Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File:                     yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier:          V8/hFQieVt7zTGFSNG+VleXqy+4nyzMxF2jhe/hCD8I=
Subject key identifier:   15:31:33:6D:CA:C4:4D:ED:2B:AD:49:46:5E:49:BC:E9:4D:03:2F:FC
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer:       /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial:       019D3865E35775F4EE2F8CDEA1C14B54D11B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number:          181D
Signing time:             Sun 29 Mar 2026 07:01:34 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:34 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:34 +0000
Files and hashes:         1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: t8Id3uPo6ryigoY3iVJ0tw4YSSNDj9JFHKXL+4vcOF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:e3:57:75:f4:ee:2f:8c:de:a1:c1:4b:54:d1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
        Validity
            Not Before: Mar 29 07:01:34 2026 GMT
            Not After : Mar 30 07:01:34 2026 GMT
        Subject: CN=1531336dcac44ded2bad49465e49bce94d032ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:42:da:e3:19:e4:fb:e2:a1:46:03:20:bc:
                    24:b9:8b:c2:71:8e:73:4d:dd:71:00:f4:ed:82:71:
                    83:16:d4:d7:06:94:97:68:2e:90:ac:2c:bb:90:ac:
                    fb:83:75:e0:c1:67:95:59:81:e1:ee:12:b5:53:d5:
                    1f:16:22:44:47:e0:70:d8:b9:76:ce:fe:b8:a2:6b:
                    a2:4c:e6:84:91:3a:53:2f:6f:b2:dd:87:ff:fd:56:
                    6e:9a:1e:6c:4a:e5:3d:9e:2e:5e:99:66:c0:99:41:
                    ea:aa:27:81:56:63:22:a6:f5:21:ae:cc:34:a9:ab:
                    82:77:a1:96:b2:0c:86:75:b5:39:70:37:56:78:df:
                    d5:ce:5c:7b:54:a4:28:32:1c:44:f4:51:30:f1:47:
                    e2:b0:a1:ad:5f:38:2c:8a:71:de:d8:c4:2f:3e:cd:
                    ae:fb:a6:65:d9:c4:dd:8d:1b:ee:46:62:a9:9c:36:
                    73:a5:19:44:4e:d1:7d:51:5a:ec:4b:d6:df:30:83:
                    28:b1:2c:59:ad:1f:30:bc:b5:e1:f8:5b:91:d0:9a:
                    11:bf:81:b2:d7:45:ef:06:17:e9:77:23:1b:67:52:
                    88:f6:5c:83:52:7d:12:2c:4c:e3:fd:2d:a5:fb:63:
                    7c:29:32:aa:71:b9:b2:c3:e1:62:ac:30:da:42:cf:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:33:6D:CA:C4:4D:ED:2B:AD:49:46:5E:49:BC:E9:4D:03:2F:FC
            X509v3 Authority Key Identifier:
                keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:6f:2b:dc:dd:32:d0:06:7c:f4:f4:21:3e:43:86:c9:40:
         88:de:45:83:4f:d1:07:2b:56:09:5b:b3:00:3b:12:60:f0:55:
         3d:5b:81:3c:c8:c9:b5:7f:86:90:1e:6e:1d:d8:97:83:13:58:
         6f:92:3f:53:4e:c6:ce:60:eb:85:ac:7a:e0:6f:0f:c9:61:0d:
         5b:e0:45:cd:40:08:8a:4e:cc:78:5f:89:3a:15:4d:a2:15:b8:
         1e:02:41:4e:14:d4:6f:0c:d9:2e:22:00:e9:38:c6:9c:63:65:
         5f:f8:30:93:fd:5e:dc:46:c4:fb:05:58:42:f5:58:fa:bd:66:
         2b:1c:30:e8:3f:12:40:bc:c4:bf:da:f2:f1:65:22:57:de:7e:
         0f:ec:b4:eb:71:f8:0a:e9:d0:d4:eb:e3:02:47:2a:ea:f8:73:
         08:d9:44:f4:90:9f:f9:2b:ba:f0:f9:20:de:ad:77:5e:88:04:
         4d:5d:d0:95:34:e6:b7:51:dd:b9:89:d1:7e:b0:1d:11:c9:4f:
         bb:3b:d6:55:0e:07:7e:19:f7:a8:fe:1a:f9:c1:8e:06:c4:af:
         98:e8:c3:b3:c8:33:9e:1b:93:be:af:d1:1c:a7:40:53:35:56:
         5f:eb:1c:64:f4:61:0d:3e:4a:d1:0c:09:98:52:71:e3:e9:1f:
         79:8c:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:39 2026 by rpki-client