Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File:                     YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier:          MPUyNCvdDIjZkyu+3tB26SQfopRFlU5PnQQduc49vbM=
Subject key identifier:   23:24:11:23:59:56:72:05:5A:0A:58:5B:D7:5C:38:46:19:CB:02:DD
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer:       /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial:       019CAB6AF3B816F9B7A5C2345F3020118F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number:          14C3
Signing time:             Sun 01 Mar 2026 22:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:39 +0000
Files and hashes:         1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: hLPcs0ncVwHZc6vwWUNxOU2yXEKvI3F0F8+Vkk3487Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f3:b8:16:f9:b7:a5:c2:34:5f:30:20:11:8f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
        Validity
            Not Before: Mar  1 22:00:39 2026 GMT
            Not After : Mar  2 22:00:39 2026 GMT
        Subject: CN=23241123595672055a0a585bd75c384619cb02dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:fb:65:56:e1:52:f8:bd:2a:12:87:5b:85:
                    c3:87:bb:af:86:4d:d4:41:44:a4:bd:a4:3b:b1:ec:
                    4d:76:14:7b:6c:d4:f1:ff:bb:e0:a3:70:ad:c1:6f:
                    a6:8e:fb:ef:48:92:e2:db:93:e6:2f:7d:a7:50:68:
                    06:4f:fc:45:97:0b:88:55:08:64:15:b7:2c:b9:68:
                    d7:be:f2:e3:d1:ff:22:a1:ec:2d:3b:b7:c0:99:31:
                    fb:a5:e2:aa:8c:c4:b5:3a:bd:d0:87:23:d4:c0:41:
                    18:da:4e:e5:da:f2:e1:62:fc:fa:84:44:e2:1e:bc:
                    61:f2:5e:ae:28:0d:44:64:ec:28:c8:05:50:dc:3a:
                    95:d5:0d:e6:00:5f:3b:fe:c8:eb:b6:50:cd:71:03:
                    0d:d3:9a:f2:52:d4:b6:7f:60:03:36:8e:1c:1f:c9:
                    1f:4d:0e:1c:de:d8:45:1d:11:d6:43:4f:95:11:e5:
                    69:3f:9d:cd:0a:66:d3:26:0e:af:1e:47:22:5f:84:
                    c3:5a:13:60:72:bb:67:6a:97:d3:23:fb:73:25:93:
                    f9:f2:d1:29:cb:0c:df:f2:0c:3c:37:5b:64:bc:2b:
                    84:c4:df:c4:10:58:16:7d:f6:28:92:e4:2e:65:c7:
                    47:75:17:37:83:e4:62:af:e0:f9:89:80:c6:35:0c:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:11:23:59:56:72:05:5A:0A:58:5B:D7:5C:38:46:19:CB:02:DD
            X509v3 Authority Key Identifier:
                keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:52:35:5c:03:b7:93:08:45:2b:3b:b4:33:cd:36:0b:bd:f6:
         4a:ea:1f:05:53:bf:da:9c:1f:16:6d:a1:86:2c:94:ae:0a:05:
         e4:b8:99:11:16:63:22:82:84:fb:48:bc:af:72:b2:4a:d3:20:
         bb:a6:44:d3:77:aa:cd:8e:6a:71:76:3f:9c:af:a6:62:2d:10:
         9f:4c:df:69:fc:95:82:fb:fb:51:16:2e:1b:d9:35:52:18:0a:
         ae:c8:3f:24:31:3b:33:2e:96:8e:3a:a8:99:0c:a5:1e:02:8b:
         dd:2c:02:77:80:ed:f3:14:1a:90:35:0e:96:43:4b:83:ad:fe:
         51:57:5d:d8:5e:f7:61:c2:07:19:59:3f:2a:e4:f1:2d:7d:ff:
         27:36:9a:15:39:a0:f7:77:a4:e1:91:78:0e:f9:f6:cf:c6:a5:
         33:c3:3e:3e:bd:07:b8:e2:95:51:75:80:69:b7:c4:eb:e2:bd:
         48:dc:3d:a7:da:c0:6e:05:aa:67:0d:5b:62:a7:ed:96:9a:37:
         74:5a:b1:47:0e:0a:28:de:73:47:60:b7:25:4e:f3:70:1c:0b:
         1a:46:35:aa:26:c8:03:e7:b0:97:67:51:1b:d2:31:ff:75:10:
         20:f6:3c:c7:1b:f3:40:ac:38:00:68:ba:d4:91:a7:ca:62:08:
         43:07:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:59 2026 by rpki-client