Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File:                     _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier:          hKLp8lRWBzCgqIBOmyLrzsBVtn023ij1IuSQJUQC+I0=
Subject key identifier:   F9:49:1D:C6:B4:2A:4B:D8:C2:FB:A8:20:43:19:30:BB:71:D5:96:D0
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer:       /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial:       019CAD5A34B9B3C16B2CB74E1AF48FAE9F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 07:01:35 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:35 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:35 +0000
Files and hashes:         1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: Nf2zv597fbhqLb9fU1n3jyMHDsGdzZ+YL2L/cVIJ9hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:34:b9:b3:c1:6b:2c:b7:4e:1a:f4:8f:ae:9f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
        Validity
            Not Before: Mar  2 07:01:35 2026 GMT
            Not After : Mar  3 07:01:35 2026 GMT
        Subject: CN=f9491dc6b42a4bd8c2fba820431930bb71d596d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:3c:d7:1b:89:e6:4c:f3:2c:b2:37:4c:71:
                    2f:d1:ba:66:ad:3a:ef:c6:12:d3:5c:e2:dc:ec:cd:
                    e1:79:36:d1:f4:9b:e9:24:85:57:66:36:f2:fb:11:
                    41:97:65:e9:5b:f5:4c:24:7c:86:5e:ce:4b:86:f2:
                    cc:97:18:28:6a:80:b2:b0:c8:01:a4:11:5a:24:4c:
                    ed:b8:2f:e9:0c:2f:fc:01:7e:76:00:96:18:cf:b3:
                    78:6a:37:2e:de:f8:16:cf:8b:ff:d0:f8:34:ea:f8:
                    f2:c5:e6:8e:0a:45:14:c6:d1:bf:fb:5a:d7:a8:cd:
                    e3:8b:4b:15:90:e3:cd:49:2a:1a:66:d1:e6:e9:67:
                    10:24:c2:a0:f7:57:72:60:a2:9b:ef:c1:94:b5:d6:
                    5a:f5:89:08:f4:6d:43:a2:c6:77:c6:04:a8:90:70:
                    18:33:42:0a:0c:3b:92:8f:f3:da:1b:fd:2c:c9:ab:
                    51:31:36:14:3a:bb:25:ff:61:10:2d:6b:1e:cc:96:
                    11:89:d5:13:36:50:19:db:b7:23:45:06:ca:6d:cb:
                    5b:1f:01:af:b4:b5:ad:88:53:55:65:50:88:2d:53:
                    bf:69:5d:24:05:0d:dc:c5:8f:b7:f4:2f:0b:e4:4e:
                    cc:39:7f:a2:ce:9c:da:b9:c4:ba:37:0b:5d:a5:c7:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:1D:C6:B4:2A:4B:D8:C2:FB:A8:20:43:19:30:BB:71:D5:96:D0
            X509v3 Authority Key Identifier:
                keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:e9:0a:58:21:cd:90:98:88:89:b9:14:6d:14:11:85:36:
         64:64:94:ed:af:6f:c2:33:ed:05:b0:7a:f7:71:14:d3:69:24:
         00:a3:55:97:6d:02:4e:1e:41:d2:99:b5:36:e2:f2:bc:f2:7f:
         75:ef:61:78:76:e8:19:3e:b5:6c:06:ea:8e:65:e5:a4:9a:65:
         ae:a2:f3:9e:23:4c:09:e4:88:e0:de:0b:00:47:50:ab:c5:d3:
         ee:1b:91:5b:b1:39:e0:b4:cf:77:8b:51:1f:81:ff:ac:90:b1:
         69:fd:fb:d0:90:5f:51:b1:e5:ee:52:b7:53:ff:0d:b5:57:9e:
         49:19:d4:28:66:f5:be:49:88:06:40:3f:ac:fa:39:6d:91:f5:
         b0:5d:d2:99:aa:24:a0:0a:d6:78:95:5f:55:91:28:1e:34:c4:
         2c:e8:25:90:7a:40:6a:85:3a:93:1c:3f:47:32:05:42:d4:09:
         0e:af:43:35:b8:12:50:06:ec:4f:00:9e:f5:53:74:6e:20:af:
         2e:a8:18:20:e5:79:45:75:f6:3e:6d:8e:eb:dd:a2:53:eb:e5:
         14:80:9c:40:c3:47:16:14:f0:d9:b0:56:49:a8:f5:dc:87:02:
         19:56:be:0b:15:bb:b3:86:a4:c2:a6:ac:30:f4:8d:8e:72:cd:
         82:7d:07:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWjS5s8FrLLdOGvSPrp+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh
Mjg3MTAwHhcNMjYwMzAyMDcwMTM1WhcNMjYwMzAzMDcwMTM1WjAzMTEwLwYDVQQD
EyhmOTQ5MWRjNmI0MmE0YmQ4YzJmYmE4MjA0MzE5MzBiYjcxZDU5NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vA81xuJ5kzzLLI3THEv0bpmrTrv
xhLTXOLc7M3heTbR9JvpJIVXZjby+xFBl2XpW/VMJHyGXs5LhvLMlxgoaoCysMgB
pBFaJEztuC/pDC/8AX52AJYYz7N4ajcu3vgWz4v/0Pg06vjyxeaOCkUUxtG/+1rX
qM3ji0sVkOPNSSoaZtHm6WcQJMKg91dyYKKb78GUtdZa9YkI9G1DosZ3xgSokHAY
M0IKDDuSj/PaG/0syatRMTYUOrsl/2EQLWsezJYRidUTNlAZ27cjRQbKbctbHwGv
tLWtiFNVZVCILVO/aV0kBQ3cxY+39C8L5E7MOX+izpzaucS6NwtdpcfVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlJHca0KkvYwvuoIEMZMLtx1ZbQMB8GA1UdIwQY
MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt
MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1
LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApw7pClgh
zZCYiIm5FG0UEYU2ZGSU7a9vwjPtBbB693EU02kkAKNVl20CTh5B0pm1NuLyvPJ/
de9heHboGT61bAbqjmXlpJplrqLzniNMCeSI4N4LAEdQq8XT7huRW7E54LTPd4tR
H4H/rJCxaf370JBfUbHl7lK3U/8NtVeeSRnUKGb1vkmIBkA/rPo5bZH1sF3Smaok
oArWeJVfVZEoHjTELOglkHpAaoU6kxw/RzIFQtQJDq9DNbgSUAbsTwCe9VN0biCv
LqgYIOV5RXX2Pm2O692iU+vlFICcQMNHFhTw2bBWSaj13IcCGVa+CxW7s4akwqas
MPSNjnLNgn0HUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:28 2026 by rpki-client