Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          G8bP9zJrJKTlH4pm4WhVrYt5M+l20VXysVkXtNGWLcM=
Subject key identifier:   E0:50:EE:48:19:91:00:B1:CC:FE:59:A6:92:F0:81:00:BD:46:1C:5F
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       019CAB6BD4ACE55FD94315BE563D0050DCF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          0B67
Signing time:             Sun 01 Mar 2026 22:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:36 +0000
Files and hashes:         1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: MIsH4Ftd+3Uyg/dLJJHZOXKRM2PqyVsMS3oXHqhV5kE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:d4:ac:e5:5f:d9:43:15:be:56:3d:00:50:dc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Mar  1 22:01:36 2026 GMT
            Not After : Mar  2 22:01:36 2026 GMT
        Subject: CN=e050ee48199100b1ccfe59a692f08100bd461c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:f3:f6:11:97:d1:35:e4:41:f9:4a:2e:1f:
                    5e:f2:52:c5:4e:02:a0:4e:80:74:cf:9a:0e:8b:d6:
                    9e:38:fd:60:f4:18:51:cf:46:23:ae:da:de:47:e6:
                    ae:b2:f7:e8:f0:2e:ae:36:fc:64:1d:b3:9e:b1:0a:
                    6e:d1:8c:fa:6d:b5:bb:5b:94:b2:ee:b0:41:63:e3:
                    25:a4:a1:e8:18:cc:a7:2b:7a:52:13:33:d4:5d:4f:
                    8e:8d:76:ba:a5:1b:66:08:8b:0c:47:f2:e4:ac:e4:
                    de:f0:e7:85:2f:af:bf:42:b4:fd:5b:63:7e:ee:5b:
                    23:21:0b:a0:c9:62:97:a5:21:67:fa:29:a6:07:fe:
                    c3:51:e1:a7:80:65:e6:ab:8f:d5:dd:7b:03:b4:61:
                    a6:35:a1:47:30:76:79:ea:87:4f:28:55:f2:69:72:
                    3f:4a:2a:10:a2:ec:3f:e4:2e:b8:0c:8d:28:b9:3d:
                    10:ad:a9:d4:da:05:b9:24:d7:48:5f:92:c0:7d:02:
                    21:2a:03:e3:b3:32:18:e1:b9:0e:18:22:a4:85:72:
                    c6:b0:72:fd:5d:7b:d3:99:51:c3:3c:d8:ff:49:d4:
                    fd:66:ca:69:ce:71:2b:bc:76:97:e8:3b:24:aa:08:
                    2e:b4:79:c6:ef:32:69:f0:57:5c:a8:00:ce:bd:fb:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:EE:48:19:91:00:B1:CC:FE:59:A6:92:F0:81:00:BD:46:1C:5F
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:45:14:49:9f:36:bd:70:56:99:74:b0:52:86:37:42:68:a5:
         67:1d:f7:91:ba:e8:ff:f3:54:19:82:69:8a:da:94:11:38:ac:
         e8:43:c2:20:63:0f:18:49:35:6e:1d:61:f0:3a:20:a0:d8:f4:
         e7:28:a4:39:8e:69:7a:59:68:a9:8a:6e:bd:a8:91:05:a6:1a:
         1d:61:a4:d2:59:06:5c:63:fc:7b:66:2f:42:3d:7f:84:e4:e7:
         7e:20:22:da:d4:6e:1e:b2:a4:49:ab:63:40:c7:3f:3e:6b:3b:
         be:00:df:8c:5e:96:3a:1b:83:67:68:4c:1d:c2:69:e2:d7:31:
         3f:0d:59:37:79:3a:0c:ed:e2:82:0e:e6:58:51:5d:77:a7:8a:
         30:da:42:d4:ae:02:20:d1:7f:35:7c:53:be:24:f2:17:09:0f:
         04:ea:ea:ee:21:42:6a:76:91:4f:7a:a6:64:61:2e:fb:54:cc:
         9f:62:8e:b0:4d:4f:5c:7a:7d:5c:8c:2b:07:b8:ce:c6:46:18:
         ec:25:30:9f:cc:dc:08:f1:86:55:d5:77:c8:b1:ff:ae:78:cb:
         9c:0f:c7:45:d4:5f:35:d3:64:86:25:4a:fc:37:0d:02:f9:82:
         81:18:57:ba:47:44:9c:1d:a7:00:5f:af:c5:4a:97:44:29:a8:
         ee:f3:4b:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra9Ss5V/ZQxW+Vj0AUNzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzczNTI1OWZkYjdiODNmMjc3YWRmMTJkMDhjYzk4YjVh
NjEwMGEwHhcNMjYwMzAxMjIwMTM2WhcNMjYwMzAyMjIwMTM2WjAzMTEwLwYDVQQD
EyhlMDUwZWU0ODE5OTEwMGIxY2NmZTU5YTY5MmYwODEwMGJkNDYxYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbz9hGX0TXkQflKLh9e8lLFTgKg
ToB0z5oOi9aeOP1g9BhRz0YjrtreR+ausvfo8C6uNvxkHbOesQpu0Yz6bbW7W5Sy
7rBBY+MlpKHoGMynK3pSEzPUXU+OjXa6pRtmCIsMR/LkrOTe8OeFL6+/QrT9W2N+
7lsjIQugyWKXpSFn+immB/7DUeGngGXmq4/V3XsDtGGmNaFHMHZ56odPKFXyaXI/
SioQouw/5C64DI0ouT0QranU2gW5JNdIX5LAfQIhKgPjszIY4bkOGCKkhXLGsHL9
XXvTmVHDPNj/SdT9ZsppznErvHaX6DskqggutHnG7zJp8FdcqADOvfugdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBQ7kgZkQCxzP5ZppLwgQC9RhxfMB8GA1UdIwQY
MBaAFBTHNSWf23uD8net8S0IzJi1phAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWIt
ZGJlYWY3ODQ4MTdhLzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWItZGJlYWY3ODQ4MTdh
LzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUUUSZ82
vXBWmXSwUoY3QmilZx33kbro//NUGYJpitqUETis6EPCIGMPGEk1bh1h8DogoNj0
5yikOY5pelloqYpuvaiRBaYaHWGk0lkGXGP8e2YvQj1/hOTnfiAi2tRuHrKkSatj
QMc/Pms7vgDfjF6WOhuDZ2hMHcJp4tcxPw1ZN3k6DO3igg7mWFFdd6eKMNpC1K4C
INF/NXxTviTyFwkPBOrq7iFCanaRT3qmZGEu+1TMn2KOsE1PXHp9XIwrB7jOxkYY
7CUwn8zcCPGGVdV3yLH/rnjLnA/HRdRfNdNkhiVK/DcNAvmCgRhXukdEnB2nAF+v
xUqXRCmo7vNLqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:31 2026 by rpki-client