Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File:                     FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier:          m4OCeWXibdyBPKbput4WbmU6qg2jKeHK+g5LzfyA1Cc=
Subject key identifier:   2F:8A:13:1D:87:B9:67:68:EA:61:86:99:5E:73:5D:F4:53:5A:CB:7F
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer:       /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial:       019EBF23F037A55BE026529991306590B493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number:          01E9
Signing time:             Sat 13 Jun 2026 04:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:03 +0000
Files and hashes:         1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: ruwTI/wgxtd5g5RlK6bAHFLSQpTy05/gQfSFIwaTaJM=)
                          2: OIgIi-U_xIeptQTGxuDwpFFyZdw.asa (hash: Xj0wQ0ZCPeJQc6NTbJQHD9KBRyvX3ANB2nHMaSO0P6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f0:37:a5:5b:e0:26:52:99:91:30:65:90:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
        Validity
            Not Before: Jun 13 04:01:03 2026 GMT
            Not After : Jun 14 04:01:03 2026 GMT
        Subject: CN=2f8a131d87b96768ea6186995e735df4535acb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:fc:38:2d:e7:e3:64:55:8d:b0:13:08:51:
                    a4:d8:52:bb:c0:aa:b2:d1:f6:8d:fd:f5:c0:bb:fe:
                    15:48:be:fd:d5:15:11:6c:5e:d7:fd:37:31:e9:0e:
                    7e:28:68:d9:18:3a:c3:0b:8d:a3:ef:27:d8:69:9c:
                    56:9e:52:5f:70:1a:83:23:87:bd:cf:df:8b:23:bd:
                    34:3a:36:a8:4d:76:68:c5:ae:3a:d6:94:62:c5:9e:
                    ac:49:78:2c:fa:26:4a:e5:54:c1:b7:1b:12:c2:9a:
                    2b:85:8f:48:77:92:75:ae:6a:9b:a7:de:5d:fe:d4:
                    a7:ff:11:fd:32:25:57:d4:68:ed:17:2e:8f:a2:e9:
                    48:89:0c:d0:01:0c:62:1c:10:87:31:ad:c8:9f:ca:
                    47:86:63:f6:48:27:4e:19:24:35:2c:13:8e:e0:23:
                    ed:b3:f0:ef:1f:2c:ef:45:8e:e9:2a:8e:34:61:28:
                    ea:81:83:69:7e:1c:51:2e:78:4a:29:59:4a:3a:9f:
                    e1:a0:f6:f4:cb:fa:9c:c6:0f:0d:ab:c8:20:ff:4d:
                    bc:65:76:c2:3b:61:20:f3:1f:db:ea:7c:07:14:1d:
                    49:99:ea:b1:b4:50:0f:40:1b:71:a6:13:1a:98:47:
                    36:a1:34:99:4a:5a:67:29:9f:46:9b:c9:52:2f:19:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:13:1D:87:B9:67:68:EA:61:86:99:5E:73:5D:F4:53:5A:CB:7F
            X509v3 Authority Key Identifier:
                keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:90:e3:a5:ac:bd:23:c4:47:7f:69:fb:60:e1:94:54:bd:
         b7:c2:3b:19:45:d0:77:09:6a:85:7d:e6:cb:7a:3f:11:f4:26:
         53:ee:a0:a9:1b:70:c2:84:29:67:d2:0a:92:2c:32:67:e8:89:
         44:cc:20:13:7c:88:94:4a:8f:d5:21:fc:aa:bb:c2:8d:09:26:
         b2:e3:82:b5:cd:b5:67:b4:25:72:95:f1:11:58:42:61:31:a7:
         ec:04:74:91:c7:98:4a:9e:69:8b:20:23:12:c0:fb:c7:74:51:
         21:f3:13:84:dd:94:3a:b8:26:4b:c2:e4:0a:fc:ab:8b:ef:18:
         3e:f6:7e:76:e0:6e:dc:38:b6:b5:62:d3:2e:a0:81:58:75:fe:
         4e:74:43:71:39:e8:59:08:b8:13:00:64:d7:50:51:fd:6c:79:
         9e:ae:d0:cb:3e:48:09:fc:bd:88:7e:19:fe:cd:f9:d1:c1:9b:
         9d:46:d3:e2:b6:55:96:de:37:eb:69:ae:20:ef:0b:f2:d2:77:
         af:bc:11:0d:c9:98:ed:f8:e1:08:0d:61:f6:3c:9f:85:44:77:
         cc:94:93:11:fc:5e:c5:39:ac:c5:c0:fd:71:60:f2:a5:96:c8:
         c8:3b:34:e4:d4:62:0e:c9:c4:23:ff:65:b5:79:7a:ef:1a:e8:
         b8:63:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:06 2026 by rpki-client