Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File:                     ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier:          cjxYvXtF11XnRuwj4fE1UIJ9jGGoDwOhVYfAGYs+BH4=
Subject key identifier:   D9:3A:E9:4E:C7:F4:72:15:22:45:FF:3F:96:FE:62:5E:D6:10:6A:03
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer:       /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial:       019CAD5A560CE2EA2D33A47F001A588F167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number:          04EB
Signing time:             Mon 02 Mar 2026 07:01:44 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:44 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:44 +0000
Files and hashes:         1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: +Vu1TasSApqZcexlxQV1NIWYm7LHgHmkgHIYjwqG8w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:56:0c:e2:ea:2d:33:a4:7f:00:1a:58:8f:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
        Validity
            Not Before: Mar  2 07:01:44 2026 GMT
            Not After : Mar  3 07:01:44 2026 GMT
        Subject: CN=d93ae94ec7f472152245ff3f96fe625ed6106a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ba:eb:fa:8f:ad:9c:80:ed:f1:29:56:42:7f:
                    75:01:46:0a:3a:42:38:7f:35:95:21:ca:2f:a2:0a:
                    5b:e8:8b:e7:12:e2:3f:8b:99:d8:80:d9:de:b5:00:
                    ba:61:c6:fa:10:a2:c0:40:55:26:66:35:26:ff:d5:
                    b5:aa:9f:2d:a5:49:c4:ca:77:06:19:e4:cc:a2:ab:
                    1c:bd:d1:27:d2:87:f5:f0:a6:45:8c:7e:4a:cd:f1:
                    cf:66:06:84:35:c8:ea:a2:42:2f:5f:f4:3e:97:3d:
                    a6:ab:36:d4:21:3d:bd:ed:83:3e:3a:8c:52:60:08:
                    d0:c7:2e:4c:60:a2:c7:40:77:d0:a2:1f:78:d7:1f:
                    0a:6e:23:90:96:d1:2c:c5:29:d1:62:f8:71:ea:8a:
                    cb:1a:fd:48:89:75:06:dc:d1:bb:d2:aa:6e:a6:ba:
                    12:25:fd:50:58:dc:cf:d4:b7:a5:21:07:9d:58:fc:
                    09:dc:75:70:e9:e8:12:cc:13:53:50:a6:4b:67:d1:
                    56:04:67:92:dd:80:c7:5c:ad:e5:49:d1:bc:15:c6:
                    62:00:48:c5:05:b0:b8:7e:22:ed:b8:ad:5c:9e:02:
                    a9:ad:02:f0:d3:34:27:aa:4a:47:fd:2c:45:20:06:
                    1c:a8:e0:81:81:f4:08:8d:8a:ec:c6:15:fd:19:7a:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:E9:4E:C7:F4:72:15:22:45:FF:3F:96:FE:62:5E:D6:10:6A:03
            X509v3 Authority Key Identifier:
                keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:0f:04:1b:a4:ed:7e:7e:39:41:8c:15:0b:5e:d4:c8:58:
         8b:4a:05:96:0a:d6:f9:9d:c4:4c:b0:47:48:6f:9e:a7:c8:c5:
         c0:16:b9:de:6b:8e:43:51:38:59:e8:4e:c3:83:0c:63:b1:45:
         a5:89:26:9e:7c:0b:11:1b:f6:72:9d:c1:cc:66:e1:bc:1d:de:
         d4:b6:20:80:58:fd:40:2b:72:83:0a:f1:39:53:fc:0f:59:fe:
         95:5d:9e:ef:81:16:59:a4:dc:f1:5a:33:21:d7:06:57:7d:9b:
         31:80:a9:76:92:4c:d3:48:02:48:8a:73:3a:39:8f:f4:ee:ac:
         52:4f:12:82:9c:5b:3a:7a:c1:68:10:4c:93:24:ac:9c:8f:f4:
         30:a7:8a:9a:04:ab:54:4c:41:64:54:82:fb:b0:81:51:3e:10:
         67:bf:f6:a9:98:32:11:1c:a8:2e:54:12:70:4f:ad:a2:d7:a8:
         3b:0e:18:d4:20:14:fe:ec:09:eb:c2:c2:5a:5c:7b:5a:32:ce:
         11:8c:a8:99:1c:03:01:b6:68:64:27:cd:d2:ee:90:26:25:01:
         d5:ec:88:70:51:96:27:83:31:31:2c:2a:db:90:f9:b7:ff:53:
         7a:e3:cc:2b:14:d2:d1:b6:56:6c:2b:0a:31:9c:1c:52:7a:86:
         e3:ef:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:30 2026 by rpki-client