Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File:                     FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier:          MayTl1VQ85y8ZaKC6uZyOoezAEU0HfAtGwdqP8WJX+4=
Subject key identifier:   F7:62:91:2C:C6:97:3D:F6:9D:47:69:C5:65:C5:66:DF:96:09:78:13
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer:       /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial:       019D9A3EA9DE9A0AEF9580773FE0C05D2B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 07:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:31 +0000
Files and hashes:         1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: lv3FE865HdLRU9DxeGLO0GLgfTEN6Wi7sNU8Z6ABuq8=)
                          2: ZLCaZarmOydzUn6rnPA4DARgtdI.roa (hash: bWM+rtJ+nDproyFIfZ+Rzfa6rbod9ZVtKztR7u7HeaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:a9:de:9a:0a:ef:95:80:77:3f:e0:c0:5d:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
        Validity
            Not Before: Apr 17 07:01:31 2026 GMT
            Not After : Apr 18 07:01:31 2026 GMT
        Subject: CN=f762912cc6973df69d4769c565c566df96097813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:f8:ff:ea:65:4e:61:c7:ec:3e:0c:01:ab:
                    bd:90:7d:a4:be:b6:49:54:55:b9:3e:a3:fc:fa:80:
                    4a:1f:05:8e:0e:8c:76:6f:ba:00:8b:a0:cc:3a:9f:
                    f1:18:50:50:68:8f:07:7c:79:a7:c9:ca:ab:53:78:
                    f5:a3:98:b9:08:08:21:6e:44:45:09:02:50:8c:ce:
                    54:4d:0d:e5:33:7a:20:a7:6e:d3:fc:f2:1b:44:d9:
                    0b:b0:c8:57:9e:bd:31:83:37:39:8a:69:89:1b:3f:
                    23:44:0b:e6:2b:48:be:c0:88:0a:1e:87:97:9d:f1:
                    72:26:9b:63:3d:43:4d:24:b2:9e:a8:49:88:22:3a:
                    27:13:bb:71:94:b2:a2:d4:50:62:dd:0b:1f:c8:79:
                    6b:e1:56:9f:52:d6:7d:d5:a4:70:78:df:4a:ad:a6:
                    74:cd:9d:ba:cc:97:4a:81:f9:96:fd:1b:f4:4f:61:
                    96:b2:23:ba:c0:4d:e0:a9:fe:4c:31:6b:75:f2:7c:
                    4a:48:38:c3:ea:8a:78:81:7f:c8:2c:21:37:d5:fd:
                    6d:c6:05:b4:05:ed:8c:85:1c:57:dd:dc:27:e5:31:
                    53:ad:79:81:bf:58:aa:95:3d:09:d4:a6:ea:ef:8f:
                    6d:81:4c:c7:11:d7:2b:c2:c8:8d:5e:fc:b7:87:37:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:62:91:2C:C6:97:3D:F6:9D:47:69:C5:65:C5:66:DF:96:09:78:13
            X509v3 Authority Key Identifier:
                keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:66:1d:3c:32:78:9b:bd:7d:e5:22:f1:ec:67:d5:f3:18:
         f8:28:66:c4:e0:50:0c:79:1d:1d:a8:29:b8:af:71:f5:89:fb:
         00:44:5a:c9:2b:f7:25:80:c2:a6:b5:0f:3b:f9:e2:18:3e:6e:
         e4:d3:ba:6d:5d:99:db:03:1c:86:d5:a0:01:3d:21:b0:70:d8:
         9e:01:35:6f:1e:0d:2f:1a:f1:2c:3c:e1:5f:eb:2d:2c:2b:4e:
         77:f3:11:36:7e:11:35:6c:86:59:6f:95:b9:43:c3:fe:66:34:
         7c:dc:e0:71:46:1b:35:bf:37:6d:c8:0e:3d:f0:2e:86:39:46:
         96:b9:ce:81:e6:bc:a0:2d:58:35:27:09:b3:a7:08:46:3e:53:
         56:32:6c:31:32:f3:ed:ff:62:85:f3:ae:af:cc:fa:88:bc:4e:
         e2:05:ae:1d:b0:4e:82:96:3f:96:c5:f5:e7:a2:de:e2:60:10:
         85:3c:83:c5:01:32:f3:5e:a5:f3:8d:69:31:4d:f0:ab:15:51:
         26:ce:dd:7e:78:96:a1:c1:ae:9e:99:1a:ef:c6:b4:9b:10:aa:
         89:2d:fb:05:d7:e6:2f:4a:ee:95:ff:31:fe:7c:d4:25:0b:72:
         44:3d:7d:c6:2d:5c:25:6e:46:31:c2:80:48:8b:71:91:6d:6c:
         f6:74:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:17 2026 by rpki-client