Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File:                     FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier:          ddN5ilduTTecotHik3J5avQ+MBfl4+naDljMnftbUTg=
Subject key identifier:   51:26:8E:0E:EF:96:24:4F:5C:98:FA:A1:CA:0A:0F:E7:3D:18:93:BA
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer:       /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial:       019F9F9661ADF73D3E9577DBB4D4D231E96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number:          19C9
Signing time:             Sun 26 Jul 2026 18:01:00 +0000
Manifest this update:     Sun 26 Jul 2026 18:01:00 +0000
Manifest next update:     Mon 27 Jul 2026 18:01:00 +0000
Files and hashes:         1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: +KJ6wGtdKh52HYuR1gvckpgNxYUhhEFXlO0t1bYoQ2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:61:ad:f7:3d:3e:95:77:db:b4:d4:d2:31:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
        Validity
            Not Before: Jul 26 18:01:00 2026 GMT
            Not After : Jul 27 18:01:00 2026 GMT
        Subject: CN=51268e0eef96244f5c98faa1ca0a0fe73d1893ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ca:a4:9b:6b:55:cb:56:94:20:c3:97:9e:2d:
                    5e:7b:fd:a6:3e:a7:fb:a7:96:ab:94:19:81:e6:fc:
                    d3:ef:16:d6:54:d1:b2:14:8c:a1:6c:9f:41:e9:e0:
                    1f:3f:97:fd:38:eb:dc:6a:de:9f:99:19:e2:39:d5:
                    c2:60:1e:ea:e8:f4:33:33:56:d5:fa:b9:5c:cc:4a:
                    93:da:21:53:cf:7e:2d:13:fa:bc:c8:e6:00:eb:e2:
                    11:fb:3d:4f:21:f9:d4:49:a0:ab:c6:50:88:aa:ba:
                    3b:e1:b7:2e:9c:75:f1:57:e2:01:9f:c5:67:cd:16:
                    d0:f4:35:0a:14:27:a2:27:6a:de:e9:bd:68:68:5c:
                    b2:75:12:9c:67:46:12:79:74:b7:ef:e5:0c:b2:97:
                    69:29:ff:1d:e3:71:73:59:e7:29:3e:4d:3f:c1:7d:
                    6b:46:7b:f4:53:45:38:bd:1c:ae:8f:a3:1e:e1:39:
                    68:ae:92:8b:f2:82:e9:b0:55:be:30:af:b5:aa:6e:
                    85:d3:94:91:42:61:02:0c:d2:51:db:c1:64:c0:56:
                    15:bb:9e:41:8a:6c:03:20:f5:53:a1:ca:11:3b:fa:
                    1d:df:96:4f:5f:1b:6a:b8:e1:40:c0:4f:02:8b:36:
                    12:f8:f4:77:50:d7:cf:b5:01:43:58:c6:9f:55:b5:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:26:8E:0E:EF:96:24:4F:5C:98:FA:A1:CA:0A:0F:E7:3D:18:93:BA
            X509v3 Authority Key Identifier:
                keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:43:d3:fc:7a:75:3b:d2:1d:57:74:5f:d4:13:7f:6f:f6:
         64:51:f2:67:b6:ec:1f:86:bf:9d:16:bb:14:93:2a:92:81:a2:
         44:eb:95:24:2c:02:2c:37:f7:50:ac:d7:4e:5f:12:be:8d:57:
         56:50:0f:8f:f4:01:6f:ab:7b:ab:4f:ae:c8:89:6c:cb:42:1c:
         e5:e4:0d:f8:89:c9:54:e1:90:da:09:ea:2c:b7:ed:cf:a0:f4:
         5e:00:c6:c0:82:50:8b:06:69:08:81:a0:98:9f:c4:8b:69:ba:
         7f:77:d5:3d:a2:bc:e1:e9:63:c9:02:ec:8a:ff:d4:7f:44:20:
         7d:a4:b6:b7:d1:0e:77:ae:5e:95:09:ed:5c:18:60:30:8f:1e:
         59:70:52:64:57:6e:f5:4c:d4:3b:c1:10:da:40:f2:83:24:56:
         1a:8b:00:19:08:7f:da:dd:09:56:5f:fa:55:c4:b7:bd:fa:89:
         39:6e:ec:bb:68:b7:b9:74:a1:84:97:17:3e:3c:22:11:cd:fa:
         ac:54:ca:93:28:eb:79:ed:7f:16:55:5f:3e:63:ea:96:75:c2:
         c7:5f:ef:63:75:43:cd:3f:b3:c1:c0:d0:f7:cc:cb:70:aa:71:
         93:c7:1f:45:30:8f:54:8b:c1:5a:55:50:ef:76:dc:9b:45:62:
         e5:73:49:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:32 2026 by rpki-client