Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File:                     yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier:          AMNUkeMdCxreMgUY+iTmRQdZzP8C0+4RGEl7zf2lrhY=
Subject key identifier:   19:4D:82:31:96:32:0E:2F:9E:F1:D7:89:2D:19:19:80:15:8A:1F:AC
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer:       /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial:       019CE4B5E5E6902B1278508D121B11A9733E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number:          057F
Signing time:             Fri 13 Mar 2026 01:00:51 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:51 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:51 +0000
Files and hashes:         1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: V/aRlVK0mKS+RPBgO4xEFt+FPDPdKDUNi+eLLix7oLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:e5:e6:90:2b:12:78:50:8d:12:1b:11:a9:73:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
        Validity
            Not Before: Mar 13 01:00:51 2026 GMT
            Not After : Mar 14 01:00:51 2026 GMT
        Subject: CN=194d823196320e2f9ef1d7892d191980158a1fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:aa:a3:25:46:53:aa:e5:04:11:e9:da:4a:
                    89:8d:4c:5a:46:0e:26:81:ee:ec:de:af:aa:62:22:
                    c8:06:7d:c7:9e:1d:0e:6a:27:a1:57:da:1b:a9:96:
                    92:45:68:ac:69:48:53:14:87:3b:47:0d:63:2e:24:
                    79:29:61:34:22:8b:e7:10:75:b5:f7:33:57:87:0d:
                    9e:cb:8d:79:59:81:d0:2d:07:a0:fb:cc:16:92:58:
                    ba:72:2b:49:6a:14:8e:ad:6f:15:3c:df:59:c6:81:
                    4f:65:f4:5e:da:bb:86:50:06:c2:52:56:74:83:c8:
                    56:2a:59:97:4c:cb:50:ba:ec:00:9e:30:7d:ad:53:
                    47:6e:ef:4d:93:d6:0f:7a:15:7c:70:8f:2d:96:8f:
                    94:c6:a5:ff:42:41:82:5e:ad:c9:a5:bd:ee:10:25:
                    75:40:a7:80:2a:60:a9:e8:bc:96:59:f4:d7:9c:f3:
                    c6:6e:46:74:83:24:c7:b6:a0:32:88:7f:ca:25:1b:
                    bb:b4:a2:56:5f:c4:93:9a:64:54:a6:e5:f0:03:f2:
                    22:af:d3:be:8a:25:44:ff:a1:36:b8:c1:4c:05:86:
                    86:45:47:59:0f:e1:09:4e:bf:9d:ee:38:6c:0e:ee:
                    e2:de:92:7b:15:a9:9d:c6:0c:aa:14:c4:58:a6:cd:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:82:31:96:32:0E:2F:9E:F1:D7:89:2D:19:19:80:15:8A:1F:AC
            X509v3 Authority Key Identifier:
                keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:49:81:19:2f:09:5f:6f:9e:fd:1a:40:47:ec:f7:7f:22:
         4c:61:00:f3:37:29:26:6e:09:4d:a4:bb:ed:73:49:d5:e3:87:
         4d:93:51:c8:c7:21:29:9a:97:92:38:fc:eb:58:d7:6b:52:f9:
         54:92:29:a7:55:ca:84:98:ee:f0:13:be:87:dd:5b:e7:85:70:
         ac:2c:49:29:b6:1c:7f:a3:cd:4a:9f:ef:3f:40:a4:7a:41:19:
         fc:05:c5:fd:c2:f9:39:d0:62:07:8f:a2:26:ac:a1:af:58:67:
         e7:ba:4a:66:a0:30:ac:45:31:b2:6b:74:ba:05:f7:93:76:c2:
         d3:21:c6:cb:93:e4:dd:91:69:02:27:1a:55:6b:c0:27:c2:47:
         df:92:06:08:f7:4d:c6:3f:00:2f:2e:cb:d3:0c:b3:ae:ac:8b:
         70:e6:e9:73:84:fb:31:6a:30:3b:85:4b:00:e3:38:38:7a:b0:
         fd:2c:48:9f:66:85:83:27:4a:b3:64:50:e8:40:8f:99:27:57:
         f1:43:52:14:25:e3:2c:9a:b9:9a:94:6a:6c:9e:9c:0a:7c:45:
         f5:2e:e9:49:6d:2f:6c:b9:ab:78:3e:2c:6c:9a:fa:60:f1:f1:
         24:12:d6:31:86:81:00:fe:e3:98:b9:a6:47:f9:81:56:2d:a9:
         dc:ea:f1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:20 2026 by rpki-client