Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File:                     Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier:          uyKQC8zmVN5Vj4ZUoe9cLnojdQ9004ZsNnkevMBDI94=
Subject key identifier:   4B:D5:9D:58:BB:85:2F:24:A0:34:B5:EA:04:2D:1A:AE:16:7E:B1:FC
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer:       /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial:       019D37C00213D53F9A48B7085536B525690D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number:          181E
Signing time:             Sun 29 Mar 2026 04:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:23 +0000
Files and hashes:         1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: YJmovwawcq7n0XvqA0AzrgeJ/1RNsmOdilScvuFLK/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:02:13:d5:3f:9a:48:b7:08:55:36:b5:25:69:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
        Validity
            Not Before: Mar 29 04:00:23 2026 GMT
            Not After : Mar 30 04:00:23 2026 GMT
        Subject: CN=4bd59d58bb852f24a034b5ea042d1aae167eb1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:3f:1f:0b:da:e5:db:ea:92:9e:db:25:64:
                    4d:2c:6a:93:1a:62:23:e1:1c:4e:a8:54:32:92:74:
                    8d:81:f8:4e:d4:19:3f:c0:85:c1:5c:af:bc:ce:9b:
                    db:ad:fc:78:9d:cb:5e:5a:75:37:c7:b5:a9:5c:02:
                    3d:45:b5:b5:bd:58:29:ab:5f:7b:5f:71:60:0d:d9:
                    63:b4:64:4b:2f:fe:81:e3:e8:78:a5:dd:1f:2e:8a:
                    57:51:84:7e:ef:c1:66:e0:33:a5:15:aa:3a:b7:fe:
                    8d:8b:08:ac:e8:dd:1d:ac:16:c8:19:4d:1b:0b:bb:
                    20:2b:8e:09:eb:bb:e7:f1:77:bd:0c:50:39:db:6c:
                    06:32:f2:09:47:41:a0:46:6d:f4:cc:53:5e:9b:7f:
                    37:34:50:e6:3e:1f:05:b8:ac:7a:e1:65:75:a8:78:
                    7a:cb:cd:50:3d:24:8a:c5:5e:32:0a:01:39:e5:c0:
                    f9:bf:0a:7c:d2:7f:2c:45:ee:0c:99:00:81:5e:c6:
                    19:5f:63:98:2c:55:4b:05:d6:76:d2:5a:25:92:e6:
                    16:41:b4:80:a4:34:64:ed:50:7a:c9:71:f9:d0:9d:
                    a0:72:63:3b:d5:86:dd:b5:f8:ed:4c:e9:ba:f9:b1:
                    ef:93:ed:51:78:25:17:34:eb:87:8b:9e:54:29:9d:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:9D:58:BB:85:2F:24:A0:34:B5:EA:04:2D:1A:AE:16:7E:B1:FC
            X509v3 Authority Key Identifier:
                keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:67:1b:ff:e8:8f:53:8f:27:4b:66:f5:84:03:21:25:69:4d:
         ff:d1:a7:2e:68:25:fd:dc:73:bb:f3:30:48:cc:19:a6:55:1b:
         b7:ef:6a:56:ac:c7:68:70:80:f6:ee:2a:5a:9e:7c:4e:0d:8c:
         c8:ba:0a:43:71:bf:c8:9c:49:ea:73:db:c5:7e:a4:22:b7:17:
         a4:31:03:24:f1:c8:67:69:95:58:12:a5:50:74:fc:eb:3b:a5:
         26:62:49:67:86:51:c5:a6:cc:69:b5:d7:d6:ca:ad:28:aa:26:
         0d:4d:f1:a3:12:eb:00:8a:99:dd:6d:35:b9:27:b6:29:1e:e9:
         80:5b:0f:ca:1d:3b:bb:64:b5:d2:37:28:7b:4b:54:3d:46:bb:
         57:3e:a7:eb:a5:71:c3:a0:b3:55:7b:9c:c3:44:de:11:3d:56:
         2c:3e:1e:a7:38:66:79:d0:76:66:8b:1d:fa:55:8b:a2:4e:29:
         b5:f5:0b:a5:14:2a:3f:98:1d:63:46:5f:0d:78:1d:4b:49:39:
         61:5a:65:c7:70:6e:e5:79:13:fa:04:a5:25:ad:8b:2a:d2:5b:
         d0:75:1b:83:0c:35:c3:9a:e8:53:d8:3c:6c:cd:92:d9:e2:0e:
         23:1f:1c:ef:3e:bc:b0:7c:dd:9c:33:bb:40:8c:60:b4:27:36:
         68:62:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:20 2026 by rpki-client