Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          xvMrgjAO/qhjAhsK7KeT063GZacHMzgJM7v3DVYKZEA=
Subject key identifier:   61:18:AE:F0:70:DD:7D:22:BE:FE:C2:4A:A0:4C:42:AF:27:B6:2C:90
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       019D2816595A93F670386C3BAB4E85642C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          177E
Signing time:             Thu 26 Mar 2026 03:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:46 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: GupUZHCYsRJuADzWx6SDd383CMsUZGirjBU97kDIw8g=)
                          2: nn-g8Y9kxqQKUzRTa6imN-OeA08.roa (hash: jwuMNXmrVdDCW+s03h/KvzRrrZv0xRVmb6hoLkPXRKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:59:5a:93:f6:70:38:6c:3b:ab:4e:85:64:2c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Mar 26 03:00:46 2026 GMT
            Not After : Mar 27 03:00:46 2026 GMT
        Subject: CN=6118aef070dd7d22befec24aa04c42af27b62c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6d:55:66:55:43:c5:7d:dc:95:5d:68:c5:da:
                    58:30:6c:6b:ae:b4:e9:94:55:70:35:c5:cf:82:27:
                    9c:e1:73:c2:fd:08:8e:47:cd:be:ba:1d:db:37:9f:
                    77:2d:34:7b:cb:e1:14:65:ae:fb:de:dc:4f:fa:5b:
                    8f:12:fb:0e:7d:7f:20:e3:41:6d:d1:3e:6c:61:06:
                    66:d7:7c:f2:a7:c2:55:3a:66:d6:08:73:0d:40:9d:
                    69:b1:68:e0:c1:2a:d9:36:82:20:56:1d:56:78:97:
                    b1:16:30:81:ae:d8:e5:43:aa:1d:45:fc:61:2d:86:
                    03:a6:0b:14:b0:ed:5b:62:34:61:45:21:d2:fc:3c:
                    f9:0f:65:8e:4d:1e:8c:53:aa:c7:6f:fe:95:a0:3a:
                    b0:91:65:a5:bf:87:18:1b:d1:04:00:64:42:40:cf:
                    c9:a8:09:93:c5:40:eb:3e:8e:b1:f8:fe:6f:d0:d4:
                    84:10:dd:f3:1c:c3:3e:8d:d7:65:e4:4c:e6:be:33:
                    1b:00:0f:39:e7:d3:2e:b3:61:66:96:23:41:4e:1d:
                    28:96:ee:4e:eb:51:b0:47:41:ee:99:3a:bb:f0:e2:
                    6c:e0:51:70:9f:a3:31:ec:75:3a:ac:6f:e6:9d:e5:
                    70:ae:a3:90:84:3f:4e:83:21:ed:c1:e9:28:61:5d:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:AE:F0:70:DD:7D:22:BE:FE:C2:4A:A0:4C:42:AF:27:B6:2C:90
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:22:21:89:c8:12:41:41:4e:f3:96:14:c1:55:a7:50:e6:d3:
         85:12:f0:06:23:29:9e:a8:a0:0d:25:e0:5a:42:17:ae:7f:1d:
         4c:a2:50:a7:fa:ff:7e:b5:40:af:a9:ce:e3:bb:25:6c:25:f8:
         3c:eb:b2:f2:35:1e:0d:00:ac:d6:6e:cb:5e:47:ce:63:87:89:
         4a:13:84:87:65:8e:ca:95:59:3f:4c:e2:f2:c0:0e:e0:51:73:
         b9:ff:28:03:45:07:d5:53:1a:3b:ab:21:d6:ef:ce:c2:48:60:
         2c:55:e1:b4:d8:ea:87:48:80:64:ea:21:15:a9:3d:94:e4:29:
         7a:65:fc:97:12:c8:3a:18:0e:ba:2f:65:d4:74:c2:5e:e1:b5:
         e3:5c:f7:a6:4c:af:78:7b:1d:72:f8:fc:e0:a6:33:ed:a5:b1:
         7c:1a:d2:9a:fc:d9:08:46:d6:e8:65:bd:75:d3:c6:90:1f:e4:
         58:6a:dc:48:a9:38:20:bf:06:1d:d3:65:aa:04:88:3d:24:83:
         ef:cc:90:b8:84:4d:38:ef:2f:65:f8:a7:82:1f:ee:70:ad:bc:
         31:52:e4:b9:8d:54:a7:a2:ce:89:e9:bb:07:cc:6d:4c:e2:b7:
         b9:76:d5:67:19:7f:52:bd:11:9a:36:21:ee:fe:a8:65:4d:1e:
         b1:68:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:14 2026 by rpki-client