Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          aNiVZxvA0ExOapndIFJnS3qcpCILzPLo6Sdwb72RR4I=
Subject key identifier:   B5:37:51:1B:87:29:CB:CF:C5:93:16:E4:89:5E:3F:F6:B2:A2:D5:C2
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       019CA9EB7D957C373EC7FEF6BED47F61F2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 15:01:48 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:48 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:48 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: qUKfnetJtmLo7ZUPLadhh3dkEEvhCCIT05B2yWKEgxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:7d:95:7c:37:3e:c7:fe:f6:be:d4:7f:61:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Mar  1 15:01:48 2026 GMT
            Not After : Mar  2 15:01:48 2026 GMT
        Subject: CN=b537511b8729cbcfc59316e4895e3ff6b2a2d5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:df:07:33:59:6f:18:4b:6a:bc:68:d5:be:
                    0d:a8:81:c8:f7:b3:30:ef:6a:55:87:b2:ec:80:e7:
                    7c:56:e4:43:fd:44:2e:02:62:a0:55:32:2f:a7:89:
                    a9:f8:49:35:ae:03:5c:45:67:81:d2:03:3c:14:5a:
                    94:03:5b:7f:86:18:a0:e0:92:38:82:84:e9:4d:ca:
                    a4:54:60:44:b0:42:88:21:e1:fe:af:49:60:e3:46:
                    f1:a6:6c:0a:23:dd:15:6a:78:17:d6:2c:60:48:61:
                    8c:45:48:63:73:7f:c7:fa:68:4d:44:02:c1:df:f6:
                    35:24:19:f2:d8:29:f4:4b:42:1b:0c:00:fb:a3:00:
                    80:c1:6a:a7:a3:3d:fc:75:88:62:6c:a2:8e:04:11:
                    6f:89:af:77:bb:3b:41:f8:06:57:ad:4e:22:6d:a7:
                    3f:42:70:2f:83:75:63:3d:65:2f:1b:fd:44:22:be:
                    b2:ff:67:25:1b:12:d4:19:36:82:09:15:37:92:9b:
                    86:24:ce:63:56:03:e2:5e:53:ec:e4:ee:b3:26:71:
                    85:d4:22:54:a2:06:ee:53:fb:1a:5f:73:aa:45:af:
                    a3:cf:4f:8f:5f:07:61:70:54:b6:66:74:e0:59:cc:
                    3b:de:26:ed:79:e9:1c:d7:8b:a3:f0:0b:be:f6:fc:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:37:51:1B:87:29:CB:CF:C5:93:16:E4:89:5E:3F:F6:B2:A2:D5:C2
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:fa:68:cd:ed:1b:0e:d4:de:af:9f:75:90:2a:49:1f:59:
         a0:44:3a:2f:04:71:1c:d7:67:a4:c4:a7:fb:58:cf:c0:85:6d:
         44:65:c5:ff:fd:6a:a5:da:d0:9b:d9:72:86:de:92:86:fa:32:
         43:36:42:a4:a8:30:81:97:64:d4:f4:56:d2:df:c8:ef:60:53:
         b6:ce:06:34:d5:db:44:ff:bb:4d:7a:6f:92:e2:d6:a5:95:44:
         a0:71:9b:2f:81:5e:89:cd:0e:fe:c9:ae:62:af:e0:01:bd:40:
         a5:4e:d2:10:12:32:dd:b7:56:a7:c8:65:05:fe:64:44:0c:25:
         c2:90:d4:1c:70:f6:cc:9c:af:00:b2:a4:a2:59:71:2b:2a:cc:
         6d:d0:57:a2:ab:00:3e:0f:bb:52:1f:bf:1b:9b:de:b0:97:cb:
         a0:84:4e:b6:a2:06:02:84:19:0e:b5:9b:71:fa:39:95:07:af:
         5c:c1:1a:d1:0a:2b:e4:12:7d:cf:1c:2c:3f:a2:c1:41:16:c8:
         1d:02:4a:41:4d:9f:b1:fa:7c:69:a9:58:31:1f:70:e8:be:32:
         a4:f1:32:ff:81:ab:28:d2:f8:5f:31:38:c3:4a:09:82:ab:d0:
         49:fb:4a:de:c4:a0:af:11:3c:11:c9:92:30:84:2b:2b:f8:30:
         d0:fa:7c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp632VfDc+x/72vtR/YfLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0
ZjYzYWEwHhcNMjYwMzAxMTUwMTQ4WhcNMjYwMzAyMTUwMTQ4WjAzMTEwLwYDVQQD
EyhiNTM3NTExYjg3MjljYmNmYzU5MzE2ZTQ4OTVlM2ZmNmIyYTJkNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rXfBzNZbxhLarxo1b4NqIHI97Mw
72pVh7LsgOd8VuRD/UQuAmKgVTIvp4mp+Ek1rgNcRWeB0gM8FFqUA1t/hhig4JI4
goTpTcqkVGBEsEKIIeH+r0lg40bxpmwKI90VangX1ixgSGGMRUhjc3/H+mhNRALB
3/Y1JBny2Cn0S0IbDAD7owCAwWqnoz38dYhibKKOBBFvia93uztB+AZXrU4ibac/
QnAvg3VjPWUvG/1EIr6y/2clGxLUGTaCCRU3kpuGJM5jVgPiXlPs5O6zJnGF1CJU
ogbuU/saX3OqRa+jz0+PXwdhcFS2ZnTgWcw73ibteekc14uj8Au+9vyZ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU3URuHKcvPxZMW5IleP/ayotXCMB8GA1UdIwQY
MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt
ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1
LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9P6aM3t
Gw7U3q+fdZAqSR9ZoEQ6LwRxHNdnpMSn+1jPwIVtRGXF//1qpdrQm9lyht6Shvoy
QzZCpKgwgZdk1PRW0t/I72BTts4GNNXbRP+7TXpvkuLWpZVEoHGbL4Feic0O/smu
Yq/gAb1ApU7SEBIy3bdWp8hlBf5kRAwlwpDUHHD2zJyvALKkollxKyrMbdBXoqsA
Pg+7Uh+/G5vesJfLoIROtqIGAoQZDrWbcfo5lQevXMEa0Qor5BJ9zxwsP6LBQRbI
HQJKQU2fsfp8aalYMR9w6L4ypPEy/4GrKNL4XzE4w0oJgqvQSftK3sSgrxE8EcmS
MIQrK/gw0Pp88w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:16 2026 by rpki-client