Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          A/UVv8rOmbBnTYCgZrZt7NwOUDBUNxj3BvL7/4cPNUg=
Subject key identifier:   52:A0:C7:89:45:1C:CD:89:E3:5A:B9:73:80:E6:D7:EF:E6:D3:58:C5
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       019DA3AE9E5A98F7E6888CF7B6D988A42BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          04BA
Signing time:             Sun 19 Apr 2026 03:00:23 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:23 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:23 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: oHpjFSafXcu/DUiCKnQVRTKi6XHvhY/zNTF1LDuovnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:9e:5a:98:f7:e6:88:8c:f7:b6:d9:88:a4:2b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Apr 19 03:00:23 2026 GMT
            Not After : Apr 20 03:00:23 2026 GMT
        Subject: CN=52a0c789451ccd89e35ab97380e6d7efe6d358c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:2f:12:7b:75:c5:50:18:fe:c1:af:ed:e7:
                    90:0b:a2:1e:e4:28:b6:0e:1f:67:eb:33:70:6b:13:
                    f6:9c:a9:2e:5c:5f:f9:45:c7:fa:1f:f5:1c:f8:cd:
                    75:4a:a8:80:e1:d0:c0:e1:2b:52:e0:97:eb:49:eb:
                    84:6a:3c:4b:73:c1:ea:04:5c:a0:1d:b5:d7:26:c2:
                    4f:b4:ad:52:ff:58:14:64:3f:ab:a5:3c:ab:cb:86:
                    81:67:b0:5f:d4:bc:e0:bc:55:1e:ea:42:57:81:0e:
                    48:3a:7e:7a:d0:58:92:4a:0c:f8:d4:09:58:48:e9:
                    06:c6:b6:66:a9:a1:50:ea:4c:cf:8e:10:8e:64:3a:
                    f7:c4:5d:05:f7:6c:89:37:bf:aa:f7:e8:72:ed:f2:
                    24:60:c3:93:91:c2:ab:89:60:0b:9b:36:13:09:26:
                    89:9d:e4:e9:61:c2:f8:9c:05:a9:dd:a2:1b:68:3d:
                    34:dd:2f:fd:ce:26:c2:b4:a8:4c:22:d3:6d:31:f9:
                    58:fe:df:a9:71:08:4c:31:90:78:a2:a3:35:df:ba:
                    54:50:c6:36:26:2e:3d:5a:9d:9e:cc:06:51:d4:b9:
                    55:be:e3:c7:98:61:4c:5b:b2:ae:66:14:d6:92:98:
                    5e:92:e2:fb:ca:28:42:8a:81:e0:2a:70:6d:50:13:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:C7:89:45:1C:CD:89:E3:5A:B9:73:80:E6:D7:EF:E6:D3:58:C5
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:55:07:90:93:2e:de:57:dc:15:dd:44:23:db:74:20:2f:c7:
         9d:dd:76:9b:0b:e1:fd:5a:43:cb:e4:4e:3d:ba:0c:b8:df:55:
         f3:ae:71:71:f3:bf:7f:18:8a:87:37:e5:4c:f1:99:0e:67:ec:
         f4:73:e5:b2:e8:45:aa:0c:e6:76:0f:94:44:79:ec:bc:f4:b6:
         f5:0d:18:14:48:59:51:2f:0f:f5:e6:cc:d4:5f:c5:03:a1:a8:
         1c:44:c2:10:9c:73:9e:7f:cd:fd:39:eb:d6:2d:c1:fd:d5:7d:
         c0:8d:8c:08:af:59:6b:d0:4a:12:7f:2a:2f:6f:6f:84:89:d3:
         b1:10:d1:7e:fd:c4:4c:12:bf:d3:9a:0f:fb:1e:fa:c5:f8:67:
         54:7e:c7:62:e1:ea:96:f2:16:a7:05:59:3b:b6:5d:12:f6:89:
         9e:f2:15:75:85:66:11:17:8a:31:9f:1b:ec:bc:1c:c1:84:9a:
         a4:6f:46:da:9f:7f:6d:b6:f8:45:be:15:8f:d8:76:02:ae:df:
         f5:f7:86:11:6f:0a:d6:68:0a:fa:5a:95:41:7d:29:45:35:38:
         b0:c4:ab:b5:03:8c:fa:d2:37:cf:6b:e1:f6:f6:2c:80:3d:1b:
         ea:87:bc:c0:f3:30:6f:73:d1:b8:26:72:99:45:e5:60:31:36:
         28:bf:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:45:55 2026 by rpki-client