Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
File:                     EyMNpwIy9meEcw_WwSVRNbf40J8.mft (raw, json)
Hash identifier:          I2iJ44OX+vB7CJOg+FnC7prcUp3H4PQ66f5XnTLUcs8=
Subject key identifier:   33:C9:B0:D4:53:5E:2A:43:CE:8B:97:7D:B3:A4:A9:6F:1C:C1:23:1C
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Certificate issuer:       /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial:       019CAAC610F0B87E480FF7B7187857950BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 19:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:33 +0000
Files and hashes:         1: 2anahPKNms3y710gencrWiHxjKo.roa (hash: VmazSTwgzYudVyadHVOYGFSp9iz4KiJPufdCdGzHpJ8=)
                          2: 37ovZ2hnSX5grcREq5tN4V1BfaQ.roa (hash: YrRPkZiMPn0MGs5vlmASyvzKOP5xZ6fhans4OhfAr2U=)
                          3: EyMNpwIy9meEcw_WwSVRNbf40J8.crl (hash: EObNWt3EQSsa88vLP4gg81AIntg4ZE5QKIS8L4mdYUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:10:f0:b8:7e:48:0f:f7:b7:18:78:57:95:0b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
        Validity
            Not Before: Mar  1 19:00:33 2026 GMT
            Not After : Mar  2 19:00:33 2026 GMT
        Subject: CN=33c9b0d4535e2a43ce8b977db3a4a96f1cc1231c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:18:e0:4c:f6:52:cb:66:5e:0d:b1:fa:eb:
                    aa:40:b2:13:d2:02:24:7b:f0:7a:47:1b:5e:32:01:
                    b8:ba:e1:b0:ea:1f:6c:12:8e:67:96:1a:58:3f:05:
                    9d:6a:9a:c6:15:a6:43:e8:d3:ff:99:fb:9d:f0:b4:
                    47:0e:18:48:dd:4e:8f:59:f1:da:2e:78:a8:36:da:
                    bf:27:5e:b8:d9:a1:a2:09:a7:45:e4:84:07:6c:76:
                    0c:02:09:7b:03:35:86:61:8c:eb:03:4d:80:34:2a:
                    b6:b2:76:28:35:60:16:4c:4a:a3:50:1d:68:02:91:
                    ab:6c:a7:b7:81:7b:a8:cc:26:d0:76:ad:5f:e5:25:
                    56:18:63:7c:bb:b8:a1:cd:d9:82:ae:9e:51:0f:07:
                    f9:c2:b5:50:cd:6a:f3:2f:4f:68:be:cb:ab:f2:c3:
                    cc:ec:3f:48:96:cb:c8:30:6a:0c:ff:e8:03:9f:3b:
                    38:4c:b8:58:f1:14:78:9d:1e:d4:4e:4c:82:e7:ae:
                    ca:4f:5f:96:7b:a7:38:61:1b:0e:ee:66:47:13:22:
                    e9:81:bc:e5:d9:a5:9e:c3:25:62:54:99:36:35:aa:
                    9d:4a:c0:0d:4f:b8:76:0c:aa:25:59:06:2f:56:bc:
                    8a:a0:e3:f9:3b:ca:10:71:89:62:e5:a1:53:4c:f9:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C9:B0:D4:53:5E:2A:43:CE:8B:97:7D:B3:A4:A9:6F:1C:C1:23:1C
            X509v3 Authority Key Identifier:
                keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:16:a3:8b:05:e8:d2:8f:26:48:66:14:46:f6:6b:83:db:
         8e:bd:6e:84:5f:17:d3:b5:b9:d1:bd:f1:cd:fd:a1:91:26:37:
         55:22:4f:f2:0b:be:06:cb:a6:10:04:ec:ee:42:b1:d8:bc:e5:
         0b:8f:93:9e:b4:bc:3a:06:c2:63:1d:77:1b:5d:50:d1:1d:50:
         2f:45:f0:ad:82:f5:5b:51:95:01:17:e5:e7:aa:29:00:9b:c0:
         92:42:4c:85:fd:4c:af:7a:03:e3:06:f4:8f:fa:8c:fa:a2:a2:
         0a:6a:4e:15:2e:e1:6a:ff:eb:21:91:9f:40:59:f2:20:4a:26:
         2e:d5:c5:ea:2c:3e:74:c7:d3:9c:c1:5f:dc:f5:ef:15:06:8f:
         5f:99:c8:5b:22:7f:93:cf:07:4d:ec:1d:93:74:65:6f:f6:4e:
         44:b7:1f:60:72:9b:26:3e:a0:68:b9:be:8c:58:0e:47:6f:e7:
         72:f0:54:98:d0:64:f3:79:b0:4d:f1:e9:75:84:60:9a:c8:1c:
         84:ce:6d:ad:cd:18:a1:5e:33:e2:69:a7:c9:dd:c6:09:69:79:
         ae:e7:92:ae:95:40:9e:ae:f9:4c:50:4b:27:fb:4e:f3:55:3c:
         06:e4:68:66:42:68:31:63:81:2a:87:5c:11:cb:36:dd:32:02:
         c8:a7:06:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhDwuH5ID/e3GHhXlQu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjMwZGE3MDIzMmY2Njc4NDczMGZkNmMxMjU1MTM1Yjdm
OGQwOWYwHhcNMjYwMzAxMTkwMDMzWhcNMjYwMzAyMTkwMDMzWjAzMTEwLwYDVQQD
EygzM2M5YjBkNDUzNWUyYTQzY2U4Yjk3N2RiM2E0YTk2ZjFjYzEyMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWAY4Ez2UstmXg2x+uuqQLIT0gIk
e/B6RxteMgG4uuGw6h9sEo5nlhpYPwWdaprGFaZD6NP/mfud8LRHDhhI3U6PWfHa
LnioNtq/J1642aGiCadF5IQHbHYMAgl7AzWGYYzrA02ANCq2snYoNWAWTEqjUB1o
ApGrbKe3gXuozCbQdq1f5SVWGGN8u7ihzdmCrp5RDwf5wrVQzWrzL09ovsur8sPM
7D9IlsvIMGoM/+gDnzs4TLhY8RR4nR7UTkyC567KT1+We6c4YRsO7mZHEyLpgbzl
2aWewyViVJk2NaqdSsANT7h2DKolWQYvVryKoOP5O8oQcYli5aFTTPlRwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPJsNRTXipDzouXfbOkqW8cwSMcMB8GA1UdIwQY
MBaAFBMjDacCMvZnhHMP1sElUTW3+NCfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgt
ZWIwMWU4YThkNGIzLzEvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgtZWIwMWU4YThkNGIz
LzEvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqgWo4sF
6NKPJkhmFEb2a4Pbjr1uhF8X07W50b3xzf2hkSY3VSJP8gu+BsumEATs7kKx2Lzl
C4+TnrS8OgbCYx13G11Q0R1QL0XwrYL1W1GVARfl56opAJvAkkJMhf1Mr3oD4wb0
j/qM+qKiCmpOFS7hav/rIZGfQFnyIEomLtXF6iw+dMfTnMFf3PXvFQaPX5nIWyJ/
k88HTewdk3Rlb/ZORLcfYHKbJj6gaLm+jFgOR2/ncvBUmNBk83mwTfHpdYRgmsgc
hM5trc0YoV4z4mmnyd3GCWl5rueSrpVAnq75TFBLJ/tO81U8BuRoZkJoMWOBKodc
Ecs23TICyKcGUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:08:00 2026 by rpki-client