Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File:                     SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier:          5bo8ZlVZN4FRCSGGxAvpafVOTnqPZFaBB/XULiGdYlU=
Subject key identifier:   6C:22:30:69:B9:09:BD:96:CF:BA:1A:FA:B8:A6:FD:1D:78:7A:25:90
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer:       /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial:       019CABD9C90D10D6758B09A93E289C46BE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number:          0F26
Signing time:             Mon 02 Mar 2026 00:01:42 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:42 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:42 +0000
Files and hashes:         1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: 4ZU978msTSK9aW1We+9VUqE7582RBuz5YuM2zduYlyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:c9:0d:10:d6:75:8b:09:a9:3e:28:9c:46:be:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
        Validity
            Not Before: Mar  2 00:01:42 2026 GMT
            Not After : Mar  3 00:01:42 2026 GMT
        Subject: CN=6c223069b909bd96cfba1afab8a6fd1d787a2590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:70:69:cf:a3:d1:19:8b:76:c7:c1:3c:7a:
                    75:87:cd:82:e4:d5:ac:82:e8:20:26:27:03:34:7a:
                    01:2b:90:f9:ce:c6:df:1f:26:c8:e9:35:9d:21:09:
                    2e:88:e6:ba:b8:b2:31:21:22:80:c4:a2:a5:45:bb:
                    77:8d:c4:cd:15:fa:bc:2a:32:e6:6f:6a:40:c7:f1:
                    88:54:c0:13:ac:cf:ea:26:db:78:64:7a:26:74:42:
                    e0:01:ff:b3:c0:a8:67:25:a6:68:35:b9:b6:57:f4:
                    83:08:68:69:50:d2:b4:f7:da:51:c1:1e:5a:c2:78:
                    a3:ed:d3:db:7c:bb:f1:30:51:62:0d:0b:14:2e:16:
                    32:0e:8e:6a:4e:16:8c:5a:a2:0b:96:e6:47:b0:00:
                    67:73:a1:7a:3b:f3:b0:5d:0c:6d:9a:78:44:0d:1f:
                    ae:03:55:09:14:95:ca:e6:6a:ad:c0:10:a6:4b:ca:
                    6b:a3:c6:e7:48:f2:f4:cf:82:63:dc:ac:6e:a7:17:
                    43:08:69:f2:10:68:6a:d1:68:d7:1b:28:bd:18:c6:
                    79:fb:2f:41:1d:2a:00:48:4d:89:a1:78:75:d9:fb:
                    7d:10:75:05:4b:6f:09:61:55:e4:96:13:fa:9a:f0:
                    06:9c:83:54:2a:a4:02:8f:51:10:fb:72:3b:96:6a:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:30:69:B9:09:BD:96:CF:BA:1A:FA:B8:A6:FD:1D:78:7A:25:90
            X509v3 Authority Key Identifier:
                keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:17:5a:70:26:cb:3a:51:c9:fb:9c:66:02:0a:82:d5:8d:fc:
         d3:13:9b:74:24:21:6b:53:5f:49:aa:e6:f7:46:9c:d8:1c:29:
         25:21:a9:7c:6d:21:2a:9b:31:a4:51:ab:f4:72:b5:32:1b:05:
         5d:cf:95:a4:5f:a6:09:b6:45:9c:88:52:67:32:8c:1a:16:b1:
         4c:b1:f3:a5:2a:68:e4:34:75:1c:18:60:1a:c1:ce:37:bc:9f:
         17:9d:d0:b8:bd:e0:d9:a8:8d:e6:61:49:f3:13:d8:22:ee:18:
         f9:e1:ba:0b:a7:46:62:bc:aa:e2:a8:c5:5e:c7:f9:12:17:98:
         0f:66:95:7e:26:a4:c7:b7:b3:08:26:e5:1c:11:11:07:16:a2:
         65:96:7b:5f:06:e0:5e:e4:aa:17:d8:bc:27:c7:55:18:df:b9:
         c8:27:36:98:54:6d:cc:c4:db:1a:f7:d7:84:f4:34:41:ae:39:
         c1:c9:2e:2e:19:45:dd:7b:fb:be:40:3b:18:06:23:b7:c4:cb:
         1f:fd:d7:4e:31:c1:ce:72:d4:bd:dd:3c:59:73:a6:4c:11:2c:
         dc:1a:85:da:1e:79:22:4a:a6:20:ce:87:b3:f3:38:92:3e:19:
         7c:66:ba:70:ec:9c:08:14:41:e7:38:e9:d4:b7:a9:76:ea:7c:
         81:13:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:17 2026 by rpki-client