Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File:                     yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier:          PcBxPoaQlnsnyHH63dq7piGcu2hoB30L91AmsjD0KtQ=
Subject key identifier:   BA:81:91:38:43:37:A8:B9:48:A9:75:0E:1E:A5:B7:33:CF:0D:2B:3F
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer:       /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial:       019DCFE359858FF809BD1401879C1B9BB4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number:          08C6
Signing time:             Mon 27 Apr 2026 17:01:16 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:16 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:16 +0000
Files and hashes:         1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: Em/I2oEw0zLjNZtRoAwpifPcVyQ5LFCLOV5iOOhUo6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:59:85:8f:f8:09:bd:14:01:87:9c:1b:9b:b4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
        Validity
            Not Before: Apr 27 17:01:16 2026 GMT
            Not After : Apr 28 17:01:16 2026 GMT
        Subject: CN=ba8191384337a8b948a9750e1ea5b733cf0d2b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:8e:ce:6d:29:29:66:0c:72:a0:2a:e9:92:
                    0f:1c:c8:5e:45:95:dd:44:8d:e6:88:7f:c7:1e:fa:
                    d2:09:f6:3c:33:7a:dc:83:0e:58:07:88:28:bd:d2:
                    f6:c2:0a:8c:55:93:7f:5d:ad:52:c9:a5:0d:c0:96:
                    80:b0:aa:d6:f3:2a:35:03:bd:b4:ce:c3:a4:4b:0a:
                    5d:98:29:26:b2:3e:ec:0f:65:2e:45:42:5e:79:10:
                    a6:37:a8:23:11:3c:4f:d2:58:7b:23:73:8f:8f:65:
                    2b:ba:86:1f:58:2e:87:4e:13:ed:6b:5a:15:7a:a4:
                    4c:c0:a0:06:03:39:f8:2b:97:7e:00:e0:c1:25:3c:
                    b2:2b:be:63:58:eb:00:cd:9f:6e:0f:04:02:d9:47:
                    40:fb:0b:31:73:e6:a7:65:88:d9:84:eb:18:41:c1:
                    9d:17:2b:19:6d:ef:80:60:90:47:7e:21:36:94:41:
                    dc:b5:51:3b:28:cb:3d:74:26:5b:4a:4a:d1:62:11:
                    89:91:2b:57:96:e5:a5:bf:8f:35:be:19:e2:8d:f2:
                    5a:3a:41:1d:b4:9b:41:d6:d9:8f:4e:14:07:f4:b2:
                    e9:43:81:80:98:75:eb:e9:05:e7:cc:9d:8c:b4:9c:
                    fc:e5:4c:41:b5:31:dc:96:4d:ba:f1:e9:65:07:9a:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:91:38:43:37:A8:B9:48:A9:75:0E:1E:A5:B7:33:CF:0D:2B:3F
            X509v3 Authority Key Identifier:
                keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b4:7c:f9:73:bd:06:b1:4f:4b:e2:67:cf:9b:c0:ca:44:d8:
         30:af:37:2d:84:64:8f:e6:8f:b0:f3:88:23:52:5c:2e:1f:c3:
         c9:55:81:d3:90:8a:f9:86:40:a8:0c:ec:d9:56:20:9d:9f:42:
         7c:e1:35:57:b3:c2:13:68:3e:26:71:ae:fd:af:c3:fc:38:76:
         b1:59:7f:e1:ca:a9:cf:93:da:b2:70:62:cf:fa:e0:b6:61:e2:
         f8:5a:fa:70:f1:5d:de:fc:aa:d3:60:8d:03:e9:30:f3:64:ce:
         d5:05:65:01:54:5e:d8:06:94:c2:9f:29:e0:d4:aa:6d:da:27:
         fc:cc:3b:f7:1e:a1:60:94:c3:80:c3:6e:04:a3:3b:36:13:17:
         ce:56:36:37:5d:57:6d:41:4c:d8:94:01:24:e6:8e:57:32:98:
         76:84:c3:78:ae:b6:1c:58:27:2b:57:2f:a6:5a:e4:99:8a:fe:
         26:36:50:8c:ee:cb:15:66:73:61:59:41:92:ca:1c:d4:5d:95:
         53:22:b1:20:9e:e8:2d:3b:6b:28:68:11:cc:19:71:69:4d:46:
         3d:2c:4a:eb:d3:df:f6:e4:65:1b:50:be:89:27:06:b2:0b:6f:
         54:70:38:44:5e:73:37:88:f4:52:20:1f:3a:6d:e6:b9:f7:aa:
         56:62:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----