Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          +KM+hEBdPqVW1DnLfZraIYQN9U1m5P5PXyQzdRkVR4I=
Subject key identifier:   9C:F9:BE:54:FF:92:9D:1B:B2:8E:34:2A:B1:A5:6D:A0:DC:CC:FC:D8
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019CAC474B5947546F45CB2AE00EA5EE62E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          186D
Signing time:             Mon 02 Mar 2026 02:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:19 +0000
Files and hashes:         1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: Ghe3nIjX8IGq2ijEgkig+xvjGfW4kqeCLoRLf40Nn0M=)
                          2: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=)
                          3: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=)
                          4: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=)
                          5: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=)
                          6: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=)
                          7: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=)
                          8: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=)
                          9: fSRit_7VTph5HKe4bJDsX9JtTHY.roa (hash: SCrZ4QjFoYHn91Pt1cg0tNdQ5q5931gbYF5QZgTtYyo=)
                          10: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=)
                          11: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=)
                          12: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=)
                          13: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=)
                          14: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=)
                          15: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:4b:59:47:54:6f:45:cb:2a:e0:0e:a5:ee:62:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Mar  2 02:01:19 2026 GMT
            Not After : Mar  3 02:01:19 2026 GMT
        Subject: CN=9cf9be54ff929d1bb28e342ab1a56da0dcccfcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:44:c7:40:b4:28:e5:cd:d3:3f:0e:bf:d0:
                    8f:0b:2f:b2:df:c2:39:60:98:80:ab:5e:9f:5d:b3:
                    44:99:60:3f:af:32:aa:64:8a:87:1d:c1:4e:88:9e:
                    38:fb:09:f8:22:97:71:7e:a6:0c:80:a4:ec:10:04:
                    1a:59:e3:3a:07:15:d7:dc:3c:91:48:a1:7c:99:08:
                    39:3d:3d:05:52:fb:fc:83:92:10:f0:21:b6:22:b7:
                    b4:45:89:a5:01:a9:f4:76:22:fb:ca:e6:d2:d2:6b:
                    3a:b5:eb:c0:51:6f:7e:5b:b8:16:94:ab:bf:60:1c:
                    0e:74:18:64:39:2b:73:0e:9a:50:df:3f:f9:bc:76:
                    69:2f:b5:31:d7:ef:8c:55:14:a0:69:ee:79:61:24:
                    ac:c1:f1:b4:09:00:f5:8b:2c:ea:2a:e9:9a:ac:8f:
                    7f:70:7c:75:84:eb:32:42:24:d5:7c:7d:25:ba:1f:
                    fc:53:04:d2:32:98:ca:ac:e2:07:d7:a2:f9:cf:da:
                    9b:ac:88:94:de:2a:4b:de:4d:8e:89:c8:9c:9e:3d:
                    e2:7c:10:99:ce:9e:18:0a:55:73:74:29:b8:48:9f:
                    7a:8a:83:26:b7:0a:e9:a9:ec:c3:e3:56:fe:a2:39:
                    46:13:26:1f:db:6f:a8:bd:78:47:f5:6c:6d:c6:14:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F9:BE:54:FF:92:9D:1B:B2:8E:34:2A:B1:A5:6D:A0:DC:CC:FC:D8
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:c1:71:e9:8d:bb:50:dc:d0:05:24:89:5e:dc:07:49:72:
         cd:f4:a9:c8:79:03:b7:4d:50:04:00:4d:83:49:71:ac:d5:f2:
         ee:08:b2:26:28:a0:0d:f9:09:cf:a4:ad:f1:0d:bd:0b:5b:0e:
         5c:95:e5:14:fd:26:1e:56:23:e4:86:90:b8:3c:e0:e3:60:d3:
         ed:b6:3f:09:7e:cc:8a:69:e3:79:35:82:92:4b:b6:2a:83:69:
         79:28:07:f1:6b:97:b5:dc:05:66:75:f2:83:09:cb:8d:9b:ac:
         d7:ec:98:a8:4f:f9:0c:e2:e2:b4:e4:85:04:44:00:f0:88:c7:
         49:c8:d1:2a:22:4c:72:54:11:99:61:be:04:19:53:fb:d1:a9:
         7b:c5:46:ec:57:5d:44:91:de:fb:88:a0:a4:c4:5e:37:ec:e2:
         3f:eb:94:2f:fe:70:e4:7c:12:d1:88:53:71:da:3c:f0:88:f9:
         d1:10:00:ae:f5:d1:b5:00:8a:51:45:d8:6e:d6:03:50:21:f0:
         ad:49:91:a3:43:04:9f:e5:e0:97:31:d9:be:f4:e6:6a:65:0a:
         3b:4d:c1:4d:66:c5:f7:43:16:52:7e:f8:e5:bb:2f:33:51:46:
         93:83:7e:27:58:e0:db:41:0b:e2:ea:70:46:70:42:8c:81:ba:
         df:b4:f1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR0tZR1RvRcsq4A6l7mLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjYwMzAyMDIwMTE5WhcNMjYwMzAzMDIwMTE5WjAzMTEwLwYDVQQD
Eyg5Y2Y5YmU1NGZmOTI5ZDFiYjI4ZTM0MmFiMWE1NmRhMGRjY2NmY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx1Ex0C0KOXN0z8Ov9CPCy+y38I5
YJiAq16fXbNEmWA/rzKqZIqHHcFOiJ44+wn4IpdxfqYMgKTsEAQaWeM6BxXX3DyR
SKF8mQg5PT0FUvv8g5IQ8CG2Ire0RYmlAan0diL7yubS0ms6tevAUW9+W7gWlKu/
YBwOdBhkOStzDppQ3z/5vHZpL7Ux1++MVRSgae55YSSswfG0CQD1iyzqKumarI9/
cHx1hOsyQiTVfH0luh/8UwTSMpjKrOIH16L5z9qbrIiU3ipL3k2Oicicnj3ifBCZ
zp4YClVzdCm4SJ96ioMmtwrpqezD41b+ojlGEyYf22+ovXhH9WxtxhSSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz5vlT/kp0bso40KrGlbaDczPzYMB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNbBcemN
u1Dc0AUkiV7cB0lyzfSpyHkDt01QBABNg0lxrNXy7giyJiigDfkJz6St8Q29C1sO
XJXlFP0mHlYj5IaQuDzg42DT7bY/CX7MimnjeTWCkku2KoNpeSgH8WuXtdwFZnXy
gwnLjZus1+yYqE/5DOLitOSFBEQA8IjHScjRKiJMclQRmWG+BBlT+9Gpe8VG7Fdd
RJHe+4igpMReN+ziP+uUL/5w5HwS0YhTcdo88Ij50RAArvXRtQCKUUXYbtYDUCHw
rUmRo0MEn+XglzHZvvTmamUKO03BTWbF90MWUn745bsvM1FGk4N+J1jg20EL4upw
RnBCjIG637Txjg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:12 2026 by rpki-client