Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File:                     Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier:          shIxfTrOUiG8lr8Tocj6aVN2fS+pFkKbt30mJMP6/bo=
Subject key identifier:   EF:60:B6:22:34:AA:97:87:51:4F:16:42:82:23:5D:84:D2:CC:9B:5B
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer:       /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial:       019D28F20927A18915B47DD814C6BE852058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number:          07FC
Signing time:             Thu 26 Mar 2026 07:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:43 +0000
Files and hashes:         1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: /o4qA6p3ljIKiwv1/adcIOypqql0qTUI7U9y6B4Y21Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:09:27:a1:89:15:b4:7d:d8:14:c6:be:85:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
        Validity
            Not Before: Mar 26 07:00:43 2026 GMT
            Not After : Mar 27 07:00:43 2026 GMT
        Subject: CN=ef60b62234aa9787514f164282235d84d2cc9b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:cf:bf:12:77:32:ef:97:15:66:9d:31:22:
                    0b:c9:ab:d7:c9:ed:9e:fd:44:02:01:d9:5d:42:18:
                    8c:be:63:df:d2:da:60:4f:34:7b:45:63:43:44:cb:
                    ec:19:cc:27:d4:02:d0:b2:dd:ad:44:a7:3d:74:20:
                    08:a3:20:8e:5e:8f:3c:2f:2e:6f:d5:4a:91:ab:34:
                    8d:64:b7:c7:66:0e:7f:12:9a:85:a1:65:74:00:1e:
                    15:fb:f1:4c:63:02:9e:43:99:8d:4a:8e:73:79:da:
                    40:4c:6d:1c:93:48:9b:21:95:61:52:25:8c:c1:54:
                    0a:0b:ae:f8:29:c0:72:17:37:2f:e2:52:0f:5b:43:
                    3f:5b:ac:d4:ad:2f:4b:cf:53:dd:99:57:a8:12:58:
                    62:d1:c9:14:00:10:d9:7e:b4:77:c1:8f:97:59:81:
                    cd:99:8f:e1:6f:11:fe:dc:8f:94:bd:b9:3a:04:21:
                    be:df:6f:7e:1f:1f:e5:f8:fd:dd:0f:fd:36:4e:98:
                    47:89:1e:ae:b2:9a:3a:44:38:51:ba:d7:33:1d:72:
                    db:00:94:f5:7f:60:83:3c:98:57:59:b2:87:08:0a:
                    b8:31:89:eb:4b:80:f9:36:de:d3:8c:98:e0:40:08:
                    07:9b:42:7b:e5:ac:79:b9:a4:c8:5e:c4:48:93:7b:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:B6:22:34:AA:97:87:51:4F:16:42:82:23:5D:84:D2:CC:9B:5B
            X509v3 Authority Key Identifier:
                keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:71:1d:7a:71:a0:2d:3f:57:b0:d2:5f:af:2f:05:9c:44:
         10:74:6e:5c:28:85:db:8c:51:38:34:54:fe:f9:6d:ac:86:ae:
         27:01:4a:d3:19:6f:6e:94:83:2e:ee:b9:8c:ef:3e:23:4d:6d:
         0a:95:b8:1c:55:ef:a6:74:4c:d9:42:d3:98:d9:cc:cf:ee:cb:
         4d:93:0c:b7:20:2a:fc:2b:89:ee:b8:69:ce:a5:25:d8:ad:4f:
         c5:6a:ed:65:b3:3f:36:6e:ae:b2:98:2a:59:a7:21:bd:23:fc:
         44:7b:fe:6d:3c:bf:fa:0c:fd:19:ef:be:95:97:65:d8:59:6f:
         65:38:80:90:58:89:2e:82:5c:8c:97:60:97:17:8f:6c:a2:44:
         78:e3:9e:18:70:f4:8d:9f:ea:40:9a:37:1d:1c:fd:41:9c:33:
         32:45:d3:e9:d6:46:f4:f3:0f:52:20:21:21:10:7c:92:0e:cc:
         73:cb:85:e5:54:4c:fb:ae:1e:7f:2a:05:94:9a:31:53:7e:f7:
         c1:d5:7f:61:57:22:d8:db:62:be:38:ca:91:ad:a0:a2:63:c8:
         c8:ca:45:a9:c8:23:8a:a8:3f:c8:eb:ba:68:1b:9b:70:f7:12:
         4d:c2:74:c4:54:b1:07:89:b2:79:69:b6:58:b8:6e:56:3c:61:
         4d:02:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:40 2026 by rpki-client