Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File:                     ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier:          yic4AJob7LmBi1UdaUdgu9G3ve/CjluSDfF5mW3+W/w=
Subject key identifier:   7A:DC:70:E4:20:AD:47:03:FA:F0:73:30:F8:20:01:25:54:9C:F6:38
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer:       /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial:       019D9A3EB248311EAF1EA81B27B14CC6D6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number:          0836
Signing time:             Fri 17 Apr 2026 07:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:33 +0000
Files and hashes:         1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: lFH7xCUGwOBeqQ3pWy/82U8P9K5XLWIcEDKIwzmRS+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b2:48:31:1e:af:1e:a8:1b:27:b1:4c:c6:d6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
        Validity
            Not Before: Apr 17 07:01:33 2026 GMT
            Not After : Apr 18 07:01:33 2026 GMT
        Subject: CN=7adc70e420ad4703faf07330f8200125549cf638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:13:a2:a1:2b:d2:85:8c:00:63:df:66:33:
                    20:74:ba:dd:c7:f6:33:80:c7:1d:c1:cc:ff:c4:cc:
                    e6:e4:dd:a8:24:fa:18:bd:42:c2:4a:79:6a:b9:07:
                    73:19:cc:2a:35:ce:b2:1e:28:d2:37:eb:23:39:8b:
                    ed:78:17:b4:88:06:97:36:fc:ea:d2:96:57:c7:11:
                    6e:00:33:94:02:78:d0:06:a7:b1:18:45:11:b2:ee:
                    b3:20:58:cc:03:26:fc:07:f5:1d:59:dd:35:ec:d0:
                    37:0e:90:5a:1f:c6:a2:49:f7:c9:40:af:ce:ad:39:
                    4a:22:11:bf:79:78:88:c0:42:c7:cc:44:17:47:86:
                    c4:18:36:ab:e5:2f:79:63:06:ee:b1:bc:32:4e:51:
                    15:7c:7b:75:ea:e5:91:08:4e:9d:9f:07:82:70:eb:
                    4a:c5:7d:f2:7a:b5:34:d8:1b:62:43:74:3b:e2:bb:
                    4d:97:24:0d:6d:6d:d3:f6:95:8d:f3:56:88:f6:af:
                    80:7b:6d:57:2c:1e:c3:68:1e:0e:c0:b8:3d:76:53:
                    37:b6:8b:11:15:f6:74:45:05:30:50:a4:f3:95:c1:
                    44:01:9a:e3:32:76:ea:95:30:70:f4:ee:68:86:31:
                    01:6f:52:1b:e4:11:ef:c3:b1:63:b9:cc:d3:37:16:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DC:70:E4:20:AD:47:03:FA:F0:73:30:F8:20:01:25:54:9C:F6:38
            X509v3 Authority Key Identifier:
                keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:8b:9e:b7:b4:87:24:9a:77:f4:7a:18:41:a6:98:d3:b0:
         89:d2:10:59:8a:60:a1:ec:b3:e1:dc:4f:cb:12:93:f2:cc:44:
         f2:35:e2:de:a9:90:6a:88:cb:0a:df:6e:e1:cd:3d:76:de:cb:
         86:84:bd:fb:d6:ff:c8:21:36:2a:02:66:e9:c4:04:65:f9:f1:
         f6:55:49:72:77:42:8b:51:51:74:12:03:98:3f:fb:f5:42:bb:
         07:3f:5d:28:0e:41:61:b8:da:1f:4b:da:a1:e0:28:e2:0c:91:
         c7:92:32:42:84:dd:44:97:ee:8e:86:06:fc:6e:c0:9f:37:5d:
         9f:64:37:71:dc:8f:0a:de:34:16:64:03:df:66:71:ac:ac:86:
         7b:80:fb:ab:57:ce:80:d5:7f:60:ad:39:34:b7:86:9a:52:59:
         05:89:56:e9:d9:4a:c2:da:94:9c:e0:71:56:47:8f:e2:1b:00:
         75:bd:1b:48:67:77:f4:fd:94:b1:da:de:ef:44:c1:fd:c5:02:
         40:ef:e3:5b:af:0d:db:84:e4:90:ee:22:f4:59:14:15:b9:3a:
         94:3a:79:e6:1f:e1:e5:07:c8:07:3e:87:04:d2:a5:06:30:44:
         76:f0:df:47:6e:56:12:3b:c1:d2:2e:91:b8:45:27:9f:26:1a:
         2d:76:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:48 2026 by rpki-client