Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File:                     ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier:          z6BzW3qvsBKW5lF1LHDvXrzCUO/6AJtwZZHTT71vmR8=
Subject key identifier:   69:AA:FF:08:8C:9B:3A:EF:52:25:5E:9B:C4:2F:DA:31:B7:06:A4:2A
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer:       /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial:       019D37C052E2213C084BF161BB9FAC9D929F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number:          0803
Signing time:             Sun 29 Mar 2026 04:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:44 +0000
Files and hashes:         1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: wpaNmz2D5zzEXlM/fRy6VSwZo9kmTr+9aAq95gjZ52M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:52:e2:21:3c:08:4b:f1:61:bb:9f:ac:9d:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
        Validity
            Not Before: Mar 29 04:00:44 2026 GMT
            Not After : Mar 30 04:00:44 2026 GMT
        Subject: CN=69aaff088c9b3aef52255e9bc42fda31b706a42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:a9:ce:d0:3e:45:f9:be:dc:2b:d7:35:5d:
                    6e:ec:2b:82:c2:4b:7e:91:e5:c1:27:83:26:2e:d2:
                    93:04:7e:bb:81:46:88:cc:c9:94:17:ea:e6:a7:86:
                    7f:be:3f:13:2c:c1:c1:a7:37:c9:47:fc:98:12:fa:
                    39:4a:98:c9:d7:71:e1:b9:7c:83:33:67:87:ad:f3:
                    42:b7:a8:fc:da:77:b2:bb:04:fd:ac:67:d7:f6:98:
                    a9:3d:86:ae:4c:f7:b0:73:c3:ef:28:ad:a4:24:3e:
                    5d:a2:dc:29:af:7a:ee:2d:b7:c4:1d:33:53:8a:57:
                    9f:b4:b5:2c:bc:5f:e5:9c:36:67:eb:52:bf:a6:a2:
                    19:eb:2c:ab:49:34:65:61:2f:6d:c1:4e:53:9f:d3:
                    fc:e6:5b:c5:3f:68:bf:a9:6a:40:6d:1b:ba:86:07:
                    ce:2b:6b:df:00:b9:33:e6:eb:17:9b:78:58:fe:e3:
                    4c:69:8d:7d:ec:29:27:6c:83:d2:a2:e1:2e:78:29:
                    b2:4d:dd:07:e8:d3:4c:7d:21:06:4d:0d:a3:b4:4c:
                    82:53:ad:db:b6:3b:15:fd:3a:62:2a:f0:de:8a:50:
                    32:e2:a0:ab:d0:79:d7:17:52:ec:ad:89:d8:55:82:
                    a6:a8:4b:5c:24:84:cb:f6:bf:8d:27:6a:3e:b8:c4:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AA:FF:08:8C:9B:3A:EF:52:25:5E:9B:C4:2F:DA:31:B7:06:A4:2A
            X509v3 Authority Key Identifier:
                keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:e0:cb:7b:32:18:ba:ef:4f:66:37:9e:22:1c:c0:7d:4e:
         33:64:ca:c8:3b:fd:8a:7d:77:d2:c2:05:9f:7f:84:6f:1a:ca:
         18:39:10:2f:d2:e8:2a:ea:75:4d:68:1c:28:56:e8:2e:63:42:
         02:98:3d:fd:30:86:37:14:af:5a:f6:b7:15:ad:cd:6b:e8:6d:
         5b:00:11:bb:1a:2b:b5:bf:26:4e:a9:67:2d:bd:c1:3a:ce:f6:
         20:7d:fd:ac:a4:77:73:ac:ee:da:c0:63:c3:75:3c:90:6b:2a:
         d6:2c:13:b3:fb:f6:16:a4:3e:fc:71:25:00:97:64:50:9e:41:
         6a:57:df:f9:35:5d:20:02:a8:68:10:bc:94:af:20:8d:48:9c:
         4d:9a:25:bf:c2:6c:d9:31:b5:c4:d4:9b:9e:c7:4f:45:6c:43:
         da:30:25:0e:5d:22:cc:14:9b:5f:e2:e8:30:dc:a1:b8:4b:8e:
         38:81:83:88:6c:22:2c:4d:a0:6e:00:37:ef:91:eb:9b:ed:0e:
         2f:72:d9:7f:26:96:18:c4:d8:5e:17:02:d4:40:17:e2:00:ad:
         ed:4c:04:e7:e3:67:15:da:4c:bc:59:63:87:2f:d6:73:ca:fa:
         fb:62:64:ec:c4:67:ae:d3:7c:c2:9d:41:ff:7b:47:dd:3c:73:
         d7:cc:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----