Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          7x9/K25EZflfm2Z62JC/uj+UXaOsPpLi9dcQnQJh7WQ=
Subject key identifier:   F9:2D:90:EA:CC:B0:7D:2F:82:6E:01:0E:BA:4E:1E:B1:40:0B:AF:09
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       019D378916C9B26FCCE93D3D4E3EB1E88667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          0482
Signing time:             Sun 29 Mar 2026 03:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:24 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: VZAWuu7vzJi/RZmVTq8LhPEhKFUlD5PscRar3pce+mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:16:c9:b2:6f:cc:e9:3d:3d:4e:3e:b1:e8:86:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Mar 29 03:00:24 2026 GMT
            Not After : Mar 30 03:00:24 2026 GMT
        Subject: CN=f92d90eaccb07d2f826e010eba4e1eb1400baf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:da:f8:a6:d6:1d:f9:f9:74:17:f8:e2:22:
                    b5:24:f3:66:0b:23:21:a5:b1:cd:d2:c5:d2:fb:b4:
                    cb:10:82:b1:3a:2e:ad:70:f8:f3:bf:ff:f2:4a:45:
                    92:fe:6c:eb:58:80:42:ef:03:0e:ba:b2:61:a5:ee:
                    aa:c7:b8:3c:53:d1:db:b7:d3:06:5f:26:56:94:62:
                    c9:a8:e5:25:ee:cb:49:1e:f2:22:cc:10:eb:2b:e6:
                    ef:bd:d8:c3:b9:90:72:6e:8b:99:92:1f:0e:42:6f:
                    f0:d2:f2:df:1a:2f:68:e8:a6:ba:49:8f:1c:21:32:
                    54:02:2c:98:6b:64:f2:7a:e7:71:0c:bd:77:2a:86:
                    68:aa:b7:53:91:00:46:3e:8d:53:16:fe:66:05:10:
                    01:93:a1:bb:51:0a:c5:d9:86:0b:f1:18:10:3c:37:
                    15:b2:83:54:a7:5b:81:85:54:72:6b:a4:0b:bb:91:
                    fe:06:60:68:fb:e6:a1:4c:a9:6b:d7:7b:2a:bb:b7:
                    b6:fd:5c:e0:b8:cd:e7:47:a3:42:31:61:2e:bf:f1:
                    05:10:71:f7:d2:4f:4d:d5:78:6a:e7:3d:b2:30:57:
                    b7:ac:82:5c:9a:30:3a:92:97:69:95:7f:25:d2:38:
                    86:57:db:49:86:26:0e:43:a9:cc:f1:1a:22:b2:65:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:90:EA:CC:B0:7D:2F:82:6E:01:0E:BA:4E:1E:B1:40:0B:AF:09
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b4:79:1f:f2:6d:f6:6a:1b:8a:6e:1a:3a:eb:f7:56:d2:2e:
         04:62:44:45:51:15:b2:13:dd:b6:d2:66:5b:1c:c1:33:da:ff:
         8a:d5:bf:84:a9:88:6e:a6:5d:68:49:74:c7:15:c1:d8:b5:54:
         8e:7a:ac:7e:36:e2:dd:78:18:ad:03:c0:ef:3b:99:1a:b3:49:
         5c:9e:e5:8a:ea:a7:73:d8:df:f8:96:79:0a:71:dd:19:d5:55:
         7d:49:ab:48:1a:73:d7:0e:76:b2:c3:d3:05:fc:41:0a:97:eb:
         39:07:a2:cb:b4:16:be:89:83:31:8a:31:e5:51:4c:84:e0:37:
         6a:c6:3e:3a:08:da:7f:78:1f:13:eb:86:6c:df:62:0c:be:32:
         65:a9:46:02:cb:f6:9e:d1:d9:92:d7:93:15:56:4c:7b:80:3f:
         b7:ff:3a:d2:0a:54:62:df:44:d8:0a:2c:aa:1d:9a:53:be:c3:
         ce:90:5e:d4:73:32:9a:48:13:1e:84:d6:03:d6:af:a4:f5:66:
         6c:06:c0:ea:72:92:49:f0:6f:bb:f3:9b:76:ce:55:18:69:1d:
         05:ce:a6:77:95:9c:d4:07:41:84:d5:19:ac:db:f3:87:28:7c:
         0f:ac:92:6b:3b:3b:16:1b:33:e1:bd:c6:32:3b:a4:77:89:76:
         e8:9f:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:18 2026 by rpki-client