Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          DztH71AOLGhD69oup3kHolJ4cG43nPUB9eN2OK0Q/p4=
Subject key identifier:   AB:3B:A8:0C:30:36:E4:1A:C3:39:18:A5:C8:C2:D0:85:A0:C0:3F:88
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       019CAA8FAB1928D6BE43452C62B16FC4F342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          0439
Signing time:             Sun 01 Mar 2026 18:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:08 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: l/VI6YQPsIzrRm2eAddglE/cy3M7yqjG4pgAUX7EhyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:ab:19:28:d6:be:43:45:2c:62:b1:6f:c4:f3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Mar  1 18:01:08 2026 GMT
            Not After : Mar  2 18:01:08 2026 GMT
        Subject: CN=ab3ba80c3036e41ac33918a5c8c2d085a0c03f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:47:b3:90:56:d9:a9:99:63:df:61:36:61:
                    d9:5e:50:07:5c:72:ad:2a:33:d0:ea:ea:11:81:e9:
                    06:53:af:d6:f9:99:fd:10:b2:11:33:b9:b3:ea:bc:
                    63:db:da:4f:fd:87:fd:fa:5f:40:0d:ab:eb:fb:a6:
                    1f:c7:05:04:21:13:7d:d6:6c:ad:1b:87:b6:c4:97:
                    53:1b:6d:b4:e8:6c:38:41:16:59:e4:46:be:f5:c0:
                    46:49:61:a5:61:6d:e4:04:09:a5:ba:17:ba:72:e2:
                    35:ac:82:42:63:77:6f:f9:2c:75:77:f7:64:c8:21:
                    a9:cf:07:67:09:98:9d:f4:8e:95:87:96:87:0b:d9:
                    36:36:6e:0e:5f:0c:35:70:b5:91:59:81:0b:13:db:
                    a4:59:46:2a:af:70:12:47:12:57:45:e3:7b:c1:75:
                    77:15:73:b6:89:37:4e:b6:a8:b8:7e:96:11:97:cd:
                    e1:92:b0:b2:b4:71:e8:2e:90:5d:50:de:62:4c:41:
                    b9:97:b1:c7:94:70:73:f1:37:da:d0:56:e7:d1:e5:
                    5d:b1:f7:e5:b4:ba:ca:7b:dc:04:43:90:f1:c5:1d:
                    5c:09:81:22:4c:cd:90:64:4b:4f:b4:0f:97:ee:62:
                    df:20:96:25:f0:27:e1:1d:5d:84:e5:b3:ad:8d:bf:
                    0b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:A8:0C:30:36:E4:1A:C3:39:18:A5:C8:C2:D0:85:A0:C0:3F:88
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:88:c6:84:c9:df:8b:04:c8:2f:29:44:df:f2:3c:11:90:
         4e:d0:3e:11:ce:fe:a3:5a:80:38:01:67:37:7d:d8:af:04:e5:
         b1:b9:3b:5d:97:86:df:43:ff:ec:9e:7b:6d:d3:da:5b:38:ba:
         51:e4:d1:6e:39:54:18:03:22:d2:7d:c7:a8:7f:c3:cb:74:6f:
         61:ce:7c:29:eb:a2:b8:ee:10:70:ba:de:1d:04:14:f4:2b:9a:
         a6:42:8a:36:d8:b4:0f:fc:2c:ef:b6:09:32:78:b8:26:24:99:
         74:df:8a:f8:28:fd:93:67:ff:78:1c:9e:6e:79:a1:51:aa:52:
         9f:31:ca:c8:90:c4:08:37:fc:b9:b2:f7:91:4f:0d:9e:7e:20:
         36:c2:90:59:24:6d:fe:b5:06:6e:4d:cb:c5:36:b8:83:ab:1c:
         19:4a:13:4f:af:06:66:c2:d6:57:62:d7:1b:ee:5e:89:31:6f:
         5f:17:2c:4f:57:51:74:03:73:b4:1d:e3:5c:6f:26:b9:02:38:
         5c:a9:2a:d1:0c:23:9b:55:c9:67:a4:db:af:1f:03:57:2d:26:
         e6:6f:08:1b:55:dd:05:5e:33:5e:36:fe:83:b8:7c:e8:03:3b:
         30:cd:99:e8:d6:13:73:39:1d:97:3b:bf:7a:a4:e8:66:f3:d4:
         17:10:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:33 2026 by rpki-client