Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File:                     YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier:          bENsFbfN8l51jf1kN0maos9OGkvfU5Hqyu0jncQ9mBU=
Subject key identifier:   91:D6:2F:17:2E:D3:3E:5B:DC:C8:22:60:D6:7B:0B:CF:AD:38:F8:97
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer:       /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial:       019D3865DCB46BB45B710F974C0DA7E10862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number:          181F
Signing time:             Sun 29 Mar 2026 07:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:32 +0000
Files and hashes:         1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: cOM7OxVqOowhv42aIZBuXaV/MTt+CGvL7/8ck7pNdYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:dc:b4:6b:b4:5b:71:0f:97:4c:0d:a7:e1:08:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
        Validity
            Not Before: Mar 29 07:01:32 2026 GMT
            Not After : Mar 30 07:01:32 2026 GMT
        Subject: CN=91d62f172ed33e5bdcc82260d67b0bcfad38f897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:75:4c:f6:f7:b0:14:e2:be:33:27:c7:2f:
                    23:52:e4:11:d1:ec:b8:75:84:e1:3c:9b:0b:ef:f9:
                    c8:77:4d:a4:61:91:ad:92:18:b5:74:26:d5:f3:28:
                    ad:ed:1c:aa:e0:b6:05:10:47:02:2f:2e:a9:dd:bd:
                    b1:bf:93:39:ab:bc:21:e6:94:46:4d:98:16:f7:0a:
                    1c:83:d0:21:04:c6:c4:a5:aa:dc:94:29:a6:32:32:
                    d2:8a:d2:f4:0d:90:a6:f9:02:86:a4:e6:06:ef:f6:
                    07:64:fc:92:2b:3c:76:cb:e8:75:bd:49:ac:b7:0a:
                    08:2c:33:e3:dc:a5:d8:84:70:b8:2d:8b:9c:bf:34:
                    3f:1a:49:93:4b:be:0d:02:bf:b0:9e:4a:ec:00:79:
                    33:2e:a9:05:ee:5e:ba:65:15:5b:d2:bd:c8:bf:16:
                    07:a8:d7:bb:28:d3:bd:ec:16:ae:b8:c1:0e:10:f3:
                    fb:fc:33:3c:3d:08:01:21:aa:d2:69:9c:92:ec:c9:
                    63:15:19:4c:60:f3:dd:2d:80:e3:38:38:9d:ef:96:
                    a9:a4:d6:cf:38:cd:93:ae:09:da:3b:53:6a:ee:5f:
                    73:ff:a3:33:44:f9:d4:49:03:93:34:11:8e:14:ff:
                    71:c2:20:36:3f:76:36:3d:dc:ca:91:16:35:6d:2e:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:2F:17:2E:D3:3E:5B:DC:C8:22:60:D6:7B:0B:CF:AD:38:F8:97
            X509v3 Authority Key Identifier:
                keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:f8:06:e7:40:b0:ca:e2:31:2b:f6:02:2d:c6:97:12:a6:
         b0:f3:fb:08:4b:b9:86:7e:77:0d:6c:f2:65:28:94:1f:25:51:
         f0:b9:d4:7c:bd:d6:32:5e:b2:ef:4f:4e:bd:e8:a5:f9:64:c1:
         31:f8:2d:c3:fe:27:86:e2:58:6a:e0:86:c2:6f:ba:21:68:01:
         7b:23:8c:b4:b9:34:0a:4f:48:1f:52:b5:8b:7b:c4:96:c7:64:
         e5:c5:e3:5d:f6:d9:37:bd:19:f9:6c:96:ba:b0:5c:2a:0d:cc:
         84:df:89:5b:95:65:20:75:28:86:7d:5a:44:39:50:84:1a:db:
         a7:6a:6c:b9:32:db:ab:12:3b:a5:f5:48:03:fd:e9:97:9e:2e:
         61:02:95:1a:dc:cf:c7:fd:02:50:5b:f8:14:ae:cf:05:6a:07:
         82:92:e3:20:e8:92:ac:6a:5d:59:e0:ab:4c:7f:1a:6d:af:a6:
         38:d4:7d:f9:25:3c:8f:29:bd:6b:fd:ca:2f:17:57:12:66:21:
         e3:68:11:36:1b:ca:4b:85:75:bc:bb:4f:eb:f1:2a:22:25:01:
         19:fe:65:06:65:76:c4:34:6d:0a:4c:7c:2b:85:ff:e3:d2:59:
         26:7d:80:fc:1d:ef:1b:ed:c6:b4:da:39:32:fe:a2:c5:7e:8f:
         25:79:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:47 2026 by rpki-client