Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File:                     YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier:          ReDKMUZQd6exqy1kWoVFw1DagszgXKdHHedadJgoG9E=
Subject key identifier:   A0:4C:DB:EE:07:09:30:2D:7A:AB:34:50:3C:7E:AC:EC:E3:C5:2A:20
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer:       /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial:       019D9962EA102F73AC9EB04B318A3C8900B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number:          1469
Signing time:             Fri 17 Apr 2026 03:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:29 +0000
Files and hashes:         1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: lM6uNvYV6CLcD9owRcN0jC6so2wwkLdVw4oex+K9wBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:ea:10:2f:73:ac:9e:b0:4b:31:8a:3c:89:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
        Validity
            Not Before: Apr 17 03:01:29 2026 GMT
            Not After : Apr 18 03:01:29 2026 GMT
        Subject: CN=a04cdbee0709302d7aab34503c7eacece3c52a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:95:04:3f:7c:fa:58:90:b5:9c:dd:f2:6a:
                    81:d9:7e:9d:49:c8:0a:0c:46:fc:fd:7b:63:36:41:
                    76:a4:2f:4e:fd:38:76:13:da:a4:17:80:d2:05:7e:
                    43:f9:c1:36:fc:3f:a5:5a:27:11:df:20:50:56:c6:
                    46:7a:44:0d:db:a1:ff:81:39:ba:0f:8c:1c:35:e6:
                    a5:2e:0e:aa:49:a3:9f:39:ed:c3:1f:d6:97:58:bd:
                    d1:c1:92:1b:08:56:38:b7:73:b6:1b:55:da:c2:93:
                    e7:ea:78:f4:c3:84:9a:e1:58:4f:4f:7c:85:de:9c:
                    d2:61:ee:67:c4:42:05:9f:0c:75:1d:05:db:6f:a4:
                    cb:78:d3:cf:16:15:3c:13:86:44:28:8c:bb:5c:a2:
                    7f:71:eb:df:68:ce:ca:79:1c:ee:b5:37:3d:fe:b8:
                    e1:57:e4:cb:5d:8a:c5:f4:d9:d4:81:89:d7:ef:b9:
                    e2:cf:9f:8e:c2:1b:19:d5:e4:c9:64:9b:41:bc:ce:
                    c4:b9:bb:49:1f:b9:dd:0d:6c:02:f0:35:10:dd:b9:
                    6f:73:83:c3:be:25:a1:02:e6:71:e0:30:7a:4c:67:
                    45:6d:24:b3:62:0e:3d:d3:f9:cc:6a:6b:ec:21:b8:
                    01:2e:fa:0f:ee:44:65:90:1f:23:a1:5b:96:e8:4a:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4C:DB:EE:07:09:30:2D:7A:AB:34:50:3C:7E:AC:EC:E3:C5:2A:20
            X509v3 Authority Key Identifier:
                keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:a4:c5:65:e2:eb:95:19:d6:ea:1a:bb:0f:95:1f:71:73:
         ec:61:79:96:ef:b9:c4:f8:1c:2c:8b:c7:71:e6:0a:f7:30:90:
         89:11:b6:23:db:7a:95:8c:f2:7e:25:aa:d9:ad:e1:ce:68:b7:
         97:83:bb:18:d8:a7:74:38:70:9d:14:59:df:15:20:4f:1d:30:
         31:3c:16:b3:8b:f8:ed:68:5f:53:f6:5e:86:9a:4d:6e:a1:fc:
         4d:c1:da:ae:01:78:5d:2e:cf:75:0d:61:cc:ce:be:92:8d:1e:
         b9:6b:87:05:ca:6b:a0:f8:88:49:23:9f:ca:a0:f1:15:55:b7:
         ed:4d:ee:bf:28:91:76:23:44:c2:54:38:d2:33:6a:ef:50:f2:
         fc:85:3b:f0:95:7a:8a:51:2f:94:c7:a4:ce:b0:7a:e4:b0:bb:
         18:95:eb:f5:05:94:d7:b3:2c:e7:bd:b1:5f:b9:e4:bb:57:2b:
         4a:1c:1d:e0:35:01:9e:dd:2e:c6:a3:ac:e2:03:12:42:5a:f4:
         fc:bb:b8:72:a5:88:00:b1:5b:42:02:98:0f:06:33:28:df:7c:
         69:4e:4f:db:55:8a:24:a0:dd:dd:35:20:2b:17:b8:79:49:cc:
         d4:84:a9:df:d6:56:96:62:7a:d7:1e:5c:42:55:f5:85:a2:d6:
         3a:7c:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:48 2026 by rpki-client