Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
File:                     e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json)
Hash identifier:          myLng93viojgosZuJCYAKP46YNCwstL9xnQ5SGC0+rE=
Subject key identifier:   AA:17:F8:5C:07:3F:06:82:3C:1E:DA:ED:11:3E:01:50:A9:69:1B:59
Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
Certificate issuer:       /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Certificate serial:       019CAD90A87ED5B03E54C3AD843498A7EC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
Manifest number:          044A
Signing time:             Mon 02 Mar 2026 08:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:04 +0000
Files and hashes:         1: 0miuZAWq-dOO-Jn3JVAzY9hO4b4.roa (hash: BcQ3ya6GIHzIhFL5Mc1jTVRT5iliAlPOPwVTsF/OORA=)
                          2: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: cNEGns9cocu/OPVqIOCTMPQhcVc46POG0UMZCVYnVHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:a8:7e:d5:b0:3e:54:c3:ad:84:34:98:a7:ec:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
        Validity
            Not Before: Mar  2 08:01:04 2026 GMT
            Not After : Mar  3 08:01:04 2026 GMT
        Subject: CN=aa17f85c073f06823c1edaed113e0150a9691b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:15:68:6c:20:ca:91:20:a7:55:82:da:78:84:
                    8f:60:89:50:d6:62:44:d5:57:eb:71:47:4e:e3:8e:
                    81:08:52:39:e6:aa:12:60:bc:4f:e7:f0:fd:63:f6:
                    0b:83:40:73:9a:44:28:c2:2b:b3:61:14:e8:fd:f8:
                    88:1f:ae:e3:31:bb:70:ad:34:54:11:8e:88:4a:e5:
                    ff:55:ff:bd:1d:82:71:8c:51:a2:d7:1b:9f:59:60:
                    68:cd:70:70:ca:0a:71:a9:ac:9c:74:16:31:58:1e:
                    cc:50:cc:5f:40:5e:3e:69:ba:21:55:0e:0e:26:a8:
                    30:c7:82:a3:9d:4b:fe:85:b8:90:75:f1:21:9d:ce:
                    75:04:12:2c:92:5a:1e:95:4d:fc:0f:80:7d:09:35:
                    7f:bf:c5:da:63:93:6f:61:e0:ea:38:8c:ea:e2:93:
                    c4:92:0f:73:8e:21:1e:72:11:50:b1:b1:be:c4:00:
                    01:d4:ca:ee:01:b5:cf:6a:7c:ef:ea:68:81:ab:4a:
                    cd:e8:ae:e5:e7:be:28:7e:e4:b1:20:49:30:43:21:
                    7d:d5:9f:95:59:ec:cf:c8:dd:e1:2d:8f:f9:e0:69:
                    df:a3:e1:f6:22:7f:33:27:65:9d:76:01:f3:4e:39:
                    d1:f0:2b:d8:ed:07:ea:d7:fb:de:97:e7:70:7a:30:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:F8:5C:07:3F:06:82:3C:1E:DA:ED:11:3E:01:50:A9:69:1B:59
            X509v3 Authority Key Identifier:
                keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:f1:56:20:98:07:84:7e:79:c2:03:c3:e8:40:08:8a:db:
         a3:36:55:bb:9b:48:f0:97:96:82:a0:8a:3c:e3:67:bc:8c:f6:
         4d:fd:e4:89:fd:73:3f:0b:5b:41:b8:82:80:74:9a:b2:75:8f:
         e0:dd:86:b8:a1:2a:e3:18:74:d1:e2:55:ba:aa:d4:62:0b:50:
         77:35:a9:26:45:d1:27:9b:1b:99:b8:03:26:3d:f3:75:9b:1c:
         ce:dd:97:09:d1:7d:9f:47:89:c6:41:93:c2:ce:63:03:d2:b9:
         ae:21:8f:ce:2d:04:01:f1:05:ab:0a:c5:e7:e8:8a:30:3d:55:
         f2:98:74:23:2d:f4:9a:a6:82:98:60:db:c4:34:c2:b3:ed:12:
         01:d7:d7:42:3a:b6:5f:a6:8c:9d:42:f4:a1:22:77:69:e4:35:
         4b:16:96:53:f3:d1:9b:8f:35:3f:73:91:ec:99:1d:88:c1:03:
         a6:b2:60:59:f9:52:8c:22:5f:88:52:66:12:74:e3:cb:6c:36:
         ec:d3:51:dd:3a:de:bd:33:90:b8:46:af:35:35:18:d7:0f:6c:
         e9:f1:10:d7:06:58:b6:8f:c2:70:01:cc:36:50:23:ad:31:02:
         9f:fd:33:2a:e8:c9:23:e8:ab:46:a7:29:af:21:c6:32:d1:ec:
         7c:69:1e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKh+1bA+VMOthDSYp+x2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNjYxNDI0MGJjMGY3NmIwMmY5ZTNhM2Y0MDYwYWI0OTM2
ZmY0NjYwHhcNMjYwMzAyMDgwMTA0WhcNMjYwMzAzMDgwMTA0WjAzMTEwLwYDVQQD
EyhhYTE3Zjg1YzA3M2YwNjgyM2MxZWRhZWQxMTNlMDE1MGE5NjkxYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/hVobCDKkSCnVYLaeISPYIlQ1mJE
1VfrcUdO446BCFI55qoSYLxP5/D9Y/YLg0BzmkQowiuzYRTo/fiIH67jMbtwrTRU
EY6ISuX/Vf+9HYJxjFGi1xufWWBozXBwygpxqaycdBYxWB7MUMxfQF4+abohVQ4O
Jqgwx4KjnUv+hbiQdfEhnc51BBIskloelU38D4B9CTV/v8XaY5NvYeDqOIzq4pPE
kg9zjiEechFQsbG+xAAB1MruAbXPanzv6miBq0rN6K7l574ofuSxIEkwQyF91Z+V
WezPyN3hLY/54Gnfo+H2In8zJ2WddgHzTjnR8CvY7Qfq1/vel+dwejCrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoX+FwHPwaCPB7a7RE+AVCpaRtZMB8GA1UdIwQY
MBaAFHtmFCQLwPdrAvnjo/QGCrSTb/RmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYt
ODBjN2FmODdjYzg1LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83OWIzZGItMjJjZC00NWYwLWFkMGYtODBjN2FmODdjYzg1
LzEvZTJZVUpBdkE5MnNDLWVPajlBWUt0Sk52OUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiDxViCY
B4R+ecIDw+hACIrbozZVu5tI8JeWgqCKPONnvIz2Tf3kif1zPwtbQbiCgHSasnWP
4N2GuKEq4xh00eJVuqrUYgtQdzWpJkXRJ5sbmbgDJj3zdZsczt2XCdF9n0eJxkGT
ws5jA9K5riGPzi0EAfEFqwrF5+iKMD1V8ph0Iy30mqaCmGDbxDTCs+0SAdfXQjq2
X6aMnUL0oSJ3aeQ1SxaWU/PRm481P3OR7JkdiMEDprJgWflSjCJfiFJmEnTjy2w2
7NNR3TrevTOQuEavNTUY1w9s6fEQ1wZYto/CcAHMNlAjrTECn/0zKujJI+irRqcp
ryHGMtHsfGkeIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:29 2026 by rpki-client