Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File:                     FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier:          8FLYHOwPT3EBHBzPPKg4s+BXZHVWJ1fbE86J4GTFNKY=
Subject key identifier:   A7:5C:DE:5B:0F:21:C7:10:38:23:10:64:E1:3E:C3:7F:45:AC:EE:75
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer:       /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial:       01A08942ED1F2F911876625D18A1F40B6F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number:          1A42
Signing time:             Thu 10 Sep 2026 03:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 03:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 03:00:59 +0000
Files and hashes:         1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: hlJOhxRbxzad6BjA2ZGxSDGPFHbL52t5a0ABVWvzBF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:42:ed:1f:2f:91:18:76:62:5d:18:a1:f4:0b:6f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
        Validity
            Not Before: Sep 10 03:00:59 2026 GMT
            Not After : Sep 11 03:00:59 2026 GMT
        Subject: CN=a75cde5b0f21c71038231064e13ec37f45acee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:73:d2:87:23:f5:8b:21:51:30:ca:45:31:
                    a8:eb:5d:a4:22:50:02:20:c3:6e:0d:56:fe:ef:fe:
                    c0:e7:ff:21:74:a7:9d:73:fb:e0:79:85:73:5f:d2:
                    3c:44:3f:ae:63:91:0b:96:9f:d8:01:ee:4b:97:8b:
                    f2:49:02:2e:69:ca:89:39:52:45:e5:f2:47:c2:fe:
                    fa:f4:f6:96:7a:9f:ea:1e:b6:28:a2:90:38:b0:92:
                    17:ee:6b:1d:2d:6b:6d:13:06:77:7e:05:be:a0:d9:
                    79:72:5d:c7:ea:a0:79:16:61:38:a5:00:9a:38:63:
                    87:ed:fd:37:4b:98:56:ef:1e:0c:7c:cc:65:75:94:
                    ce:78:58:d7:d9:91:1a:3a:ca:bc:22:50:bd:59:23:
                    9c:ee:66:69:ea:02:71:bf:a0:27:26:ee:68:4f:41:
                    cf:b1:34:d5:26:d6:c4:2c:46:11:c6:6e:58:32:cc:
                    a1:03:59:d0:5a:e9:9f:12:96:50:be:b1:da:99:67:
                    33:fc:02:24:d0:dc:e6:e7:4a:a4:48:b7:55:43:16:
                    a6:db:13:b6:66:21:1d:68:b0:c2:ea:57:61:93:d7:
                    39:0a:8d:e6:cd:46:bd:49:da:3b:8a:f7:1b:93:cd:
                    5c:bb:bc:60:b9:64:5e:04:1a:2a:ef:08:2b:58:68:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:DE:5B:0F:21:C7:10:38:23:10:64:E1:3E:C3:7F:45:AC:EE:75
            X509v3 Authority Key Identifier:
                keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:46:a7:c9:b1:fd:01:be:31:cc:12:36:02:7a:a9:46:45:8c:
         d9:2c:86:4d:24:67:f9:95:22:ed:eb:cd:c6:c5:24:81:b5:a9:
         40:95:4c:53:00:16:18:90:7e:91:38:60:d8:ce:7e:fc:54:ff:
         e3:ce:be:29:fd:0c:bf:da:e1:50:27:be:dc:c8:66:5d:05:22:
         ec:22:62:77:f7:0a:6b:10:16:3d:05:42:d6:a1:cf:c4:67:a9:
         64:b7:91:cd:9e:ba:fc:32:fd:99:3b:15:fe:ac:ae:31:55:4f:
         40:ca:af:bc:8d:69:a5:be:7f:9f:f7:d9:38:eb:bc:a6:04:06:
         cc:26:99:f8:91:6d:cd:86:48:10:dd:e8:f7:4e:24:3c:97:42:
         fe:27:56:77:31:c2:18:2a:65:cf:5c:08:ce:e4:d0:3a:3b:1b:
         a7:a5:0f:62:f0:ef:88:a6:0f:db:80:05:24:96:03:c0:8f:8b:
         05:5a:6a:f5:d3:ce:99:d3:f0:ab:e9:b5:9b:86:1c:f3:99:d2:
         03:7a:e6:c8:7b:07:c5:c2:b0:6e:67:9f:f7:81:de:10:3c:ec:
         a0:5a:f1:81:d3:cf:78:77:a9:f0:11:f2:9c:91:12:8e:78:01:
         8b:e5:e9:31:09:75:11:05:2d:29:2f:39:71:0a:a2:94:bf:65:
         22:c8:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:31 2026 by rpki-client