Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File:                     YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier:          VgV42r9gHERC7KEDxYQm9T8Eas1+aEdZ1Gs7dLn8Q78=
Subject key identifier:   0C:C6:EC:29:05:94:7A:BA:E3:82:B7:4D:19:09:B1:C1:2F:42:57:94
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer:       /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial:       019CE7494F14B80B53024017AD15C872CE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 13:01:07 +0000
Manifest this update:     Fri 13 Mar 2026 13:01:07 +0000
Manifest next update:     Sat 14 Mar 2026 13:01:07 +0000
Files and hashes:         1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: nJd2oETQzjdZ6vDDzgFo3t8M0X8g2ktDM1rIDBPjRp4=)
                          2: gIm5Ttt-kadA-HHnl7K2QS3zq4w.roa (hash: k0VLghPFfRvkCor9JH91D2V2IGF1FkPmkcYrg5K87ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:49:4f:14:b8:0b:53:02:40:17:ad:15:c8:72:ce:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
        Validity
            Not Before: Mar 13 13:01:07 2026 GMT
            Not After : Mar 14 13:01:07 2026 GMT
        Subject: CN=0cc6ec2905947abae382b74d1909b1c12f425794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:d7:53:21:1a:19:1f:44:3f:6b:2b:b7:d8:
                    e0:7d:be:9f:c1:86:b8:d9:aa:06:e3:d3:cd:c5:94:
                    f5:d4:cc:16:f1:c1:09:db:3b:d0:0c:0d:87:88:48:
                    b5:14:bf:ad:f3:d3:ae:9c:46:36:6f:a5:03:a7:c8:
                    8b:f6:83:9b:2a:24:e8:88:0b:8e:e8:fd:ab:66:83:
                    2e:8e:fb:4a:21:82:08:4f:dd:3f:92:38:03:9a:00:
                    f5:98:47:8e:16:43:73:a0:ea:7f:f6:db:7e:3f:00:
                    fc:86:cc:c0:c4:7d:04:95:3a:20:4a:fc:b3:01:68:
                    a2:19:b5:be:5b:bc:4b:9e:b9:7a:37:63:67:53:fd:
                    fe:eb:84:28:59:71:45:50:2c:fa:7c:8a:4a:ce:0e:
                    bb:68:8c:22:ee:d9:8d:2a:32:96:9c:cc:ce:50:a4:
                    71:22:ed:55:a8:55:48:e4:0d:6a:1b:a9:35:30:53:
                    44:bf:f6:90:31:26:67:c1:61:89:4c:91:96:f8:d6:
                    d2:d3:89:68:37:2b:14:39:84:39:c4:f4:33:35:6f:
                    ab:1d:70:db:7c:f7:e2:a9:29:ed:a9:33:9f:27:91:
                    95:e1:ad:fb:ef:72:e2:07:49:19:9d:f1:f1:fa:26:
                    50:3b:a3:44:fe:5e:b8:b7:78:9c:43:3c:b8:e8:24:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:EC:29:05:94:7A:BA:E3:82:B7:4D:19:09:B1:C1:2F:42:57:94
            X509v3 Authority Key Identifier:
                keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:d3:d0:6b:cd:d3:b0:a9:be:59:49:09:2d:b2:97:53:d3:
         96:5b:e8:b2:69:08:97:94:54:42:73:d4:22:d5:a1:81:79:23:
         98:80:3f:7a:8b:b5:6b:86:7d:71:4b:d0:4c:01:b0:ec:3b:96:
         db:f1:28:25:b0:83:ac:f7:90:87:ac:33:bc:8f:5d:a5:17:9e:
         c3:70:1f:f4:5b:19:1e:b7:8d:da:19:3f:2f:ee:46:15:33:26:
         1f:14:07:1a:06:21:37:ac:ac:fe:54:0e:d5:b0:58:83:0d:9e:
         dc:67:47:60:e1:85:43:8d:6d:33:d8:b0:f4:ec:3e:58:6f:fc:
         63:c2:67:d4:96:cc:3b:fe:cc:a0:9d:d0:8e:7e:e8:a5:18:e7:
         26:db:87:53:57:4e:73:a0:05:84:40:60:d4:c5:16:0a:49:54:
         01:ba:73:d7:2c:1f:19:d2:8f:ea:52:e3:40:12:99:49:45:6d:
         42:21:7c:f7:ef:6b:08:20:af:2c:78:01:0d:c0:c0:04:f2:1b:
         35:e7:27:10:ab:a4:fc:96:3d:0e:c9:06:02:ce:32:fa:9e:8b:
         30:c5:28:0b:da:3f:f5:aa:1f:b0:c5:a9:07:8e:52:8c:97:9f:
         aa:64:bd:df:dd:53:68:0e:05:c9:38:84:e7:d8:a2:47:29:f8:
         03:b6:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:44:12 2026 by rpki-client