Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File:                     YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier:          C0iDx44fbzqR4wjjt7T0/xhCWoXDDeIUALTjSBO0PWI=
Subject key identifier:   F9:67:E3:35:A4:41:2A:C3:0B:66:37:87:89:58:79:BD:3B:74:A6:67
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer:       /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial:       019C97AD99B63A13628AEB486013909105A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number:          1B
Signing time:             Thu 26 Feb 2026 02:01:02 +0000
Manifest this update:     Thu 26 Feb 2026 02:01:02 +0000
Manifest next update:     Fri 27 Feb 2026 02:01:02 +0000
Files and hashes:         1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: e7GlaNLWZrf7z1C+5Yp2vwdDikToJc0WWBvTUD9UPoc=)
                          2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:97:ad:99:b6:3a:13:62:8a:eb:48:60:13:90:91:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
        Validity
            Not Before: Feb 26 02:01:02 2026 GMT
            Not After : Feb 27 02:01:02 2026 GMT
        Subject: CN=f967e335a4412ac30b663787895879bd3b74a667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:23:7c:3c:1c:24:b8:a0:0c:a7:fd:25:1c:
                    00:39:5c:af:d0:21:fe:ca:93:ce:61:a9:5a:2a:0d:
                    85:29:88:01:ec:f8:f3:c2:13:1d:fe:25:07:67:39:
                    16:67:db:25:4f:86:19:ac:08:e9:ed:fa:27:b7:fc:
                    32:ec:b4:e3:88:1c:23:90:ba:b5:70:55:77:03:68:
                    34:b7:f4:ac:e2:e7:40:06:9d:91:cd:a9:ae:4c:e2:
                    e5:86:45:82:34:2d:09:55:68:41:cc:d3:61:26:4e:
                    65:f9:5a:61:6e:53:8d:87:76:0a:a0:d0:fd:8f:92:
                    e4:5a:45:aa:e6:e3:df:a9:41:7a:ea:e4:4e:d4:57:
                    ac:79:99:13:54:26:86:65:57:ee:d1:ba:50:61:6b:
                    ee:6b:90:43:fb:de:a2:1d:40:e1:01:6f:c2:2f:d7:
                    62:7b:2a:3f:0d:22:8f:be:4a:0e:4b:8e:0a:2c:f6:
                    a3:a0:69:dc:50:ea:fb:50:c2:40:3c:07:a2:9d:f9:
                    0f:44:65:0e:bb:4b:c6:f7:62:82:5a:08:1e:d2:6b:
                    1f:26:a9:54:30:e8:10:ae:ad:50:b1:ea:bc:8a:84:
                    86:54:9a:ee:f5:c3:a2:42:dd:8f:ea:d2:13:e5:0b:
                    26:7b:38:a1:14:d7:ef:d5:47:b7:7b:98:2e:c1:f3:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:E3:35:A4:41:2A:C3:0B:66:37:87:89:58:79:BD:3B:74:A6:67
            X509v3 Authority Key Identifier:
                keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:14:62:ff:75:5f:c4:df:bd:84:1c:07:97:5c:7d:06:f3:7b:
         b7:6a:f0:24:94:43:3d:ec:8e:af:05:3b:0e:d9:05:57:8f:1b:
         39:5e:af:ab:65:9d:87:b7:74:6a:15:50:2a:d2:b6:5b:64:af:
         85:3d:85:90:52:4f:f5:4d:83:38:e3:48:74:d0:4c:88:64:4d:
         35:bb:b3:5c:5b:33:1e:8d:f4:25:78:ac:9f:89:d7:7a:72:c1:
         aa:af:4d:52:b5:c3:89:5e:76:6b:0a:ed:3e:56:41:8b:0a:4f:
         a3:36:11:e2:17:e6:fe:30:78:21:73:85:f0:20:1e:28:e8:17:
         0b:4b:58:f4:43:9c:73:18:3c:32:b5:a6:47:e3:68:09:29:ac:
         a0:aa:2f:f6:08:f9:cd:dc:3a:00:a4:45:68:e1:1a:8b:45:6e:
         19:69:7c:5b:20:0f:08:fd:84:a8:7c:f5:79:d7:fa:7e:fa:df:
         30:50:66:44:d9:4a:dd:c6:5d:10:3f:9b:4c:14:f3:dc:34:93:
         fa:7f:a6:48:68:69:46:c6:85:a0:76:13:f2:34:11:fb:a9:cd:
         96:8a:42:24:72:65:ff:68:17:6f:10:ef:ff:58:00:68:bf:dc:
         83:1b:78:87:b1:02:5a:20:f4:8a:6e:2c:bc:07:5f:6d:f5:f8:
         35:01:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:08 2026 by rpki-client