Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
File:                     fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json)
Hash identifier:          qufFjI9YJ2Payi4aqX0kg7I3V7sKBoRA3t2rqO+mh1g=
Subject key identifier:   48:EC:24:F5:3B:8F:45:19:24:F7:59:B0:A8:E1:89:1E:A9:03:38:70
Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75
Certificate issuer:       /CN=7f296657af8d00c25fd75f56ecc8a28b35150575
Certificate serial:       019CAFEC9F8BA6ED6481F5F539F0C68BD4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
Manifest number:          117D
Signing time:             Mon 02 Mar 2026 19:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:45 +0000
Files and hashes:         1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: SHRcHnu3aCKyuHpQKufSW7Kom40Ihszclxm7CPJTWFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:9f:8b:a6:ed:64:81:f5:f5:39:f0:c6:8b:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575
        Validity
            Not Before: Mar  2 19:00:45 2026 GMT
            Not After : Mar  3 19:00:45 2026 GMT
        Subject: CN=48ec24f53b8f451924f759b0a8e1891ea9033870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:61:43:11:fd:55:7c:44:f8:60:41:4d:15:
                    87:8a:c0:ae:3a:71:c0:5d:b0:a1:f9:56:40:8d:82:
                    3f:99:5b:df:8c:19:e7:42:b0:69:ea:dd:d0:3a:83:
                    4b:36:43:41:fd:89:02:ee:7b:1c:c2:54:e1:b7:d9:
                    70:c5:64:5e:70:d3:28:38:62:f3:e2:9a:99:1f:3e:
                    b2:20:f7:c0:81:29:4e:0e:02:24:29:5a:e6:69:1f:
                    36:ba:1a:1c:64:3e:78:7d:de:28:fd:d8:4e:66:fd:
                    ba:c0:bf:93:a0:99:d5:12:d3:7a:aa:f0:a4:5d:a7:
                    a8:03:ce:8c:26:69:ca:a3:c0:32:67:0c:53:88:5d:
                    bf:c9:67:93:95:2c:41:50:91:61:ef:f6:66:96:40:
                    86:c9:7e:e9:c2:af:a2:f8:9e:c2:4c:bd:28:a2:11:
                    25:31:bc:e6:e3:45:2a:a8:c4:2e:4a:f1:4a:c8:94:
                    08:ee:c0:03:78:04:70:14:35:f1:a7:02:f8:94:fc:
                    f0:94:56:14:fc:f7:17:fb:f7:8d:6f:b1:9e:37:b1:
                    9c:5b:7e:01:57:fc:ef:9d:75:02:a0:fa:51:a0:f5:
                    7e:b7:d0:4d:e8:67:a9:69:72:e8:82:80:e8:12:24:
                    5e:1b:7d:ce:5c:72:85:19:2f:c2:91:9d:75:61:6c:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:24:F5:3B:8F:45:19:24:F7:59:B0:A8:E1:89:1E:A9:03:38:70
            X509v3 Authority Key Identifier:
                keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:53:06:6b:57:59:9c:81:f2:61:7b:94:8b:0b:01:11:bd:
         b0:5d:e6:8a:1f:95:d1:c8:62:c3:42:90:a9:68:a9:92:f0:c8:
         e8:75:28:a4:40:27:12:1f:d0:2c:e3:43:8d:d8:58:e6:d8:cf:
         3b:3b:f0:fd:36:3c:10:a8:6d:d6:82:ca:fc:e4:0b:4b:30:a9:
         31:cc:55:4c:f9:20:a8:d5:d8:2e:86:81:02:b4:f4:3e:b1:37:
         68:a3:73:5b:79:24:fa:1e:1e:1b:7a:f5:99:ea:bc:8d:bd:23:
         19:af:bb:79:e2:b7:65:0e:92:30:59:98:49:fb:5f:11:4d:c3:
         c0:73:9b:2b:ff:b8:57:73:4c:0d:8d:d1:25:08:cb:79:26:37:
         f5:e6:8e:e2:f2:8d:6f:af:e6:cd:5e:37:5a:ca:69:e3:a8:36:
         95:28:43:15:03:df:6b:82:a5:8f:3f:c8:f3:43:ea:53:6a:eb:
         aa:a0:47:1a:59:83:e1:01:47:25:e4:eb:97:58:44:38:cf:33:
         64:c5:3c:c7:bc:fc:41:a9:d0:76:27:d6:e4:e0:56:82:e1:e2:
         0f:6b:f4:2f:c1:1f:cf:8c:6b:32:d0:41:a3:09:da:50:57:e1:
         b8:bd:6b:89:bc:95:86:9e:1c:41:92:0b:0d:4b:ca:16:ea:a9:
         7c:ee:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:31 2026 by rpki-client