49:58:61:81:41:27:8b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
        Validity
            Not Before: Mar 25 19:01:02 2026 GMT
            Not After : Mar 26 19:01:02 2026 GMT
        Subject: CN=c626f8d58fb8e699a7dfdf11a00e04d6eafc562b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:30:d2:9f:83:c9:b1:cf:60:b3:d9:10:4e:
                    6c:f4:65:54:76:87:08:ce:e5:1f:86:4d:1a:b2:af:
                    40:3d:1b:39:1f:21:c0:ad:9c:43:af:79:ef:eb:ea:
                    db:3d:51:a8:ad:c0:2c:9f:f6:3c:43:58:8a:79:53:
                    1f:2e:b1:37:90:1d:42:de:6b:59:5f:03:3b:8f:c8:
                    9b:c6:8b:37:12:4d:3f:58:fc:46:25:ab:7f:e4:14:
                    04:0b:39:3f:47:0d:b0:ca:59:1c:46:30:df:52:49:
                    0b:aa:c9:79:13:f1:f5:62:6d:b6:a8:93:be:46:4f:
                    d8:8e:84:13:4d:6c:1d:97:a7:10:ed:af:49:a0:22:
                    77:7f:c3:61:22:6a:0c:5a:67:0d:51:78:ce:85:40:
                    de:c7:ad:d9:4d:7d:c4:b2:d1:f1:9d:eb:44:a0:2d:
                    aa:ba:46:f6:d1:38:06:05:03:15:95:22:20:e5:e1:
                    71:2d:4f:cc:24:42:64:97:e4:85:70:0c:70:36:90:
                    55:6e:4b:1e:1d:fe:ce:83:c8:29:43:c1:c2:60:72:
                    90:1f:ba:35:d1:85:cf:5b:60:6d:16:6a:35:3c:ab:
                    8c:cb:ae:0c:9d:d8:e3:1f:e2:bb:29:ed:34:46:92:
                    2f:0f:98:e6:1b:45:99:9d:49:d8:50:45:7f:2d:0e:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:26:F8:D5:8F:B8:E6:99:A7:DF:DF:11:A0:0E:04:D6:EA:FC:56:2B
            X509v3 Authority Key Identifier:
                keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:04:82:2d:3e:bc:ed:a2:1e:58:e8:7c:15:66:44:56:4f:3f:
         7a:fe:d5:7e:f1:5d:e7:e9:c3:c1:ab:7d:86:0f:08:da:4b:87:
         87:51:52:84:a1:ff:72:51:5a:ba:11:61:17:c4:9e:95:c7:d6:
         d2:c7:20:1d:69:61:38:fc:5e:84:5d:95:02:bf:d0:d9:f9:2a:
         92:1a:86:03:02:a0:7a:c6:09:05:fc:3f:6f:cd:8d:8a:12:ba:
         f6:11:66:fd:5e:93:ca:5d:46:9d:bf:a0:65:b9:44:7a:ec:5d:
         8a:ba:e1:ce:f3:8c:d8:86:f4:3b:4f:e7:08:9c:03:4e:44:cf:
         2b:19:49:b7:28:c4:2a:9b:ba:1e:16:73:0b:af:22:04:69:42:
         60:34:30:46:2a:35:ce:2b:b3:7c:45:d0:b2:6d:33:58:c5:4d:
         24:d9:b5:3d:39:59:6e:8a:f4:75:91:8f:bf:3e:8a:77:58:aa:
         94:f0:0a:d9:5c:75:32:b1:54:af:db:20:1c:74:aa:5b:0a:93:
         fa:06:52:3f:8c:38:c0:d4:d5:5a:46:e9:c1:eb:7e:a7:dc:88:
         25:ae:0d:ae:74:69:61:5d:38:be:b2:c7:db:d5:01:61:09:a5:
         b1:9a:2f:45:35:31:2c:63:48:32:ea:88:16:f5:f2:d8:44:a6:
         3b:b2:3f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXyOF64D1t0lYYYFBJ4sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmViNTM3ZTM2MzVlYzgwMDE1MTBjMzE5MmI3N2ViMTc5
N2MwYWEwHhcNMjYwMzI1MTkwMTAyWhcNMjYwMzI2MTkwMTAyWjAzMTEwLwYDVQQD
EyhjNjI2ZjhkNThmYjhlNjk5YTdkZmRmMTFhMDBlMDRkNmVhZmM1NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLEw0p+DybHPYLPZEE5s9GVUdocI
zuUfhk0asq9APRs5HyHArZxDr3nv6+rbPVGorcAsn/Y8Q1iKeVMfLrE3kB1C3mtZ
XwM7j8ibxos3Ek0/WPxGJat/5BQECzk/Rw2wylkcRjDfUkkLqsl5E/H1Ym22qJO+
Rk/YjoQTTWwdl6cQ7a9JoCJ3f8NhImoMWmcNUXjOhUDex63ZTX3EstHxnetEoC2q
ukb20TgGBQMVlSIg5eFxLU/MJEJkl+SFcAxwNpBVbkseHf7Og8gpQ8HCYHKQH7o1
0YXPW2BtFmo1PKuMy64MndjjH+K7Ke00RpIvD5jmG0WZnUnYUEV/LQ4lZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYm+NWPuOaZp9/fEaAOBNbq/FYrMB8GA1UdIwQY
MBaAFGH+tTfjY17IABUQwxkrd+sXl8CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQt
Nzg1Njc4N2EyZTYzLzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQtNzg1Njc4N2EyZTYz
LzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqASCLT68
7aIeWOh8FWZEVk8/ev7VfvFd5+nDwat9hg8I2kuHh1FShKH/clFauhFhF8SelcfW
0scgHWlhOPxehF2VAr/Q2fkqkhqGAwKgesYJBfw/b82NihK69hFm/V6Tyl1Gnb+g
ZblEeuxdirrhzvOM2Ib0O0/nCJwDTkTPKxlJtyjEKpu6HhZzC68iBGlCYDQwRio1
ziuzfEXQsm0zWMVNJNm1PTlZbor0dZGPvz6Kd1iqlPAK2Vx1MrFUr9sgHHSqWwqT
+gZSP4w4wNTVWkbpwet+p9yIJa4NrnRpYV04vrLH29UBYQmlsZovRTUxLGNIMuqI
FvXy2ESmO7I/UA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:49 2026 by rpki-client