Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File:                     FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier:          Y5uTfeePllIIln35+2EjrMLsNJYRzybrW1Z3N8lNxBc=
Subject key identifier:   AE:FD:C3:27:B4:58:9A:E5:71:3E:95:06:B8:20:B7:71:8B:61:81:A0
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer:       /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial:       019CAAC667E78120402A13613E1CB0D45EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:55 +0000
Files and hashes:         1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: FPfOun/F/gRPa0qanS0vMmHafWsiJ0G/o0565PgtkRI=)
                          2: ZLCaZarmOydzUn6rnPA4DARgtdI.roa (hash: bWM+rtJ+nDproyFIfZ+Rzfa6rbod9ZVtKztR7u7HeaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:67:e7:81:20:40:2a:13:61:3e:1c:b0:d4:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
        Validity
            Not Before: Mar  1 19:00:55 2026 GMT
            Not After : Mar  2 19:00:55 2026 GMT
        Subject: CN=aefdc327b4589ae5713e9506b820b7718b6181a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:f8:bf:68:b3:c0:0c:ce:1c:9f:51:61:4f:
                    3a:72:f2:f8:20:49:9c:78:84:aa:ab:3c:ac:d5:3a:
                    3e:be:d6:f1:bb:41:0b:3d:d6:fa:5f:18:f2:89:ec:
                    d0:d3:41:61:47:88:2d:72:0e:00:e4:49:d6:27:1e:
                    98:c5:ea:d9:30:2e:13:df:d2:96:7c:ef:6f:c4:28:
                    ab:0b:09:38:54:52:08:ba:b0:99:67:db:43:2a:51:
                    a1:f1:37:77:10:ff:d8:5a:67:96:79:52:d7:4b:4a:
                    6a:e4:82:b4:ed:6d:17:8e:41:bc:60:8e:14:0b:cf:
                    ab:e3:6c:1f:41:b0:17:8b:f3:bd:7a:c5:94:b4:59:
                    25:05:a6:7d:af:4d:a1:41:2c:2f:0a:72:43:24:a4:
                    c1:5f:66:d5:bb:9e:60:6b:6d:f6:ad:78:aa:8c:61:
                    38:5d:c5:3a:66:de:89:98:ce:07:e4:ac:d4:9b:b8:
                    be:27:98:37:98:3b:9d:40:26:5e:81:7a:87:7e:db:
                    50:05:5c:65:e1:aa:eb:5f:cb:f7:8f:af:6b:a2:7e:
                    3a:df:f6:a9:d2:99:3f:75:08:52:00:49:b3:f7:48:
                    41:47:24:dd:d6:9c:e1:81:8b:6b:c0:4b:86:1d:6c:
                    b7:e4:6a:85:47:e8:0c:05:e8:db:4d:17:0f:69:49:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FD:C3:27:B4:58:9A:E5:71:3E:95:06:B8:20:B7:71:8B:61:81:A0
            X509v3 Authority Key Identifier:
                keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:85:45:f2:22:e4:f2:75:66:b7:e3:14:c8:4c:fe:37:a1:a2:
         1b:06:89:f2:b0:20:05:b6:fc:5d:d1:d0:ad:2e:07:06:f9:77:
         30:a6:f4:8f:01:3e:0b:6b:bf:38:8f:a3:34:60:d2:18:68:7d:
         a5:8c:6b:95:79:2a:ad:42:5f:b2:55:06:c6:03:49:fd:e4:e8:
         b7:a7:5a:15:55:e2:86:04:e2:f5:7c:e7:89:7e:ed:ca:9b:af:
         e0:c3:a6:3b:76:82:ac:64:92:5a:d7:93:cc:be:0c:d9:8a:9d:
         ed:1d:12:f1:bd:3a:d9:1d:6c:d9:17:2b:06:98:44:7b:1d:94:
         cc:63:eb:6f:e3:1f:2a:63:08:3f:cc:a3:9d:bc:93:b1:b9:b2:
         fc:de:dd:d5:79:88:f9:65:27:1f:fc:74:cc:fe:9a:7c:32:23:
         89:0d:49:df:33:04:3b:55:5d:31:52:9f:3b:b4:41:1b:e6:4e:
         4a:72:f1:2d:c0:59:cb:e2:cd:74:47:c9:a0:38:7d:d7:3c:24:
         75:57:88:1f:50:cb:ce:11:c2:50:73:b0:84:53:70:09:eb:4d:
         70:43:10:b9:3a:2a:80:39:33:22:f0:0c:30:bb:99:18:df:f0:
         b1:ef:41:08:3b:13:ff:64:3f:6e:51:65:27:e4:63:e4:48:54:
         2f:82:45:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmfngSBAKhNhPhyw1F7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzMzZmY4MmJlMDBiNDFhOTkwZGVkNmI3MmIwNGNiN2Jm
NTgwZDcwHhcNMjYwMzAxMTkwMDU1WhcNMjYwMzAyMTkwMDU1WjAzMTEwLwYDVQQD
EyhhZWZkYzMyN2I0NTg5YWU1NzEzZTk1MDZiODIwYjc3MThiNjE4MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5z4v2izwAzOHJ9RYU86cvL4IEmc
eISqqzys1To+vtbxu0ELPdb6XxjyiezQ00FhR4gtcg4A5EnWJx6YxerZMC4T39KW
fO9vxCirCwk4VFIIurCZZ9tDKlGh8Td3EP/YWmeWeVLXS0pq5IK07W0XjkG8YI4U
C8+r42wfQbAXi/O9esWUtFklBaZ9r02hQSwvCnJDJKTBX2bVu55ga232rXiqjGE4
XcU6Zt6JmM4H5KzUm7i+J5g3mDudQCZegXqHfttQBVxl4arrX8v3j69ron463/ap
0pk/dQhSAEmz90hBRyTd1pzhgYtrwEuGHWy35GqFR+gMBejbTRcPaUlLowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK79wye0WJrlcT6VBrggt3GLYYGgMB8GA1UdIwQY
MBaAFBVzP/gr4AtBqZDe1rcrBMt79YDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMt
YjJiZDY2ODg5YzI5LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMtYjJiZDY2ODg5YzI5
LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYVF8iLk
8nVmt+MUyEz+N6GiGwaJ8rAgBbb8XdHQrS4HBvl3MKb0jwE+C2u/OI+jNGDSGGh9
pYxrlXkqrUJfslUGxgNJ/eTot6daFVXihgTi9XzniX7typuv4MOmO3aCrGSSWteT
zL4M2Yqd7R0S8b062R1s2RcrBphEex2UzGPrb+MfKmMIP8yjnbyTsbmy/N7d1XmI
+WUnH/x0zP6afDIjiQ1J3zMEO1VdMVKfO7RBG+ZOSnLxLcBZy+LNdEfJoDh91zwk
dVeIH1DLzhHCUHOwhFNwCetNcEMQuToqgDkzIvAMMLuZGN/wse9BCDsT/2Q/blFl
J+Rj5EhUL4JFWw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:00 2026 by rpki-client