Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
File:                     yfcvcKzNptLmEzWoFzDm9u5RPMU.mft (raw, json)
Hash identifier:          sQV2HUp0nEIsfIwcnt/cJfS6dM70ExtzvakaxmbGo44=
Subject key identifier:   73:01:12:D6:F4:8B:25:D5:13:87:84:D7:7C:54:CF:3B:9E:72:D1:2E
Authority key identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5
Certificate issuer:       /CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
Certificate serial:       019D3865D462D748556693DB7F9732F88F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 07:01:30 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:30 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:30 +0000
Files and hashes:         1: yfcvcKzNptLmEzWoFzDm9u5RPMU.crl (hash: qcXSUELvXYM1vRv7003UqD9PUZpNTIGdTOMrl/+dP00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:d4:62:d7:48:55:66:93:db:7f:97:32:f8:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
        Validity
            Not Before: Mar 29 07:01:30 2026 GMT
            Not After : Mar 30 07:01:30 2026 GMT
        Subject: CN=730112d6f48b25d5138784d77c54cf3b9e72d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:54:27:9b:7c:17:d2:0b:86:b9:38:e3:49:
                    b4:40:b4:4d:64:41:4c:35:e8:1b:3a:64:b8:8f:2d:
                    a4:34:e5:7a:b9:65:22:89:19:b7:da:50:18:3c:4c:
                    2e:65:bc:1d:61:59:77:f6:15:b2:02:48:51:cb:8a:
                    20:ed:f3:a8:f0:db:dd:5a:94:b2:81:dd:54:f0:5f:
                    7c:04:15:7f:51:29:97:aa:1b:95:00:cb:39:03:19:
                    54:b4:0f:6a:be:24:ba:21:2b:c5:90:0d:c5:e8:43:
                    a8:05:ef:43:b7:3e:b7:a4:ca:23:1f:6d:e3:b0:24:
                    41:12:0a:41:fe:b0:54:72:5d:59:56:1d:c4:a3:49:
                    22:dd:3f:d7:c5:12:39:40:79:d2:e2:76:f3:39:65:
                    f4:92:18:e6:d9:89:d2:88:f9:94:a9:0f:fd:3a:65:
                    e0:c3:da:72:fa:26:7d:86:dc:1e:6f:8b:fe:6d:49:
                    f8:97:22:bf:06:15:89:97:3d:ae:86:42:48:41:11:
                    a4:8c:4f:f0:ba:b9:ad:52:15:8e:9b:18:a7:34:87:
                    39:20:69:4d:2d:09:90:00:eb:ec:b1:f6:0f:97:16:
                    00:1f:30:44:db:e0:3e:e1:7c:24:5f:0b:e6:67:5a:
                    af:4f:c0:8f:a3:c7:78:e6:51:5a:2e:e4:3e:25:e5:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:01:12:D6:F4:8B:25:D5:13:87:84:D7:7C:54:CF:3B:9E:72:D1:2E
            X509v3 Authority Key Identifier:
                keyid:C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:2c:bd:f3:30:85:6f:a0:b5:b1:ba:00:4a:59:fe:57:1e:
         03:13:3a:6a:eb:b4:e5:2a:b2:69:9b:3c:f8:05:2b:12:e1:17:
         7a:e7:5e:12:33:66:4d:37:d7:af:bc:2e:ae:8f:21:55:f5:f8:
         8f:d1:b8:a8:32:13:ad:3e:2f:d4:c8:ed:7d:5e:53:a5:6f:3c:
         a8:ec:c8:13:ca:f1:e8:10:01:2e:89:e8:09:02:ca:52:8d:4c:
         dc:9a:25:ed:21:f3:b9:3e:51:c6:bc:e4:c4:4b:89:80:1a:e1:
         7c:93:f1:44:8f:11:df:c5:8a:77:d6:08:68:fe:e0:05:2a:7b:
         c2:96:fe:91:d6:51:f2:7b:8e:7c:18:81:29:e4:54:12:b1:38:
         e0:43:c0:8a:be:0f:a0:dd:e8:b9:4d:a3:f2:70:16:3c:e6:91:
         54:f3:01:f3:b4:f0:0d:0a:f5:42:90:49:1d:99:55:f0:49:70:
         14:6b:79:35:c9:d2:70:2b:03:b9:18:c7:6c:ca:02:79:6a:31:
         c5:4b:36:1e:1e:95:9c:d0:cb:e9:e6:1e:a3:b7:45:2d:68:a9:
         35:5c:12:32:0b:53:60:7f:b1:70:0b:2d:ad:dc:a4:78:f7:95:
         04:bb:60:73:b1:be:16:8f:7d:94:62:27:d0:2f:95:9d:a3:ce:
         09:99:d2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdRi10hVZpPbf5cy+I8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZjcyZjcwYWNjZGE2ZDJlNjEzMzVhODE3MzBlNmY2ZWU1
MTNjYzUwHhcNMjYwMzI5MDcwMTMwWhcNMjYwMzMwMDcwMTMwWjAzMTEwLwYDVQQD
Eyg3MzAxMTJkNmY0OGIyNWQ1MTM4Nzg0ZDc3YzU0Y2YzYjllNzJkMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMVUJ5t8F9ILhrk440m0QLRNZEFM
NegbOmS4jy2kNOV6uWUiiRm32lAYPEwuZbwdYVl39hWyAkhRy4og7fOo8NvdWpSy
gd1U8F98BBV/USmXqhuVAMs5AxlUtA9qviS6ISvFkA3F6EOoBe9Dtz63pMojH23j
sCRBEgpB/rBUcl1ZVh3Eo0ki3T/XxRI5QHnS4nbzOWX0khjm2YnSiPmUqQ/9OmXg
w9py+iZ9htweb4v+bUn4lyK/BhWJlz2uhkJIQRGkjE/wurmtUhWOmxinNIc5IGlN
LQmQAOvssfYPlxYAHzBE2+A+4XwkXwvmZ1qvT8CPo8d45lFaLuQ+JeV2rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMBEtb0iyXVE4eE13xUzzuectEuMB8GA1UdIwQY
MBaAFMn3L3CszabS5hM1qBcw5vbuUTzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEt
MmY5ZjgxZTkzMjk4LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEtMmY5ZjgxZTkzMjk4
LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD0svfMw
hW+gtbG6AEpZ/lceAxM6auu05SqyaZs8+AUrEuEXeudeEjNmTTfXr7wuro8hVfX4
j9G4qDITrT4v1MjtfV5TpW88qOzIE8rx6BABLonoCQLKUo1M3Jol7SHzuT5Rxrzk
xEuJgBrhfJPxRI8R38WKd9YIaP7gBSp7wpb+kdZR8nuOfBiBKeRUErE44EPAir4P
oN3ouU2j8nAWPOaRVPMB87TwDQr1QpBJHZlV8ElwFGt5NcnScCsDuRjHbMoCeWox
xUs2Hh6VnNDL6eYeo7dFLWipNVwSMgtTYH+xcAstrdykePeVBLtgc7G+Fo99lGIn
0C+VnaPOCZnSeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:30 2026 by rpki-client