Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
File:                     fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json)
Hash identifier:          +0uaSuYP+RIU/WBul5Aa5g7p0kNMwRC9pTXSzTeZ8vg=
Subject key identifier:   4D:90:19:92:09:30:B4:A8:A3:BE:A0:A0:B8:F6:3E:93:3B:AD:11:51
Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75
Certificate issuer:       /CN=7f296657af8d00c25fd75f56ecc8a28b35150575
Certificate serial:       019D29979287FD3AEEA4E73B131BA6CCF926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
Manifest number:          11BC
Signing time:             Thu 26 Mar 2026 10:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:32 +0000
Files and hashes:         1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: XugtK6rjSk17tytpao/5IxYVtQgeUb45Djwg4uw3SoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:92:87:fd:3a:ee:a4:e7:3b:13:1b:a6:cc:f9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575
        Validity
            Not Before: Mar 26 10:01:32 2026 GMT
            Not After : Mar 27 10:01:32 2026 GMT
        Subject: CN=4d9019920930b4a8a3bea0a0b8f63e933bad1151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:64:83:52:fb:79:12:e2:65:c9:a9:27:49:
                    1c:68:19:73:5a:9b:8c:82:6a:23:51:fd:d1:56:7d:
                    0a:d7:39:63:7c:a0:dc:1d:0e:73:8b:83:2b:0d:1b:
                    cc:c7:4d:7d:ed:18:3e:05:35:df:0b:3b:4b:67:b2:
                    a9:e7:b6:64:7e:f9:e2:ee:06:9e:28:3e:43:bb:50:
                    e1:c4:7f:12:d1:2f:f9:ad:3b:ad:37:c8:67:3e:4b:
                    02:ac:8e:6a:0b:68:d1:a6:fc:d9:1f:8d:5e:b8:22:
                    0a:4a:09:5a:67:35:41:c0:c5:f4:f3:ba:cf:ff:ea:
                    43:9c:c3:5f:a6:b5:b7:9e:b2:61:a1:2e:53:da:15:
                    ed:ac:26:68:57:0f:8f:44:aa:fa:de:9a:13:52:b7:
                    77:4e:ec:bc:c4:12:95:e8:50:a5:5c:6d:c6:84:98:
                    57:34:cf:3c:d9:5a:c1:f0:f8:1e:17:71:01:b2:00:
                    c8:aa:9a:03:9d:63:64:74:39:ad:24:34:db:53:31:
                    43:f7:94:38:c2:4d:71:2b:44:9e:93:63:6b:55:c6:
                    cc:e2:c1:78:21:53:1c:6a:b3:f2:de:2d:93:f3:a4:
                    79:1f:29:2e:c2:9d:a0:49:19:37:af:af:18:8a:7a:
                    37:f1:e3:c8:12:c7:fd:62:0f:08:73:25:4d:9e:3c:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:19:92:09:30:B4:A8:A3:BE:A0:A0:B8:F6:3E:93:3B:AD:11:51
            X509v3 Authority Key Identifier:
                keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:f6:12:9e:23:df:30:01:c3:78:5a:ab:a7:45:1f:fc:59:
         45:ed:11:b5:c0:fc:9d:7c:ab:2c:a9:8b:b2:fa:f8:47:89:4a:
         78:12:3c:95:22:55:37:39:19:aa:da:47:4b:c7:ea:fc:53:6f:
         5e:56:93:02:d4:d6:f5:fe:d0:fc:93:1d:64:7f:e1:d8:af:56:
         97:7f:34:b5:1f:7f:cf:9c:aa:06:7f:05:11:5d:9b:16:02:bd:
         f6:63:61:21:66:26:de:bc:a4:4b:2a:b4:f4:a6:95:e8:f5:70:
         e4:26:ee:68:a1:2a:44:3c:ae:70:fa:54:00:87:ef:01:ee:e2:
         1b:70:62:18:43:e3:e7:54:b5:4a:93:a0:42:43:36:aa:4e:56:
         dc:28:76:d5:d1:17:e0:f2:f1:37:c2:06:e6:f4:ac:67:4d:c0:
         0a:d5:48:3c:5b:cb:6f:36:9a:da:bb:9d:a5:c1:bb:a4:c3:3b:
         6d:bf:e7:cb:4a:57:be:fd:55:df:7d:2f:22:8e:d7:4b:50:aa:
         6d:99:ed:bc:35:43:a1:b0:bf:df:b6:7f:d9:6a:ac:ba:ef:bf:
         e3:58:5e:aa:ea:06:6f:9f:77:ed:fb:75:cf:31:b4:a5:62:36:
         7e:a5:ee:d0:a9:c2:0f:cb:44:42:d4:8b:df:f1:c0:b7:59:38:
         cd:fe:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:19 2026 by rpki-client