Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File:                     4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier:          bbaOzEXuQPFjHRxKGQKWX1035Gux23H3VFow+9aqCnM=
Subject key identifier:   98:D0:3F:6C:BE:A0:DA:72:76:D4:A4:2B:1C:CE:23:63:D8:CB:22:D6
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer:       /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial:       019CACB47FC0E4B7B0DE50DB2B53DA5B6C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 04:00:36 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:36 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:36 +0000
Files and hashes:         1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: P5PWexDmsqOhpyc6rPaAmIbKVy3wwODJpeAZrSY3Ilw=)
                          2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:7f:c0:e4:b7:b0:de:50:db:2b:53:da:5b:6c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
        Validity
            Not Before: Mar  2 04:00:36 2026 GMT
            Not After : Mar  3 04:00:36 2026 GMT
        Subject: CN=98d03f6cbea0da7276d4a42b1cce2363d8cb22d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:0c:6f:5e:87:ce:ed:4e:fa:ad:dd:09:87:
                    94:6a:66:fa:15:70:11:77:b8:03:bd:ac:f4:90:67:
                    55:75:aa:86:26:69:3e:5c:37:11:f7:59:16:76:97:
                    c2:b8:e6:fd:f4:cc:1d:39:20:ab:c1:a3:88:53:98:
                    f3:90:92:6f:a6:b8:45:5b:e3:26:a4:b9:76:c8:df:
                    28:21:ec:c5:0d:6a:e5:f5:ca:7a:e5:b9:46:b7:6a:
                    2d:1b:f5:2d:ed:c3:d6:a7:78:b9:20:7d:db:39:68:
                    87:47:b1:a4:76:12:24:f9:4c:f7:a2:ea:6f:5f:cf:
                    e9:af:c2:9a:25:80:21:cb:db:46:a7:37:ed:76:98:
                    d3:cf:95:22:2c:61:f2:8d:0d:fe:6e:0f:22:27:27:
                    9d:7a:c9:13:59:9d:b4:43:2b:b1:3c:1f:2b:55:46:
                    09:f0:9a:c9:3a:c1:0c:9a:ca:77:0b:bd:f9:e8:01:
                    c5:a2:a4:ab:41:e2:d2:35:6f:c9:e7:63:73:d8:91:
                    f3:28:50:a7:47:45:c6:29:dd:bb:07:1e:5e:db:a8:
                    06:cf:69:ee:eb:b4:ec:a9:ee:b2:29:3d:5d:79:09:
                    d5:d3:17:90:10:af:fa:61:3c:15:14:8c:36:e3:91:
                    ad:f0:24:96:bf:a6:10:c7:b8:8a:8e:f7:55:24:87:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D0:3F:6C:BE:A0:DA:72:76:D4:A4:2B:1C:CE:23:63:D8:CB:22:D6
            X509v3 Authority Key Identifier:
                keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:31:bd:05:ae:98:c9:78:40:e0:c2:ce:d1:fb:1d:cd:a8:
         9e:b0:11:8f:9c:bb:a8:76:0e:01:51:24:93:d3:a8:6d:25:fd:
         1b:9a:b3:d6:ee:ec:c6:a5:fa:cc:2d:2f:b7:a3:7f:44:19:8e:
         2d:df:03:01:38:fd:a4:95:1f:34:ac:8a:45:ae:46:4d:65:92:
         67:53:c2:6f:bc:61:16:2a:a5:24:09:a0:4f:d2:32:7b:e8:c7:
         58:08:67:0d:36:c7:16:23:f1:74:aa:88:50:7f:85:d3:72:0f:
         53:37:f5:24:f4:92:d8:50:98:b8:47:8a:56:98:8a:d8:68:90:
         9c:6f:dc:7b:40:bf:76:f7:98:26:25:c6:12:71:5b:f5:ee:e2:
         d7:64:a8:0a:d5:1d:96:d1:9f:a1:76:8e:5e:62:21:eb:d2:98:
         cd:12:8a:15:e4:fc:2f:ae:98:bd:8e:8d:f1:4d:0c:23:ac:32:
         34:6c:c3:28:54:a4:6c:00:98:96:85:09:43:98:48:4c:2b:ef:
         27:9a:c1:8f:2e:eb:33:14:56:a3:1b:87:29:e8:04:2d:bc:8d:
         84:6e:63:a7:11:22:7a:1c:76:4b:7c:5f:4f:c8:d0:21:48:0c:
         14:e6:7f:e6:6b:5a:79:eb:f9:83:d9:cf:9a:9d:be:d7:1a:0c:
         49:99:09:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystH/A5Lew3lDbK1PaW2ySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWRhMmJhMDU3ZTlhNTRhNjE3MGYyNTdmZjk3ODU2ZGM5
N2UwNjgwHhcNMjYwMzAyMDQwMDM2WhcNMjYwMzAzMDQwMDM2WjAzMTEwLwYDVQQD
Eyg5OGQwM2Y2Y2JlYTBkYTcyNzZkNGE0MmIxY2NlMjM2M2Q4Y2IyMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAEMb16Hzu1O+q3dCYeUamb6FXAR
d7gDvaz0kGdVdaqGJmk+XDcR91kWdpfCuOb99MwdOSCrwaOIU5jzkJJvprhFW+Mm
pLl2yN8oIezFDWrl9cp65blGt2otG/Ut7cPWp3i5IH3bOWiHR7GkdhIk+Uz3oupv
X8/pr8KaJYAhy9tGpzftdpjTz5UiLGHyjQ3+bg8iJyedeskTWZ20QyuxPB8rVUYJ
8JrJOsEMmsp3C7356AHFoqSrQeLSNW/J52Nz2JHzKFCnR0XGKd27Bx5e26gGz2nu
67Tsqe6yKT1deQnV0xeQEK/6YTwVFIw245Gt8CSWv6YQx7iKjvdVJIdbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjQP2y+oNpydtSkKxzOI2PYyyLWMB8GA1UdIwQY
MBaAFOMdoroFfppUphcPJX/5eFbcl+BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzIt
NzUwN2U4MTlhNzk1LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzItNzUwN2U4MTlhNzk1
LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu0xvQWu
mMl4QODCztH7Hc2onrARj5y7qHYOAVEkk9OobSX9G5qz1u7sxqX6zC0vt6N/RBmO
Ld8DATj9pJUfNKyKRa5GTWWSZ1PCb7xhFiqlJAmgT9Iye+jHWAhnDTbHFiPxdKqI
UH+F03IPUzf1JPSS2FCYuEeKVpiK2GiQnG/ce0C/dveYJiXGEnFb9e7i12SoCtUd
ltGfoXaOXmIh69KYzRKKFeT8L66YvY6N8U0MI6wyNGzDKFSkbACYloUJQ5hITCvv
J5rBjy7rMxRWoxuHKegELbyNhG5jpxEiehx2S3xfT8jQIUgMFOZ/5mtaeev5g9nP
mp2+1xoMSZkJcw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:09 2026 by rpki-client