Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          Y07mSfo4LOPcgXWogzWWncFNoDGn33bxR6QXxb7Vc1U=
Subject key identifier:   59:95:7D:73:80:96:FE:20:03:AB:1E:1F:7E:32:06:FA:B8:55:A3:53
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       019CAA8F4CFA6D34760C0FCE945FCDB13E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          173D
Signing time:             Sun 01 Mar 2026 18:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:43 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: d5BkJZqq+CYO5JOHzLaEd3VP8uxzquL4RKsiBjx7wGs=)
                          2: nn-g8Y9kxqQKUzRTa6imN-OeA08.roa (hash: jwuMNXmrVdDCW+s03h/KvzRrrZv0xRVmb6hoLkPXRKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:4c:fa:6d:34:76:0c:0f:ce:94:5f:cd:b1:3e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Mar  1 18:00:43 2026 GMT
            Not After : Mar  2 18:00:43 2026 GMT
        Subject: CN=59957d738096fe2003ab1e1f7e3206fab855a353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:b9:20:80:23:0a:bb:aa:17:f3:9b:00:24:
                    97:59:8d:4a:d6:ef:0e:d4:eb:29:4b:99:56:e1:e9:
                    d0:27:a7:cb:81:02:6e:60:2c:5f:66:ca:6f:a2:4a:
                    72:5e:86:16:e2:3a:b2:c8:fb:42:25:95:e7:ae:f4:
                    5f:6d:03:3a:13:4a:fc:2d:1b:33:d8:92:d9:c0:38:
                    0c:b1:be:22:51:7c:0e:a3:12:cf:bb:16:2e:24:80:
                    5d:cc:fa:5e:ac:e8:87:36:da:31:d9:c0:e2:6d:37:
                    20:76:cc:d1:9a:e6:a8:d3:7c:8f:d6:7e:a1:72:67:
                    07:28:e6:79:c1:c8:fa:4b:56:7f:f8:33:60:05:8c:
                    56:69:89:58:d6:da:3a:8c:8e:e6:0a:d0:2d:44:24:
                    49:ef:10:48:a1:f9:43:2d:d6:db:bf:37:21:c8:48:
                    31:31:18:71:86:76:8a:32:6b:64:ed:21:24:3b:de:
                    40:75:1c:8e:30:87:01:57:07:2e:ea:ff:43:e1:4c:
                    d5:13:48:08:df:91:35:e1:87:f7:dd:8c:bb:6e:5a:
                    c2:42:de:cb:d6:d7:e5:97:94:1d:da:3d:8c:c6:99:
                    22:77:44:f0:07:bb:44:a8:f8:0f:f8:2b:83:6a:7d:
                    5c:85:29:f4:f9:cf:fa:52:38:bd:31:4b:e6:23:2a:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:7D:73:80:96:FE:20:03:AB:1E:1F:7E:32:06:FA:B8:55:A3:53
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:94:d1:b1:a6:fc:2a:a7:9a:ce:25:fa:75:83:45:fb:d9:
         ff:f7:1f:9f:5a:3d:df:14:de:f6:88:f4:23:5a:d8:88:0e:51:
         43:b7:af:66:4c:22:ee:33:72:f1:88:ab:fe:11:47:3c:a6:71:
         c5:b8:d4:d7:76:bf:8d:94:be:b2:ee:78:57:af:75:ac:c1:6f:
         94:9c:ef:50:a7:5d:ff:bb:8f:f9:f3:a4:b1:64:84:e9:1e:06:
         89:87:77:f5:2a:62:c1:0e:76:56:be:5c:f2:f9:47:75:4b:aa:
         bb:ba:93:ab:af:b8:1d:a9:c1:b3:3d:e0:28:0b:5e:b8:33:ac:
         13:c0:d0:3d:8a:48:82:26:a0:29:92:8a:3f:cb:07:aa:19:34:
         89:84:5f:30:6f:89:fd:1d:08:e3:32:78:3a:7e:71:28:5e:8f:
         ce:75:ce:5e:db:d6:eb:55:3a:fd:ed:cb:7b:b9:34:6b:6f:4d:
         27:c6:65:97:32:7f:17:ea:f0:63:35:e7:de:a2:21:23:9d:91:
         e6:2c:62:ae:5d:b0:0e:19:2d:fd:93:13:51:68:6f:6e:e0:a5:
         af:5c:fb:08:fa:e4:1e:15:ae:19:03:e4:98:5f:c6:4b:b2:4e:
         0c:24:b1:90:bd:15:60:b2:2a:d4:be:44:f9:a6:ab:42:ef:6e:
         f7:f0:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:31 2026 by rpki-client