Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File:                     4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier:          SXMgaHrvxIpjesbi1PBOwl/wWRn/X2p29kG4Scj3iYU=
Subject key identifier:   31:1F:38:81:1E:39:4A:2A:61:36:C1:41:FB:06:1B:F6:E1:FC:29:E6
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer:       /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial:       019D98F4ED921433040C1B86B8F46803DBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number:          0C1B
Signing time:             Fri 17 Apr 2026 01:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:21 +0000
Files and hashes:         1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: 7ky7eLCIN4/spfWVj2lxEIQnb/NVTrJnCjF0Hfuw5XA=)
                          2: _-JfME-Erck4pkvS4WQAD8N3srk.roa (hash: QrEZHXMbaydoz+Hi0SYY4JVGJuxwhF6iX/ilfGhMhOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ed:92:14:33:04:0c:1b:86:b8:f4:68:03:db:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
        Validity
            Not Before: Apr 17 01:01:21 2026 GMT
            Not After : Apr 18 01:01:21 2026 GMT
        Subject: CN=311f38811e394a2a6136c141fb061bf6e1fc29e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:dd:07:0e:72:a0:45:6b:db:80:c6:82:7b:
                    a9:3a:a1:d4:1c:5d:ed:00:b8:ac:1f:b3:ac:76:ce:
                    cc:1d:a0:80:fa:de:da:25:e5:0c:47:e8:5d:97:d6:
                    87:4f:dc:aa:e9:e6:b9:6e:d1:fe:9b:b2:8a:9a:db:
                    81:12:d5:ff:26:23:8b:5d:84:1c:3a:80:26:29:a9:
                    4b:c6:25:69:eb:0a:0a:00:01:3c:ec:a2:22:ff:96:
                    25:02:bd:c5:3a:a4:ed:70:5e:df:74:c9:b4:63:ef:
                    c8:18:a0:88:bc:1c:23:c9:56:03:1d:9f:19:17:99:
                    01:bf:08:a6:40:36:ea:3a:21:ea:25:a2:4a:8f:99:
                    09:d8:4a:c4:42:8a:e8:24:b6:31:6b:fc:d6:f6:29:
                    a6:4d:4c:39:4f:34:1c:b5:31:0a:08:8f:ca:da:06:
                    c8:c1:50:11:0f:5d:bb:27:2e:6a:b2:d1:6f:b5:52:
                    af:81:2f:c5:b9:b2:f6:7a:6b:06:34:bc:f8:da:43:
                    3a:91:2e:c7:5b:3d:43:9d:57:4a:3e:53:69:9f:83:
                    0a:56:25:b5:e7:e5:4e:82:97:e6:a3:18:8b:88:47:
                    96:ef:9e:f2:01:48:d8:c5:5d:76:06:a4:b0:65:4e:
                    05:a6:40:1c:26:6e:4e:b2:ae:59:19:a7:8a:1d:fb:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:38:81:1E:39:4A:2A:61:36:C1:41:FB:06:1B:F6:E1:FC:29:E6
            X509v3 Authority Key Identifier:
                keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9c:e5:7e:a7:fc:dc:2c:9a:27:29:96:5d:fd:89:d1:d7:b1:
         c7:c7:05:65:0a:b5:9a:73:1c:7e:46:aa:cf:91:d6:ab:f7:22:
         2c:e5:44:8f:e2:55:b7:40:9e:71:04:0b:6d:a2:9b:ad:de:ac:
         9e:9c:dc:0b:6e:14:7e:ef:36:c2:fe:1c:e8:20:f2:f7:54:83:
         d4:1e:7b:4d:13:9a:b6:b5:bb:b7:b4:4b:47:2d:dd:cf:95:c6:
         58:72:8c:1e:63:4b:90:2d:27:b3:06:de:05:c5:9b:a1:64:c6:
         35:df:65:d7:19:56:56:e4:b1:04:f5:34:90:68:56:ee:d7:01:
         eb:23:2f:ed:d3:e6:0e:ad:90:cd:a1:1a:41:43:91:78:8e:25:
         f7:3e:2b:b9:87:54:3e:91:93:98:98:e2:d4:1f:94:19:78:ac:
         e6:5b:4e:92:c7:ee:68:30:a1:ce:42:65:de:ba:b3:73:f3:97:
         a2:10:3a:74:99:9a:a2:72:cf:fd:cb:45:2a:f3:ef:b9:56:2d:
         ef:c9:fe:36:71:8d:ad:49:8f:48:c9:9a:7e:35:cb:6b:e4:55:
         b6:97:31:48:3b:ac:15:c0:0a:f5:1d:fb:29:7a:49:41:09:3a:
         1d:76:6e:d0:d5:80:0e:e3:0b:f4:c0:3e:dc:8b:a8:3f:a2:1a:
         0a:b1:0a:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9O2SFDMEDBuGuPRoA9v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDFjODViNDc0ZThiNmMwMDg5MWQ5NTQxMjRmZjBjODEy
MDBkOGMwHhcNMjYwNDE3MDEwMTIxWhcNMjYwNDE4MDEwMTIxWjAzMTEwLwYDVQQD
EygzMTFmMzg4MTFlMzk0YTJhNjEzNmMxNDFmYjA2MWJmNmUxZmMyOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXdBw5yoEVr24DGgnupOqHUHF3t
ALisH7Osds7MHaCA+t7aJeUMR+hdl9aHT9yq6ea5btH+m7KKmtuBEtX/JiOLXYQc
OoAmKalLxiVp6woKAAE87KIi/5YlAr3FOqTtcF7fdMm0Y+/IGKCIvBwjyVYDHZ8Z
F5kBvwimQDbqOiHqJaJKj5kJ2ErEQoroJLYxa/zW9immTUw5TzQctTEKCI/K2gbI
wVARD127Jy5qstFvtVKvgS/FubL2emsGNLz42kM6kS7HWz1DnVdKPlNpn4MKViW1
5+VOgpfmoxiLiEeW757yAUjYxV12BqSwZU4FpkAcJm5Osq5ZGaeKHfvLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEfOIEeOUoqYTbBQfsGG/bh/CnmMB8GA1UdIwQY
MBaAFOBByFtHTotsAIkdlUEk/wyBIA2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMt
NDZiYjNmYTI4YjAwLzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMtNDZiYjNmYTI4YjAw
LzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpzlfqf8
3CyaJymWXf2J0dexx8cFZQq1mnMcfkaqz5HWq/ciLOVEj+JVt0CecQQLbaKbrd6s
npzcC24Ufu82wv4c6CDy91SD1B57TROatrW7t7RLRy3dz5XGWHKMHmNLkC0nswbe
BcWboWTGNd9l1xlWVuSxBPU0kGhW7tcB6yMv7dPmDq2QzaEaQUOReI4l9z4ruYdU
PpGTmJji1B+UGXis5ltOksfuaDChzkJl3rqzc/OXohA6dJmaonLP/ctFKvPvuVYt
78n+NnGNrUmPSMmafjXLa+RVtpcxSDusFcAK9R37KXpJQQk6HXZu0NWADuML9MA+
3IuoP6IaCrEKRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:21 2026 by rpki-client