Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          xfsJ1H/s8H8dZ8Rs5NAsalxPbWSU3OugPmSqm5BaDaA=
Subject key identifier:   2C:54:F3:7E:C6:E7:60:C2:8B:EA:F4:6A:0D:5A:34:04:41:CE:BE:6E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CA97D45EB3ACC7B6FCD7922BECF80CEBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1890
Signing time:             Sun 01 Mar 2026 13:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:25 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 7PnpAz9j4F2cPy7RsvXVZEhmrTMZdOSpTmnh/T3aumM=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:45:eb:3a:cc:7b:6f:cd:79:22:be:cf:80:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar  1 13:01:25 2026 GMT
            Not After : Mar  2 13:01:25 2026 GMT
        Subject: CN=2c54f37ec6e760c28beaf46a0d5a340441cebe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:ae:3c:b8:02:4d:df:f0:19:78:74:6d:37:
                    a9:c3:d0:e0:65:6f:7e:17:ab:bd:c2:60:59:f1:b6:
                    e9:04:96:c9:a1:95:a3:14:4a:ea:08:af:9c:40:ea:
                    29:10:6d:72:a1:19:ab:f4:8d:73:69:28:0f:91:f6:
                    6c:ab:38:cb:57:7c:4e:f6:a1:70:b0:1b:0f:cd:b6:
                    3f:01:e5:9e:44:eb:e5:d1:28:68:8a:c6:d4:69:d5:
                    22:b0:d2:88:e3:49:0e:ad:35:60:df:bb:d3:ea:72:
                    9d:ae:4c:90:40:db:48:68:b2:e9:28:f5:e7:e0:93:
                    ca:20:cf:8f:4a:99:4b:7b:7c:d4:a2:ae:d5:bb:40:
                    57:91:11:f3:6e:72:69:aa:33:4b:b1:4c:90:65:84:
                    15:9c:0b:64:bc:ae:44:0f:12:49:6d:cc:82:c2:b5:
                    5b:ed:b5:a2:15:4e:af:0c:6c:7a:05:9f:06:b7:4a:
                    2d:4f:a8:38:d1:07:1f:2b:cf:99:72:74:61:58:87:
                    e6:72:ab:6e:d6:60:59:9f:e0:3f:ad:73:9a:ed:1e:
                    40:d9:8e:48:f1:22:72:68:a5:30:56:e2:e2:a8:91:
                    50:c8:16:31:e9:83:5b:7e:69:c1:76:94:59:fe:28:
                    58:4d:0e:69:96:f0:7d:1d:aa:ac:49:c3:93:b1:32:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:F3:7E:C6:E7:60:C2:8B:EA:F4:6A:0D:5A:34:04:41:CE:BE:6E
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:af:97:84:c1:1d:07:a6:72:85:9f:79:94:46:50:04:b3:88:
         1f:17:63:72:d6:62:69:c6:79:2f:8d:4c:28:09:a5:a0:a3:83:
         e0:08:00:42:13:f6:88:ba:f6:05:69:18:c3:df:dc:76:10:44:
         5e:50:8e:8c:bd:76:5f:38:be:26:fa:c5:6b:e3:a4:7c:2d:c3:
         ed:74:29:b9:90:c7:65:20:f0:85:33:9b:d2:6e:41:e8:6b:27:
         57:19:49:2d:2b:20:2d:10:e1:e4:31:db:ef:08:12:a1:56:86:
         fc:f7:c2:b7:75:c3:b9:ba:92:eb:2a:5d:65:db:5b:b0:be:4e:
         a2:01:2a:f1:3b:50:8a:41:71:05:15:b2:f9:9e:f9:5d:34:b0:
         fa:ba:cf:2a:b1:8a:a1:1a:8d:92:ee:ba:aa:77:74:16:7e:c0:
         66:46:9b:b3:f2:41:2a:32:16:b6:b2:c7:c6:c2:2f:0a:b4:13:
         2f:60:09:4a:2a:2b:ee:50:29:ba:58:03:bf:6c:c1:31:c3:6e:
         e4:40:a5:35:d3:54:47:35:a0:65:a5:66:bc:45:13:fd:7e:3e:
         0c:21:34:14:75:07:b8:0f:e4:46:6f:ba:8f:59:89:53:5d:f4:
         7e:17:4b:b3:c0:65:b9:5b:3f:52:23:14:8f:9b:d3:5c:c3:7f:
         10:fa:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:02 2026 by rpki-client