Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          1f/KGyZ6NCeV7K7+O5PjGmB2e/YTvrktHLa9m5VFq4c=
Subject key identifier:   6E:F0:1D:16:0B:CA:13:42:C3:7D:D0:04:67:32:58:B8:62:3D:6F:DA
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       019CAAC6A8D0EAE64362AFA91A8FEE1DB9FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 19:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:11 +0000
Files and hashes:         1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
                          2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
                          3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
                          4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: Q3DzRVZlQaE6QPKmNL9f/CQE97vxHe9UFeAr3w4rkLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:a8:d0:ea:e6:43:62:af:a9:1a:8f:ee:1d:b9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: Mar  1 19:01:11 2026 GMT
            Not After : Mar  2 19:01:11 2026 GMT
        Subject: CN=6ef01d160bca1342c37dd004673258b8623d6fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:73:44:ba:13:8f:98:2c:93:d5:af:19:2b:
                    3b:59:af:7a:65:a5:48:f5:2f:c2:6e:e9:a0:a2:34:
                    8f:82:d0:2c:ba:b9:58:f2:67:cb:f9:89:ac:82:53:
                    ba:3e:89:1c:a6:1e:a0:9d:dd:5c:bf:e3:c3:9f:11:
                    7f:12:a3:93:42:aa:30:c5:ad:54:d8:7f:aa:e2:b0:
                    33:f1:ec:22:3c:25:4e:f4:20:8b:d3:23:86:d9:9a:
                    bf:b0:d0:a7:37:b8:ef:21:7e:08:bf:a8:84:e8:db:
                    68:7f:e9:59:6e:05:a5:8c:7d:4e:70:9d:a4:0c:28:
                    54:94:7f:85:61:39:41:e0:be:53:9c:43:72:de:90:
                    eb:62:9d:0a:0d:03:b7:ed:e5:9d:4b:36:63:ed:05:
                    ae:34:47:1e:9e:13:c7:22:8a:c2:e6:1a:e2:5c:f2:
                    bd:a5:5f:32:ea:e4:e2:aa:93:c6:92:90:56:db:e4:
                    72:e8:b5:d0:6b:48:7f:cf:87:44:60:9a:1e:14:f9:
                    57:0a:85:38:34:12:98:08:68:65:34:0a:c1:59:5e:
                    72:a3:95:13:fc:c3:e9:79:bf:83:01:de:d3:62:08:
                    43:fb:8c:e4:86:94:c0:ce:6c:bc:7a:eb:57:74:69:
                    54:5c:20:8a:74:a0:0d:2c:4e:cc:b7:05:23:da:eb:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:1D:16:0B:CA:13:42:C3:7D:D0:04:67:32:58:B8:62:3D:6F:DA
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:34:c1:41:84:b4:35:32:5c:16:9a:c3:92:a7:fd:2b:b7:98:
         f9:47:b5:68:8a:03:17:b7:63:2f:99:ea:67:8b:d3:3a:6e:ca:
         e1:90:68:75:d9:a0:62:8b:07:ee:6c:d6:b8:af:1d:f1:31:6a:
         8a:d9:5f:53:b7:08:ac:9a:63:8e:1d:c8:68:d0:e9:2f:f1:e4:
         6f:d9:06:86:0f:31:12:9c:46:81:d0:15:64:71:c0:85:3b:04:
         29:b7:b7:ea:6a:4a:8e:ff:d6:01:bc:85:50:0a:44:b8:a1:fc:
         de:a3:68:7d:bd:4d:c1:4b:db:e4:62:d6:f5:1d:f3:17:67:64:
         ad:b5:cb:d1:2d:c9:c0:0b:0e:af:44:01:de:70:6d:24:f8:f7:
         f5:a4:58:60:e6:af:55:70:4e:17:70:91:2a:20:fc:88:6a:73:
         7a:a7:c9:1a:2b:4e:94:a1:84:12:6f:df:67:b0:e6:77:3a:62:
         0a:07:a6:f2:58:14:46:44:df:a9:6f:e8:8f:de:14:22:24:19:
         bf:d9:f8:9a:de:7e:e3:c9:32:a0:0a:83:e8:e7:bc:b0:94:39:
         94:9d:ec:f3:31:79:a4:14:e6:8f:10:7c:c3:b4:54:d1:12:83:
         76:42:9c:a0:05:de:3a:a9:43:48:51:8b:5c:b6:ec:b7:97:91:
         15:1b:d7:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqjQ6uZDYq+pGo/uHbn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1
ZjI4OTgwHhcNMjYwMzAxMTkwMTExWhcNMjYwMzAyMTkwMTExWjAzMTEwLwYDVQQD
Eyg2ZWYwMWQxNjBiY2ExMzQyYzM3ZGQwMDQ2NzMyNThiODYyM2Q2ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEtzRLoTj5gsk9WvGSs7Wa96ZaVI
9S/CbumgojSPgtAsurlY8mfL+YmsglO6Pokcph6gnd1cv+PDnxF/EqOTQqowxa1U
2H+q4rAz8ewiPCVO9CCL0yOG2Zq/sNCnN7jvIX4Iv6iE6Ntof+lZbgWljH1OcJ2k
DChUlH+FYTlB4L5TnENy3pDrYp0KDQO37eWdSzZj7QWuNEcenhPHIorC5hriXPK9
pV8y6uTiqpPGkpBW2+Ry6LXQa0h/z4dEYJoeFPlXCoU4NBKYCGhlNArBWV5yo5UT
/MPpeb+DAd7TYghD+4zkhpTAzmy8eutXdGlUXCCKdKANLE7MtwUj2usZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7wHRYLyhNCw33QBGcyWLhiPW/aMB8GA1UdIwQY
MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt
ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh
LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDTBQYS0
NTJcFprDkqf9K7eY+Ue1aIoDF7djL5nqZ4vTOm7K4ZBoddmgYosH7mzWuK8d8TFq
itlfU7cIrJpjjh3IaNDpL/Hkb9kGhg8xEpxGgdAVZHHAhTsEKbe36mpKjv/WAbyF
UApEuKH83qNofb1NwUvb5GLW9R3zF2dkrbXL0S3JwAsOr0QB3nBtJPj39aRYYOav
VXBOF3CRKiD8iGpzeqfJGitOlKGEEm/fZ7DmdzpiCgem8lgURkTfqW/oj94UIiQZ
v9n4mt5+48kyoAqD6Oe8sJQ5lJ3s8zF5pBTmjxB8w7RU0RKDdkKcoAXeOqlDSFGL
XLbst5eRFRvXwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:43 2026 by rpki-client