Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File:                     fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier:          vix0e+N1nvvMioB4rp6vM4cPds9hxF//XAScgKFk62U=
Subject key identifier:   FA:E6:6A:09:87:DD:EA:5B:C6:9E:C0:54:B5:35:CD:1C:77:8F:08:B8
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer:       /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial:       019CAB6B9E34133CB6C3A2D14772389CE5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:22 +0000
Files and hashes:         1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: r9DNxLLHvb/0omk/kUsgksZR2rha3CE6geWQHymyv1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:9e:34:13:3c:b6:c3:a2:d1:47:72:38:9c:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
        Validity
            Not Before: Mar  1 22:01:22 2026 GMT
            Not After : Mar  2 22:01:22 2026 GMT
        Subject: CN=fae66a0987ddea5bc69ec054b535cd1c778f08b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:81:b2:70:18:c2:86:2a:ac:3d:8d:4f:68:
                    e2:9a:27:49:bd:96:0a:c5:75:22:f1:72:50:d5:78:
                    ee:2a:10:f5:b1:3e:ce:91:f3:01:c7:e0:04:45:04:
                    14:c5:af:e4:81:d9:f8:b0:b7:b0:04:5e:2e:84:60:
                    68:ce:72:24:aa:23:fc:91:27:4a:06:b0:c2:30:49:
                    3a:25:19:3b:34:40:3c:07:9b:b7:79:16:6d:8f:ca:
                    c3:ab:42:d2:70:ac:f0:01:21:75:dc:7c:6f:ae:c5:
                    0d:ea:11:c2:a1:f9:af:30:86:9e:5b:8a:13:2a:e2:
                    18:8b:4f:d5:c2:c8:18:e5:e5:01:c3:c1:0c:22:8a:
                    c7:3e:24:4b:12:6e:d6:b1:34:51:04:20:30:df:df:
                    14:82:c0:bb:b0:e5:93:d8:bd:69:ca:f7:b6:5d:c9:
                    ad:68:e5:a4:cb:1b:17:1d:14:3f:2e:de:f7:55:c9:
                    a3:b6:9e:53:38:e9:2d:df:a8:9e:18:c3:35:f2:a4:
                    d0:b7:fb:1c:26:37:d0:b3:0b:89:83:f8:3d:ce:35:
                    fb:27:39:53:c0:58:c8:b8:da:8f:d3:ff:c0:b0:16:
                    ba:7b:31:73:f8:a6:d3:e7:f8:8d:2e:e9:a6:26:44:
                    09:96:b6:ca:2c:c5:74:a6:61:7f:25:be:c1:fe:96:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:6A:09:87:DD:EA:5B:C6:9E:C0:54:B5:35:CD:1C:77:8F:08:B8
            X509v3 Authority Key Identifier:
                keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:7d:d4:3b:71:2c:a6:a0:8a:a4:7b:e3:6a:bd:68:47:ed:
         2a:58:ca:1d:76:0f:d2:3c:72:3f:86:6c:96:dd:19:0d:de:30:
         83:02:31:9c:e2:5e:6f:3d:01:55:63:9f:db:05:5e:a5:60:5a:
         61:fa:4c:d8:6c:8f:0d:05:fe:33:21:02:7a:16:5b:8f:9f:8e:
         d9:79:f6:f1:11:31:17:b1:59:3f:95:42:d3:73:fc:56:cb:75:
         ae:84:66:3e:41:01:6a:7d:4e:a5:e9:36:68:57:22:50:68:99:
         15:1f:56:ce:a2:fa:a6:3a:73:fc:e3:87:e1:56:27:64:05:f3:
         97:05:d8:a4:ba:90:64:41:df:62:4a:a0:1c:de:c1:b3:25:56:
         83:46:f2:00:fa:2f:96:f2:06:1f:30:cf:70:ba:78:f3:8d:a0:
         ec:3e:16:7c:bb:f7:85:27:44:ca:33:9d:eb:df:99:57:e6:18:
         bf:4d:38:fe:a3:38:80:4b:c3:d7:91:bf:ef:dc:57:d4:67:c1:
         8e:ac:89:9b:f3:8b:d6:3f:a1:e5:90:70:4c:1b:0c:6f:7c:a2:
         8b:e4:1d:30:92:a6:89:3e:e2:6f:56:af:d1:b4:4e:11:08:80:
         64:23:5e:3c:87:18:61:53:a7:a4:69:b9:7b:5b:a8:a1:80:98:
         5e:84:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:56 2026 by rpki-client