Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File:                     yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier:          NSkoMBBOL+gIN68u0cAb031mh0diQT/Eq9wjtF9StOA=
Subject key identifier:   80:23:01:09:68:A6:01:EB:DE:9A:DE:A1:02:18:CC:CF:2D:4C:91:41
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer:       /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial:       019D999911ABE6FFAD72BE68CE71B93279AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number:          0FB5
Signing time:             Fri 17 Apr 2026 04:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:38 +0000
Files and hashes:         1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: UZrjk6qdLSw7ZhIl/Log8/K7u6+w9yuKouAUbd+yugA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:11:ab:e6:ff:ad:72:be:68:ce:71:b9:32:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
        Validity
            Not Before: Apr 17 04:00:38 2026 GMT
            Not After : Apr 18 04:00:38 2026 GMT
        Subject: CN=8023010968a601ebde9adea10218cccf2d4c9141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:e7:a6:59:ec:5f:92:62:2c:54:4d:da:50:
                    ea:56:12:9a:f8:d8:f9:86:f9:e1:02:74:93:0c:0e:
                    b3:9f:b6:2d:c2:85:c3:2b:9d:eb:54:73:aa:40:d7:
                    45:60:a1:a2:75:a4:d5:b1:47:07:c4:ec:8b:f2:f3:
                    62:70:25:b3:83:f6:97:a6:e1:bd:22:a2:33:34:69:
                    30:f7:9d:72:4f:77:8b:08:06:5d:c1:ab:5f:60:7c:
                    af:f9:fb:f3:a9:ca:15:f8:dd:8c:93:c6:70:66:9d:
                    19:7b:03:75:2c:4e:88:ca:bb:34:9d:6e:79:ab:ca:
                    16:90:c1:17:b4:ed:7f:c6:d4:d7:c7:25:bb:0d:22:
                    82:04:66:ad:fc:38:67:70:e6:e9:86:c9:9b:7b:f9:
                    9a:07:62:40:45:e1:92:80:f8:30:08:76:24:ea:91:
                    a1:6f:aa:bc:1d:25:9b:2c:f6:29:73:51:81:2d:aa:
                    10:72:fb:34:e8:58:1e:46:3d:3d:37:fa:49:d9:3d:
                    e3:42:63:cc:c5:9c:44:d3:c6:89:2a:0e:f4:69:a4:
                    1d:44:85:9e:15:dc:c2:11:bb:df:75:7b:8d:d3:76:
                    ab:83:01:36:96:44:e9:1d:45:62:3c:16:e0:df:2e:
                    f2:78:e3:71:80:4c:42:91:ca:be:4b:e1:7a:08:33:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:01:09:68:A6:01:EB:DE:9A:DE:A1:02:18:CC:CF:2D:4C:91:41
            X509v3 Authority Key Identifier:
                keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:ba:7b:17:88:14:48:8d:3a:9e:f3:b4:d0:17:e9:2a:7e:
         4c:1b:79:47:b7:b5:e0:c4:5d:25:ca:77:c7:f3:63:2c:33:10:
         eb:aa:3b:f0:31:16:db:93:6c:98:a9:6a:37:e7:ef:2b:83:35:
         9d:de:38:9b:0f:d7:fc:18:11:ff:d6:7f:8d:f0:32:19:72:c4:
         d3:1f:79:1b:2a:8c:46:28:ba:07:55:ae:07:fa:46:3c:94:03:
         b1:03:ec:0a:b7:f7:95:77:f7:f1:3c:f4:05:86:45:f1:5c:73:
         56:bf:90:f1:a8:03:59:82:4c:9e:d6:c5:6f:6b:30:3c:c6:93:
         f2:83:dc:03:f4:86:05:95:78:cf:23:fa:cf:a7:d0:c2:90:c3:
         e1:45:f8:39:fa:78:3f:68:bb:63:2b:72:12:da:23:9b:ba:fc:
         77:7e:cc:ff:a8:97:f8:ea:63:f5:79:e3:e6:01:af:8e:16:5f:
         c5:7a:47:6e:fa:b9:e1:d5:66:9b:52:d1:63:3a:b8:99:c9:cc:
         31:a1:99:50:ad:d2:1c:98:39:57:40:f2:a0:e4:23:da:09:3d:
         8b:1d:fd:4e:3e:79:cc:06:ff:1c:4e:56:bd:83:d0:90:08:ba:
         00:92:4d:03:12:15:ec:a3:e1:81:67:c8:d9:f9:24:32:cd:32:
         a8:2c:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:27 2026 by rpki-client