Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File:                     eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier:          pUcUnhZ98adPb4w3VrNufMpJuOKb/X5/mfFvvq6L01E=
Subject key identifier:   CC:E2:EE:54:89:66:C1:50:59:2B:2C:4D:F4:13:76:8C:EE:34:08:5B
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer:       /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial:       019CAF478D119DE2AC5CCDAB2B8DE0E414FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 16:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 16:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 16:00:27 +0000
Files and hashes:         1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: qz971qI+fZu1Ig0vWq62EH72oNsrWaBVaqXtIGvvVWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:47:8d:11:9d:e2:ac:5c:cd:ab:2b:8d:e0:e4:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
        Validity
            Not Before: Mar  2 16:00:27 2026 GMT
            Not After : Mar  3 16:00:27 2026 GMT
        Subject: CN=cce2ee548966c150592b2c4df413768cee34085b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:55:a6:d9:ca:07:a0:55:d9:f7:a2:e6:bf:
                    af:80:3a:d2:01:b4:cd:3c:95:9f:ea:25:93:1b:4e:
                    2d:b9:24:60:43:0c:94:5f:54:7e:f0:8e:ac:7e:e5:
                    29:ba:0d:d7:de:02:b9:6f:23:af:dd:32:1d:8f:fa:
                    0f:50:f9:40:27:13:46:e3:69:76:8e:a3:13:c6:af:
                    06:61:23:3c:d4:ab:64:81:0f:ad:a9:82:73:42:e1:
                    b4:61:ac:f2:2a:c0:24:fe:ae:ee:b3:a0:f1:52:2d:
                    38:de:f5:74:60:46:e5:f1:42:10:9e:1e:29:18:05:
                    c8:61:8e:e9:5b:4e:e4:bd:d1:1d:3f:f9:b2:c4:7c:
                    98:19:15:7a:57:17:ba:2a:9d:c8:e9:c0:b8:f1:d0:
                    1e:b8:45:5a:d6:01:e7:0c:fe:85:ed:9d:37:3d:8d:
                    9f:e7:b4:67:70:e1:96:ce:a4:6e:1d:26:c7:e2:75:
                    a5:fb:d5:63:f2:90:06:82:21:cd:bd:c7:1b:e2:e0:
                    0e:59:7f:b4:07:b3:81:49:ed:59:0e:08:6c:d9:eb:
                    28:94:60:7b:8b:a6:41:30:a9:21:c7:76:f3:da:b9:
                    0f:06:01:ca:5c:5f:f7:48:d7:b7:c6:7d:b9:2d:4d:
                    0d:5a:fa:03:cb:bc:9b:37:67:7a:16:a6:d2:e4:9f:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E2:EE:54:89:66:C1:50:59:2B:2C:4D:F4:13:76:8C:EE:34:08:5B
            X509v3 Authority Key Identifier:
                keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:e6:21:88:9c:41:5e:36:e1:41:fb:26:60:01:54:b1:52:
         22:82:ad:d6:da:9f:2f:ff:60:e3:1b:c1:b4:7c:3d:8f:f7:67:
         a6:95:29:60:8b:51:e2:a3:8f:ef:95:0c:21:a5:89:f4:8e:c2:
         e6:90:c9:20:32:2c:ba:f0:dd:05:a6:8c:41:69:c3:42:7b:b7:
         1c:95:31:60:a4:a0:91:c5:bc:c6:76:86:95:83:af:a2:77:65:
         e0:b9:66:5b:9a:8e:6c:06:1f:31:2b:59:7e:c1:ce:92:01:68:
         b0:d5:e6:c6:7c:38:4a:36:cf:71:02:a8:db:43:15:1e:a5:c8:
         d4:43:b8:af:18:e0:99:77:24:14:4d:d8:c7:c3:3a:bb:0c:ff:
         f1:c2:70:ad:5d:03:24:fe:11:b5:ee:2f:6d:74:51:d7:78:85:
         e9:b1:03:3e:a5:00:18:f7:23:48:ae:0c:07:b7:13:50:4f:cc:
         11:ab:c8:1a:67:85:11:3c:f1:0f:43:78:89:0a:28:02:5d:a0:
         a7:f7:01:79:ff:e5:86:f2:5f:e7:ee:33:e8:ed:32:09:32:5c:
         0e:73:91:b4:66:93:42:51:78:e0:a4:a0:50:e4:00:b0:4f:7c:
         19:36:b8:67:d9:94:82:a3:ca:95:72:00:3f:36:dd:33:13:71:
         28:66:09:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR40RneKsXM2rK43g5BT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTk2NjljMmI3YzBiMjVjMDdlNzkzMmI4YTFmOThiMGJi
ZWRjNGMwHhcNMjYwMzAyMTYwMDI3WhcNMjYwMzAzMTYwMDI3WjAzMTEwLwYDVQQD
EyhjY2UyZWU1NDg5NjZjMTUwNTkyYjJjNGRmNDEzNzY4Y2VlMzQwODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUFVptnKB6BV2fei5r+vgDrSAbTN
PJWf6iWTG04tuSRgQwyUX1R+8I6sfuUpug3X3gK5byOv3TIdj/oPUPlAJxNG42l2
jqMTxq8GYSM81KtkgQ+tqYJzQuG0YazyKsAk/q7us6DxUi043vV0YEbl8UIQnh4p
GAXIYY7pW07kvdEdP/myxHyYGRV6Vxe6Kp3I6cC48dAeuEVa1gHnDP6F7Z03PY2f
57RncOGWzqRuHSbH4nWl+9Vj8pAGgiHNvccb4uAOWX+0B7OBSe1ZDghs2esolGB7
i6ZBMKkhx3bz2rkPBgHKXF/3SNe3xn25LU0NWvoDy7ybN2d6FqbS5J8LdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzi7lSJZsFQWSssTfQTdozuNAhbMB8GA1UdIwQY
MBaAFHhZZpwrfAslwH55Mrih+YsLvtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2Njkt
ZmMzNTU5Njk2MjQ2LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2NjktZmMzNTU5Njk2MjQ2
LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv3mIYic
QV424UH7JmABVLFSIoKt1tqfL/9g4xvBtHw9j/dnppUpYItR4qOP75UMIaWJ9I7C
5pDJIDIsuvDdBaaMQWnDQnu3HJUxYKSgkcW8xnaGlYOvondl4LlmW5qObAYfMStZ
fsHOkgFosNXmxnw4SjbPcQKo20MVHqXI1EO4rxjgmXckFE3Yx8M6uwz/8cJwrV0D
JP4Rte4vbXRR13iF6bEDPqUAGPcjSK4MB7cTUE/MEavIGmeFETzxD0N4iQooAl2g
p/cBef/lhvJf5+4z6O0yCTJcDnORtGaTQlF44KSgUOQAsE98GTa4Z9mUgqPKlXIA
PzbdMxNxKGYJ3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:19 2026 by rpki-client