Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          HkYlC6/IhM1C6fEdHQUENc3fYENB+9f7Yy1Sj9jOJgY=
Subject key identifier:   EB:F6:1F:94:3B:9B:37:6F:26:55:F1:9F:35:14:2D:DF:BC:05:67:EA
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019CABD91D95C81E100AF3A9A0CEF2466602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          1135
Signing time:             Mon 02 Mar 2026 00:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:58 +0000
Files and hashes:         1: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (hash: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ=)
                          2: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: t4NesecJuh0nLvnfUzENgHairDCfzyj295pH29+Hyes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:1d:95:c8:1e:10:0a:f3:a9:a0:ce:f2:46:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Mar  2 00:00:58 2026 GMT
            Not After : Mar  3 00:00:58 2026 GMT
        Subject: CN=ebf61f943b9b376f2655f19f35142ddfbc0567ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:5e:4d:bf:42:b6:c3:e9:75:c8:9d:e3:13:
                    12:54:18:94:6e:6a:69:ca:8f:ff:28:49:7c:16:84:
                    18:b9:6c:0f:6a:46:57:1e:81:4d:0b:5d:19:d3:82:
                    f9:80:8a:58:c7:46:b8:88:0c:62:93:6c:79:f7:51:
                    70:e4:b7:ea:cd:99:53:c6:57:8f:e5:e7:8c:ba:44:
                    c4:78:1f:ce:30:84:8c:d2:79:a7:41:09:e6:72:e6:
                    25:53:08:72:1f:c2:75:2a:87:c5:59:71:e4:cf:9d:
                    84:d4:ae:e2:f0:c1:6c:d5:fc:9c:73:97:43:c2:6a:
                    1d:87:84:d9:d3:4e:2c:a9:46:15:36:ab:ee:61:d5:
                    99:5b:d2:af:f4:6f:bd:b0:6f:42:48:d1:9f:04:dd:
                    20:c0:09:ea:e6:7a:00:5c:40:e5:fc:05:96:00:43:
                    2b:00:f8:c8:6e:0d:bc:1c:b6:99:87:05:3f:1d:42:
                    53:bb:7a:34:d3:35:c9:bc:cc:65:23:27:53:c8:a9:
                    2a:7b:71:a3:db:78:47:92:15:0d:4f:4c:db:a2:31:
                    07:cd:75:75:57:9e:da:39:52:64:da:9c:38:95:db:
                    1a:87:89:32:30:01:46:15:6a:d8:57:c2:a9:73:4c:
                    01:0e:b5:0a:e5:5e:a6:e6:1d:37:af:aa:93:3c:63:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F6:1F:94:3B:9B:37:6F:26:55:F1:9F:35:14:2D:DF:BC:05:67:EA
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:61:0f:76:89:3a:7f:9f:41:e5:e6:b7:5e:91:da:44:31:
         55:4f:d3:08:6b:20:ca:05:8c:e4:66:94:c9:11:1b:8c:53:cc:
         d5:ae:a9:46:94:48:21:29:84:5c:11:7f:99:53:7f:d0:e9:43:
         d1:4b:73:48:15:32:0b:c5:aa:51:7f:43:b3:b3:41:59:d5:71:
         01:ff:f3:7c:1c:35:2d:2d:86:a3:e0:52:a1:04:e6:ce:c1:47:
         c5:4b:2c:aa:73:a7:11:a7:86:6c:66:af:1f:56:e3:b8:31:b0:
         7b:b4:0e:87:56:0f:f9:87:b9:32:84:b8:c9:86:e8:74:63:0a:
         56:8a:e5:fd:2f:d5:3a:5f:b5:15:ef:39:ad:5f:29:1c:96:bb:
         d4:a2:72:0b:df:2b:b3:e0:2b:60:85:1d:ad:a7:13:03:9a:76:
         0a:82:76:76:48:5a:9d:56:85:4c:9b:b3:52:23:1f:15:ee:a7:
         d9:37:2d:51:64:73:55:65:56:f3:0c:7d:ef:c5:95:ce:83:93:
         85:da:d4:0f:66:0f:d7:84:5d:44:da:ac:ef:7f:99:c0:b8:d7:
         c6:82:ce:a9:41:72:70:87:0a:cc:ce:00:c9:e9:eb:83:a7:4c:
         c1:e0:7a:31:c1:2a:15:40:01:3f:b4:d1:81:52:87:86:97:cc:
         19:41:66:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2R2VyB4QCvOpoM7yRmYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzNmZjEwZDdhNTU0ZmM1MWE3Zjk5YzFmNjFlMWNlZWY5
OTg1YmMwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
EyhlYmY2MWY5NDNiOWIzNzZmMjY1NWYxOWYzNTE0MmRkZmJjMDU2N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOteTb9CtsPpdcid4xMSVBiUbmpp
yo//KEl8FoQYuWwPakZXHoFNC10Z04L5gIpYx0a4iAxik2x591Fw5LfqzZlTxleP
5eeMukTEeB/OMISM0nmnQQnmcuYlUwhyH8J1KofFWXHkz52E1K7i8MFs1fycc5dD
wmodh4TZ004sqUYVNqvuYdWZW9Kv9G+9sG9CSNGfBN0gwAnq5noAXEDl/AWWAEMr
APjIbg28HLaZhwU/HUJTu3o00zXJvMxlIydTyKkqe3Gj23hHkhUNT0zbojEHzXV1
V57aOVJk2pw4ldsah4kyMAFGFWrYV8Kpc0wBDrUK5V6m5h03r6qTPGOGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv2H5Q7mzdvJlXxnzUULd+8BWfqMB8GA1UdIwQY
MBaAFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2Qt
NDhjYTMzNjc1YTUwLzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2QtNDhjYTMzNjc1YTUw
LzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHalhD3aJ
On+fQeXmt16R2kQxVU/TCGsgygWM5GaUyREbjFPM1a6pRpRIISmEXBF/mVN/0OlD
0UtzSBUyC8WqUX9Ds7NBWdVxAf/zfBw1LS2Go+BSoQTmzsFHxUssqnOnEaeGbGav
H1bjuDGwe7QOh1YP+Ye5MoS4yYbodGMKVorl/S/VOl+1Fe85rV8pHJa71KJyC98r
s+ArYIUdracTA5p2CoJ2dkhanVaFTJuzUiMfFe6n2TctUWRzVWVW8wx978WVzoOT
hdrUD2YP14RdRNqs73+ZwLjXxoLOqUFycIcKzM4Ayenrg6dMweB6McEqFUABP7TR
gVKHhpfMGUFm9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:45 2026 by rpki-client