Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
File:                     FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json)
Hash identifier:          ucTbf9Zvu0tn/qA4OHqorlHBRRdipEx3cwdqw95Az/0=
Subject key identifier:   FB:3C:59:52:74:44:D9:23:99:7F:30:81:E5:41:7F:D3:A3:F5:C5:56
Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
Certificate issuer:       /CN=14754e863d117ce6210f295461a8c6aa043c6c80
Certificate serial:       019D27724D6F95BF77D5932FA79360F6F6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
Manifest number:          1882
Signing time:             Thu 26 Mar 2026 00:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:35 +0000
Files and hashes:         1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: CK8nlI0s3UbUzXvTzhbuRUPNy5uwsacu82Sxg4yVFvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:4d:6f:95:bf:77:d5:93:2f:a7:93:60:f6:f6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80
        Validity
            Not Before: Mar 26 00:01:35 2026 GMT
            Not After : Mar 27 00:01:35 2026 GMT
        Subject: CN=fb3c59527444d923997f3081e5417fd3a3f5c556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:a7:e4:9f:84:be:b4:da:c9:1d:49:8e:e1:
                    f0:04:a4:0f:10:e7:e1:74:5e:4d:8f:68:82:bd:00:
                    8a:dd:3a:32:6f:43:2f:16:7f:c4:3c:7f:53:fd:09:
                    02:f1:16:0e:69:60:3e:8e:91:6e:dc:85:8f:94:12:
                    9e:0d:82:f3:b7:28:dc:99:fa:2a:fb:47:fd:b2:2b:
                    29:23:98:3c:d9:88:6e:9b:0f:1a:e0:66:a2:b8:af:
                    3b:91:7e:ef:b8:1c:23:82:fb:bb:e5:17:42:29:25:
                    bd:b3:ee:19:fa:06:d7:05:cd:5a:a4:9d:6f:6f:c1:
                    f2:91:14:91:9c:9a:c9:2a:3d:cc:5b:96:df:b4:c2:
                    b7:2a:ee:07:e9:60:c0:a4:73:a8:a5:82:61:5f:3a:
                    51:70:3b:14:e6:c5:85:40:e8:3e:fd:c0:1a:bc:d0:
                    31:c0:91:d4:9e:40:15:77:af:e4:de:4e:e2:5b:56:
                    1d:bb:2e:d3:86:9d:66:f9:cd:e7:4c:68:84:13:b2:
                    44:7b:3c:81:1a:70:16:05:dd:ba:cc:ca:a7:1c:97:
                    63:f8:ab:57:a9:3a:02:20:b1:0e:4c:95:1c:77:9f:
                    71:2c:bd:1e:76:04:fe:56:75:a8:ae:51:aa:01:f0:
                    e9:17:5f:c4:73:7c:d4:fe:b7:8d:29:a4:fc:00:77:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:59:52:74:44:D9:23:99:7F:30:81:E5:41:7F:D3:A3:F5:C5:56
            X509v3 Authority Key Identifier:
                keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:d0:77:25:17:ee:65:62:c5:1c:ed:12:5f:db:16:ac:d2:
         0e:71:ec:ba:3d:ef:8c:fb:f7:e6:60:ac:fa:90:d5:d8:29:c5:
         26:b4:dc:ea:06:9d:42:5c:a1:81:36:90:73:19:ee:4b:f0:c2:
         c0:92:51:36:f1:1f:45:6d:7a:bc:b7:44:8f:70:f5:6e:3c:e8:
         26:5b:e2:f3:b8:f3:d1:42:22:59:3a:0b:fa:a4:db:9f:26:25:
         59:e8:ad:a0:d6:74:58:1c:69:98:78:4e:81:2f:15:d4:be:87:
         a8:f2:9a:fc:2e:58:a3:65:57:d1:78:48:33:9b:a9:90:d9:3c:
         21:c6:bf:d3:5a:05:bc:5f:b3:33:0f:9c:ff:a8:90:fc:aa:e6:
         51:3e:b2:25:0d:b0:d8:42:5b:e9:c4:fb:40:6a:39:2b:bf:55:
         b6:f9:53:ba:80:08:a4:6d:7d:1b:ca:0d:30:fc:0e:88:f0:fc:
         1f:9d:dd:9d:56:cb:07:10:8e:fd:fb:a8:30:2c:70:2c:f0:f4:
         a7:5c:a3:9c:2e:c0:1c:5b:ce:aa:ad:ba:d4:13:9a:c6:5c:29:
         96:88:7d:4d:fe:9e:3d:4e:9d:9f:08:59:4c:29:b9:34:36:31:
         da:15:a4:05:3e:f9:83:57:01:a8:b9:0d:5c:bc:01:fd:0e:bf:
         e7:89:12:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck1vlb931ZMvp5Ng9vapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz
YzZjODAwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EyhmYjNjNTk1Mjc0NDRkOTIzOTk3ZjMwODFlNTQxN2ZkM2EzZjVjNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEOn5J+EvrTayR1JjuHwBKQPEOfh
dF5Nj2iCvQCK3Toyb0MvFn/EPH9T/QkC8RYOaWA+jpFu3IWPlBKeDYLztyjcmfoq
+0f9sispI5g82Yhumw8a4GaiuK87kX7vuBwjgvu75RdCKSW9s+4Z+gbXBc1apJ1v
b8HykRSRnJrJKj3MW5bftMK3Ku4H6WDApHOopYJhXzpRcDsU5sWFQOg+/cAavNAx
wJHUnkAVd6/k3k7iW1Yduy7Thp1m+c3nTGiEE7JEezyBGnAWBd26zMqnHJdj+KtX
qToCILEOTJUcd59xLL0edgT+VnWorlGqAfDpF1/Ec3zU/reNKaT8AHe5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs8WVJ0RNkjmX8wgeVBf9Oj9cVWMB8GA1UdIwQY
MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt
YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0
LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuPQdyUX
7mVixRztEl/bFqzSDnHsuj3vjPv35mCs+pDV2CnFJrTc6gadQlyhgTaQcxnuS/DC
wJJRNvEfRW16vLdEj3D1bjzoJlvi87jz0UIiWToL+qTbnyYlWeitoNZ0WBxpmHhO
gS8V1L6HqPKa/C5Yo2VX0XhIM5upkNk8Ica/01oFvF+zMw+c/6iQ/KrmUT6yJQ2w
2EJb6cT7QGo5K79VtvlTuoAIpG19G8oNMPwOiPD8H53dnVbLBxCO/fuoMCxwLPD0
p1yjnC7AHFvOqq261BOaxlwploh9Tf6ePU6dnwhZTCm5NDYx2hWkBT75g1cBqLkN
XLwB/Q6/54kSeA==
-----END CERTIFICATE-----