Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File:                     yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier:          ftwrYXk739TQ0Ydd4FXBTVOdN0IbX6u9D2grkHMi1rU=
Subject key identifier:   E8:DF:77:5D:36:B9:46:0A:6C:DE:37:DB:EA:D4:C9:57:18:0F:77:B7
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer:       /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial:       019D99D0D8CC12246FDFA0D77F280B753C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number:          09A6
Signing time:             Fri 17 Apr 2026 05:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:34 +0000
Files and hashes:         1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: xkTqQZBacgy4k3Pu5yqdlkyi1hZhzm0D6jxKaH4Hzrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d8:cc:12:24:6f:df:a0:d7:7f:28:0b:75:3c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
        Validity
            Not Before: Apr 17 05:01:34 2026 GMT
            Not After : Apr 18 05:01:34 2026 GMT
        Subject: CN=e8df775d36b9460a6cde37dbead4c957180f77b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:b9:d3:a3:8b:cb:51:0e:36:67:2b:da:f1:
                    a2:fe:d2:12:1c:4b:22:68:47:96:e5:69:7e:93:25:
                    47:70:76:07:38:40:8d:fc:b9:b3:9b:e7:8c:7a:d6:
                    6c:32:eb:c7:4b:0c:2c:25:3f:38:63:28:2c:56:0a:
                    bf:5f:1b:fb:3c:88:1e:34:62:62:b7:c5:76:4f:c7:
                    50:dd:47:17:d6:70:e3:57:f5:25:82:5e:a0:90:db:
                    a8:8b:2a:8d:ff:04:9d:a7:8f:a5:fe:0a:da:e9:64:
                    1c:a7:51:b3:00:74:34:77:32:d8:83:c1:d1:5b:c0:
                    8a:db:42:6c:7c:fa:72:83:e4:8d:b4:0d:dd:10:19:
                    b9:fa:a3:f3:91:c1:77:e2:0b:4a:d8:3f:b5:7e:a5:
                    0d:ad:e4:1f:bb:3e:a0:93:c6:22:c8:77:aa:df:16:
                    7e:84:35:dc:f9:dc:d2:82:8f:38:19:56:ab:92:d6:
                    7b:b1:53:17:20:c7:1c:32:66:e8:dc:e4:31:1d:2b:
                    17:99:48:28:ab:c1:fa:07:f0:b8:03:54:9e:64:d3:
                    74:a4:dc:f4:7d:a6:a5:a5:90:c4:fc:09:88:ff:e7:
                    93:26:3f:ae:ae:74:ab:3d:fd:2d:06:65:ed:13:8d:
                    a1:44:ea:9f:36:24:09:91:c5:03:cc:ef:0c:97:be:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:77:5D:36:B9:46:0A:6C:DE:37:DB:EA:D4:C9:57:18:0F:77:B7
            X509v3 Authority Key Identifier:
                keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:85:4f:5a:6e:af:a8:f2:8c:10:96:e6:9f:d5:21:b1:54:42:
         60:98:54:3a:1d:6e:09:b0:28:71:55:54:05:a7:71:84:a3:b8:
         5e:17:82:8a:87:ec:2b:7c:59:84:09:ed:5f:23:6d:12:a1:7a:
         ee:5b:92:96:d2:a9:a3:6a:e6:69:75:c7:12:f2:cc:23:15:d3:
         9a:db:02:42:06:56:fd:02:d3:0c:99:8f:f9:15:61:fe:9c:94:
         a0:61:63:90:9e:bc:ad:bb:ce:90:d9:4a:e9:40:cd:53:20:52:
         70:9b:b0:6a:d9:c2:d1:92:b4:19:3a:34:88:a0:76:f3:05:da:
         37:3f:b0:31:6b:d3:b5:84:c6:d8:ad:03:fd:ae:be:66:08:54:
         72:1f:e6:9f:5d:c1:f9:de:5a:45:c0:47:52:37:f2:ac:fe:90:
         80:de:5b:55:5f:df:97:7d:78:a1:1f:44:ba:bc:11:00:50:48:
         c5:38:bb:4c:d2:e6:58:bc:b2:32:a7:a0:ed:4b:63:7f:b2:d9:
         3b:4b:7b:dc:54:e2:fc:78:de:56:22:84:79:69:ac:11:f5:08:
         7f:11:4f:c9:af:58:fb:bc:cf:eb:d9:82:58:5b:51:46:e5:6d:
         eb:bf:12:87:ac:f9:fd:61:f8:e9:63:36:8b:47:88:af:af:c1:
         f0:de:8a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NjMEiRv36DXfygLdTw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw
MjcxM2QwHhcNMjYwNDE3MDUwMTM0WhcNMjYwNDE4MDUwMTM0WjAzMTEwLwYDVQQD
EyhlOGRmNzc1ZDM2Yjk0NjBhNmNkZTM3ZGJlYWQ0Yzk1NzE4MGY3N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovm506OLy1EONmcr2vGi/tISHEsi
aEeW5Wl+kyVHcHYHOECN/Lmzm+eMetZsMuvHSwwsJT84YygsVgq/Xxv7PIgeNGJi
t8V2T8dQ3UcX1nDjV/Ulgl6gkNuoiyqN/wSdp4+l/gra6WQcp1GzAHQ0dzLYg8HR
W8CK20JsfPpyg+SNtA3dEBm5+qPzkcF34gtK2D+1fqUNreQfuz6gk8YiyHeq3xZ+
hDXc+dzSgo84GVarktZ7sVMXIMccMmbo3OQxHSsXmUgoq8H6B/C4A1SeZNN0pNz0
faalpZDE/AmI/+eTJj+urnSrPf0tBmXtE42hROqfNiQJkcUDzO8Ml74EXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjfd102uUYKbN432+rUyVcYD3e3MB8GA1UdIwQY
MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt
MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4
LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYVPWm6v
qPKMEJbmn9UhsVRCYJhUOh1uCbAocVVUBadxhKO4XheCiofsK3xZhAntXyNtEqF6
7luSltKpo2rmaXXHEvLMIxXTmtsCQgZW/QLTDJmP+RVh/pyUoGFjkJ68rbvOkNlK
6UDNUyBScJuwatnC0ZK0GTo0iKB28wXaNz+wMWvTtYTG2K0D/a6+ZghUch/mn13B
+d5aRcBHUjfyrP6QgN5bVV/fl314oR9EurwRAFBIxTi7TNLmWLyyMqeg7Utjf7LZ
O0t73FTi/HjeViKEeWmsEfUIfxFPya9Y+7zP69mCWFtRRuVt678Sh6z5/WH46WM2
i0eIr6/B8N6KIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:55 2026 by rpki-client