Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File:                     yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier:          eXPbkWLR0rM553F/JZy/Oa4n6mhoHvkVtHWCl1KJgOw=
Subject key identifier:   40:A0:08:95:D8:DD:7F:DA:4B:7B:8A:19:CA:DE:DE:2E:36:17:18:D2
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer:       /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial:       019CAA58C0207733A02A5A44D51365D4EA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number:          092A
Signing time:             Sun 01 Mar 2026 17:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:08 +0000
Files and hashes:         1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: DyVr2s+oO3Ez1sx8ulme7FVLVQQo6xp/OT1VHZXheus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:c0:20:77:33:a0:2a:5a:44:d5:13:65:d4:ea:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
        Validity
            Not Before: Mar  1 17:01:08 2026 GMT
            Not After : Mar  2 17:01:08 2026 GMT
        Subject: CN=40a00895d8dd7fda4b7b8a19cadede2e361718d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:15:f4:e5:59:65:02:57:b8:1a:32:44:c3:
                    62:35:27:35:4c:a7:63:76:d4:57:4f:d0:3e:fa:f5:
                    f9:08:11:a8:51:79:ea:69:56:94:9c:9a:ca:7a:ff:
                    b4:87:12:7d:6f:85:9b:f2:d3:cc:d0:e2:66:1b:40:
                    01:6b:c0:e9:74:67:4e:ac:81:9c:1a:bd:fe:f8:5d:
                    f1:c7:b1:cf:e9:2f:c0:7d:c7:a8:af:c0:8e:30:b9:
                    f2:99:0d:63:25:6f:76:8a:20:99:15:f6:87:ef:60:
                    6d:35:6b:cb:b9:4b:4c:3b:11:5d:49:b9:1c:a6:4e:
                    d7:e8:09:d2:08:0d:39:d4:b1:ba:d8:5c:f3:60:a6:
                    b5:18:ec:87:fd:76:2e:16:4f:0e:ee:79:9c:68:d4:
                    5a:a4:1f:15:5d:d2:2d:41:29:6d:03:76:92:74:23:
                    aa:15:3f:2b:3b:95:13:82:46:20:b2:b6:39:75:4c:
                    09:5d:9c:d1:81:00:43:a0:ab:ff:bf:9b:0c:d7:a7:
                    fb:1e:4e:0e:1a:c7:65:3f:b9:5d:f5:a2:76:c4:6f:
                    63:ea:43:b1:12:22:04:4c:0b:46:69:fd:3e:01:a5:
                    76:41:c5:2b:44:64:5f:bd:d9:1e:df:94:92:84:d8:
                    5a:24:52:8d:b1:90:b8:94:2e:00:10:e2:d1:47:ab:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A0:08:95:D8:DD:7F:DA:4B:7B:8A:19:CA:DE:DE:2E:36:17:18:D2
            X509v3 Authority Key Identifier:
                keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d7:18:15:8d:a4:2b:15:b7:df:8e:36:25:d4:41:5a:e4:a0:
         8f:7c:33:e2:e7:5c:d2:19:86:f9:bf:53:5d:f3:6c:70:1c:b9:
         a9:27:00:cf:30:2b:20:d2:76:56:10:76:a4:0d:76:30:34:e4:
         c1:a6:9a:e8:3b:32:89:45:6f:f6:4d:9c:ee:f8:1d:fa:f2:2e:
         5d:b7:64:12:2e:44:6f:f5:29:f4:9d:73:3f:25:e9:ed:2d:58:
         74:e5:3a:e5:0a:19:d2:21:00:af:1a:e6:79:86:e4:a7:86:02:
         81:c6:a9:d3:a7:f4:07:03:02:42:9b:ee:7e:16:0f:62:c8:58:
         54:40:4d:d2:38:af:16:13:d6:17:75:87:a0:27:35:b8:98:f9:
         be:d0:b0:f1:8a:52:60:d7:c9:fd:d0:db:8f:53:97:3b:49:a7:
         22:41:6c:2c:d3:1b:db:ae:ef:39:8e:ec:54:3c:7f:e2:f2:ec:
         84:ef:60:7a:1f:22:24:c3:0c:f7:79:af:24:48:5f:b7:1e:b0:
         0f:58:73:bf:8e:1d:e2:de:6d:6f:38:98:bc:47:18:fc:fa:9f:
         e6:cc:0c:72:c0:8d:b1:c5:15:a1:6b:fd:40:e4:d2:0c:e5:ff:
         b3:a9:ea:6b:84:83:6f:7d:9f:0d:43:b4:ee:ae:ad:6e:6f:ef:
         6c:88:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:18 2026 by rpki-client