Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          eMnqeT56n4wd0qa7y1L8DNZ4yOxHWaBUfohtLgMHvEg=
Subject key identifier:   2A:29:1E:76:58:EA:08:E4:18:42:C3:9E:57:0F:05:65:BC:8C:13:22
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       019CAAC6DBDCA11A4B05AFC1621907705FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 19:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:24 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: KY3PhlZ10h7q8JRI9C0AWw6BOSo09nS7UVH6Xu/EN1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:db:dc:a1:1a:4b:05:af:c1:62:19:07:70:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Mar  1 19:01:24 2026 GMT
            Not After : Mar  2 19:01:24 2026 GMT
        Subject: CN=2a291e7658ea08e41842c39e570f0565bc8c1322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:eb:d2:47:af:d9:3c:ab:7e:09:c6:de:a0:
                    88:4c:e6:c2:b8:ac:08:8f:19:c3:8a:36:9a:ec:90:
                    71:c0:7f:92:19:4e:6f:92:aa:aa:b0:32:a9:06:7d:
                    69:35:6a:d6:1d:68:bc:d4:03:e2:3e:56:a9:c4:ec:
                    79:6d:56:17:b1:1a:37:9f:e3:3c:ae:32:69:b8:03:
                    d8:9a:80:27:ff:40:1f:f2:c1:cd:42:c8:94:42:0b:
                    b0:46:a5:68:09:f2:0b:c1:0b:b1:2e:e5:8a:4d:2e:
                    20:72:b7:d4:fe:04:82:61:9d:28:d1:cb:40:ee:f9:
                    41:55:19:90:bc:17:08:04:a3:c6:d5:56:58:39:a1:
                    db:cb:63:47:03:75:93:ff:a2:18:ed:a5:37:1e:31:
                    4d:eb:e8:59:78:aa:e3:e4:32:55:a6:1c:3b:b0:62:
                    3f:37:16:88:29:58:b9:bd:2d:04:3b:80:b9:15:07:
                    91:ea:0a:09:4b:b0:1e:d1:6e:a1:c4:d6:78:d4:c4:
                    a9:43:56:3b:20:2f:2d:a3:36:e9:d9:a3:23:11:88:
                    cc:12:5a:32:fa:b6:ce:18:73:d9:e4:63:bc:fb:64:
                    a0:f8:af:bb:4f:9a:78:d4:eb:0e:fa:b3:e6:99:b2:
                    8c:5b:7c:a2:c6:35:7f:03:cb:6f:62:25:5a:9e:18:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:1E:76:58:EA:08:E4:18:42:C3:9E:57:0F:05:65:BC:8C:13:22
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:f7:45:bb:0e:8c:e4:95:cf:4b:22:5e:67:8a:df:8e:a7:
         93:9e:23:f4:0f:e0:10:67:7e:45:16:d6:ff:7e:2e:52:16:23:
         cb:60:10:94:29:79:91:df:a2:55:4c:ac:68:29:c5:47:39:c9:
         de:4c:c8:1c:38:c7:d2:08:a9:93:d9:6b:fa:6b:07:89:2c:12:
         81:bd:db:6f:79:ff:2d:40:c0:bf:50:c8:cb:f9:09:04:12:9a:
         a3:71:b7:ff:20:c8:bf:62:51:7b:91:38:73:f9:17:f7:b0:62:
         0b:32:f8:59:c2:f0:f0:cd:ed:64:52:63:75:20:43:71:45:85:
         10:09:41:f3:5a:09:b3:35:54:b7:ff:5a:af:90:2b:d4:bd:36:
         f8:1f:c5:28:c0:2d:89:5f:8d:3a:50:e4:92:32:a0:77:40:3f:
         4f:e8:e9:03:c8:2b:4c:b2:5f:c8:c8:5e:d7:ec:d3:3b:20:b2:
         77:f3:74:e4:c2:f0:e2:fe:f1:29:91:ef:46:e9:69:09:41:02:
         7e:d5:ee:0b:dd:b7:7f:56:10:24:02:db:4d:d0:7f:f6:5c:0f:
         cf:ac:4d:30:03:c7:7e:ed:e8:dc:d1:18:c0:ef:7a:7d:64:8b:
         58:8b:89:b1:70:3a:b4:6f:8e:d1:bc:7f:64:b4:6a:31:0c:e6:
         06:fe:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:35 2026 by rpki-client