Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          k4dDMMGoXeZlJaqaIyieWzXVQ8s/+1UmNv/Zb3Dhx8w=
Subject key identifier:   79:C9:4E:2E:F6:FF:E6:0C:78:8C:A8:1B:C1:82:D1:95:5F:0A:DD:FE
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       019D2A0497C0AA833118DC0B02E9E1FFA87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          047B
Signing time:             Thu 26 Mar 2026 12:00:37 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:37 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:37 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: pfCwX3Bgkt5ZHEIHBv97Gic8aZ529i0fJ54CipWUCTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:97:c0:aa:83:31:18:dc:0b:02:e9:e1:ff:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Mar 26 12:00:37 2026 GMT
            Not After : Mar 27 12:00:37 2026 GMT
        Subject: CN=79c94e2ef6ffe60c788ca81bc182d1955f0addfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:41:ad:ed:50:43:0a:63:eb:10:de:c6:54:
                    9c:3f:57:65:2c:ec:15:c9:9e:b4:8a:df:54:47:12:
                    bc:4c:80:ea:02:ae:97:41:66:fe:bf:e5:f7:aa:e0:
                    2a:56:ad:9a:54:a5:9f:d2:b6:43:64:e9:f1:d7:4b:
                    a3:ad:ca:02:1c:9c:8c:01:bf:27:36:0d:ba:bc:77:
                    30:a8:ed:51:73:b2:9a:c1:31:7a:a8:9e:5a:ff:1d:
                    e0:ff:4b:e5:fa:9a:96:4b:b6:74:00:98:5e:97:96:
                    99:04:3a:e9:fb:bc:42:81:8b:49:27:9a:24:a5:a5:
                    b4:5b:ab:2d:48:47:d6:45:a2:9f:bc:f0:44:4c:9c:
                    0c:19:56:b2:0b:07:7c:7a:e3:99:ca:d7:41:db:66:
                    ad:49:e3:07:3f:45:98:42:d7:c4:57:59:22:d4:e3:
                    92:ba:c9:2a:0f:29:05:7d:25:b4:a8:61:d4:80:27:
                    8f:97:c7:fc:6c:91:67:61:8c:2c:08:aa:d7:cb:ce:
                    f6:40:06:bd:31:e3:3e:18:cd:28:d6:49:50:31:49:
                    24:ec:75:34:5b:6b:fb:44:a2:32:1b:9b:30:02:d0:
                    cf:fe:48:1e:52:32:88:84:8b:dc:b2:f2:6a:38:80:
                    4f:59:93:21:eb:3f:e0:c5:c3:c2:b0:b6:50:04:fb:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:4E:2E:F6:FF:E6:0C:78:8C:A8:1B:C1:82:D1:95:5F:0A:DD:FE
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:36:bc:53:cf:6d:6c:78:70:03:d3:e9:bc:5b:ec:35:38:e4:
         25:f4:63:3e:5e:c5:a3:0e:c4:42:0c:cf:65:b7:00:18:02:72:
         c8:44:6b:c8:ba:f3:49:a5:6d:7b:a9:a2:98:d6:cf:07:68:ce:
         37:25:fc:2b:cd:98:2e:cf:67:2c:60:02:d9:64:27:77:8d:87:
         e3:6e:26:cf:07:3d:51:9f:10:b8:8e:92:0f:be:67:f2:6a:11:
         7d:26:c2:02:4f:f8:41:21:41:31:01:49:d6:6d:26:34:08:06:
         7c:63:02:34:d0:17:49:26:cc:08:1a:3b:25:4d:87:8e:42:cd:
         fe:63:f3:f2:19:e6:8a:47:02:5f:df:9f:10:e1:af:ab:9b:27:
         28:e1:33:2a:11:7c:47:87:a3:42:9f:ad:54:7d:aa:d1:43:a7:
         df:8c:4a:cb:70:96:d8:95:25:14:0b:53:42:90:eb:54:4b:07:
         51:ea:1f:6c:e9:dc:7a:7b:6d:15:6e:58:73:5a:cc:07:43:95:
         cd:d4:b1:de:33:09:99:c0:62:03:48:93:bc:c5:3d:91:b4:41:
         b8:80:fa:ca:22:46:b7:f0:bb:0f:94:16:5d:0d:4e:5b:f5:35:
         c7:5e:17:40:ef:ff:94:8c:89:d3:75:72:90:65:a7:2a:ec:04:
         f5:7b:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:04 2026 by rpki-client