Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File:                     ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier:          ZbCiSusgVeTMghdPlJAR4TalqoAC9tY8MdUVnTVDMVo=
Subject key identifier:   56:7B:40:5A:F2:BF:07:5F:EB:39:63:D7:CC:34:70:C0:6D:DD:25:D3
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer:       /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial:       019D9850127BB8B4E6A075DBFF789FA7B3E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number:          102E
Signing time:             Thu 16 Apr 2026 22:01:17 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:17 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:17 +0000
Files and hashes:         1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: 8L+RayOShN8w1Oub5ZWcfeyx7N7YjaZa+myVxh0847k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:12:7b:b8:b4:e6:a0:75:db:ff:78:9f:a7:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
        Validity
            Not Before: Apr 16 22:01:17 2026 GMT
            Not After : Apr 17 22:01:17 2026 GMT
        Subject: CN=567b405af2bf075feb3963d7cc3470c06ddd25d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:19:c3:9f:6c:33:ad:08:20:8a:cc:c0:6a:
                    6f:c5:17:f6:c0:62:b5:3c:9a:a3:98:ae:1a:48:23:
                    67:75:b5:df:99:0f:9c:9a:14:80:80:a3:0b:a3:e0:
                    8d:01:c5:8a:f3:b3:71:8b:d4:45:98:94:0a:33:32:
                    ea:6f:ec:00:fd:79:ab:2b:2f:f8:23:0e:da:1f:48:
                    fe:42:74:14:c4:34:51:88:4a:ab:88:b3:f9:fe:a5:
                    33:10:2c:f9:2f:43:c0:0d:8e:8c:ea:d2:4e:0e:8a:
                    f8:4c:9d:4f:33:83:0f:ad:bb:5c:5f:e2:7a:a2:13:
                    3d:e0:a6:c7:4f:fe:68:13:74:66:57:7f:b1:e3:53:
                    9b:30:3f:6b:98:ee:e8:bd:4b:ab:9e:32:23:21:3a:
                    d0:ae:78:bb:56:63:c4:63:ce:61:83:be:cd:73:0e:
                    8b:6f:49:68:6a:12:d6:f6:46:e1:10:64:d4:ec:ff:
                    4d:42:c7:1f:4d:23:de:06:a9:ae:90:13:07:44:1e:
                    e0:c0:f4:dd:33:b6:cf:bc:56:56:02:bb:f4:5a:84:
                    81:0d:5e:c1:a2:2e:cd:3e:53:ff:2f:8e:66:d1:91:
                    f1:58:ba:ee:20:4b:87:19:22:80:d1:c5:00:c1:21:
                    ad:d8:aa:39:8c:7a:ba:ea:0d:df:52:27:1f:1e:d8:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:40:5A:F2:BF:07:5F:EB:39:63:D7:CC:34:70:C0:6D:DD:25:D3
            X509v3 Authority Key Identifier:
                keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:80:e6:3d:96:c3:56:7f:69:be:68:9d:c7:c0:d5:b9:4a:
         64:94:b4:e5:ac:d9:f0:9e:4d:d0:a9:14:01:d0:16:29:1a:92:
         f8:fd:7e:90:fa:1f:0c:e1:1e:db:00:49:8d:49:fb:67:b8:b3:
         85:4f:bc:74:54:71:20:92:cd:35:34:ae:5b:41:d7:a5:5d:c4:
         41:c1:1a:45:84:24:21:14:7c:f6:9d:02:dd:be:dc:59:dc:a1:
         a6:e6:3b:19:8f:50:9a:32:3b:7c:17:9e:43:95:63:91:a5:b1:
         df:83:13:66:0c:f5:b9:1f:4d:f3:ba:b0:d8:7b:07:18:53:4f:
         60:3d:97:b4:7e:22:0f:df:23:a8:25:ac:10:00:aa:16:ea:f1:
         fd:68:f3:9f:95:42:88:06:1c:82:3f:c3:b3:25:5b:eb:48:93:
         48:eb:ab:fd:47:b5:df:59:5b:9a:cf:a3:d8:fd:f7:40:9e:4b:
         92:94:6e:73:b2:9a:b4:b7:f6:4b:22:e7:eb:40:89:74:53:05:
         af:52:fc:5a:d2:1e:8a:10:01:ce:62:fa:e7:ee:86:8b:49:5c:
         04:92:0d:a2:ed:d6:81:51:20:a3:ed:31:8c:56:9a:4f:65:0b:
         ef:d9:90:46:eb:ac:63:20:c5:38:13:db:ba:c1:3d:2c:c7:6d:
         4d:59:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:28 2026 by rpki-client