Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File:                     KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier:          Je8CYG1aXw31XJCs/9STT+l8SvN3h21SXiREJLeiMv4=
Subject key identifier:   B7:D9:24:C4:5B:6B:3B:7B:9A:D4:0F:EB:63:19:E5:0E:22:79:82:92
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer:       /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial:       019CACB4764F722CB9FBAB4D0121FB963AF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number:          0E46
Signing time:             Mon 02 Mar 2026 04:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:33 +0000
Files and hashes:         1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: KrWl1w/xsDalmjdp4G8ZIXgL4/iljkE3uciWXd/y3rQ=)
                          2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
                          3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:76:4f:72:2c:b9:fb:ab:4d:01:21:fb:96:3a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
        Validity
            Not Before: Mar  2 04:00:33 2026 GMT
            Not After : Mar  3 04:00:33 2026 GMT
        Subject: CN=b7d924c45b6b3b7b9ad40feb6319e50e22798292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:30:de:16:8f:1a:fd:74:f2:b4:05:03:22:
                    32:ef:67:cc:c1:58:cf:b0:a2:70:33:cc:19:24:02:
                    da:91:79:63:fc:21:6b:bd:7e:2d:25:f8:1b:09:00:
                    c4:c8:fe:de:46:7d:27:fc:10:58:c1:fb:02:ca:0f:
                    bb:91:bc:14:e5:10:6b:fe:45:34:7a:66:28:19:6c:
                    96:1e:4c:b2:bf:5e:f7:81:c4:d6:0e:8a:9d:9a:cd:
                    df:08:18:52:17:7b:e9:14:93:12:8d:6d:91:56:d8:
                    15:ee:88:0e:cb:e5:43:bb:45:31:df:19:5c:f9:f4:
                    b1:f4:92:ff:8e:f1:ef:ac:ff:ca:a4:43:33:0c:c0:
                    53:c0:aa:8b:1d:0b:7c:5d:b5:81:e6:7a:5d:71:94:
                    ff:a5:a4:4f:68:d7:d4:b4:29:d5:1c:e5:38:da:91:
                    83:67:42:05:32:0a:b4:a7:71:46:38:86:49:08:15:
                    73:e1:17:3e:47:87:7e:96:19:e4:48:74:82:dd:59:
                    a2:c6:d9:da:69:78:20:d1:2a:17:8f:53:c8:e8:65:
                    21:2b:1a:5f:36:00:03:87:db:ab:39:9c:18:50:f2:
                    b8:74:d4:48:65:e0:f6:c2:7f:6f:ad:10:0a:8e:85:
                    8a:5e:2a:ac:19:7c:e5:df:d8:0a:b8:72:2d:ba:e6:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:24:C4:5B:6B:3B:7B:9A:D4:0F:EB:63:19:E5:0E:22:79:82:92
            X509v3 Authority Key Identifier:
                keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2d:dc:ce:e5:bb:64:59:f4:7d:c2:53:b6:e6:70:7a:9c:18:
         86:8d:e2:79:7d:72:66:5e:1c:0b:c8:1c:b3:54:3d:9f:7d:e2:
         5d:db:95:ac:e9:f7:1f:e4:da:ec:3f:96:d6:4c:43:74:82:2a:
         55:91:70:e4:a1:8d:49:b9:97:91:6c:d3:75:81:64:bf:07:dc:
         94:a6:80:4a:a2:b6:ca:a5:a5:d1:d3:c8:b4:56:4c:ec:23:82:
         6c:38:9b:fc:8e:e9:df:51:43:6e:0a:42:7f:e0:84:a5:f1:13:
         93:2f:27:86:d2:33:65:b5:1b:6e:c2:5a:77:95:7f:86:df:8f:
         11:49:be:45:5c:c3:5f:63:98:fb:4b:47:c6:e5:a5:ca:3e:c6:
         fc:ed:0c:2d:d1:42:90:01:cc:83:a0:59:39:04:4d:2f:9e:ad:
         94:b8:8c:39:35:c0:91:3c:bd:7f:81:71:04:b4:41:59:6b:5f:
         16:b2:02:1d:dc:62:11:4f:d9:61:19:54:c7:57:7b:3f:fa:1a:
         0d:f8:2b:11:a5:fc:8b:5e:9e:94:e6:18:a7:a3:2d:5a:e1:99:
         00:80:ba:14:20:49:f2:00:0f:c6:74:4c:0d:7d:ff:de:8b:8b:
         d8:15:65:6f:ed:fe:48:f1:16:45:8d:0d:f4:53:ca:3a:2c:d2:
         ad:7d:7f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystHZPciy5+6tNASH7ljr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjYwMzAyMDQwMDMzWhcNMjYwMzAzMDQwMDMzWjAzMTEwLwYDVQQD
EyhiN2Q5MjRjNDViNmIzYjdiOWFkNDBmZWI2MzE5ZTUwZTIyNzk4MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvAw3haPGv108rQFAyIy72fMwVjP
sKJwM8wZJALakXlj/CFrvX4tJfgbCQDEyP7eRn0n/BBYwfsCyg+7kbwU5RBr/kU0
emYoGWyWHkyyv173gcTWDoqdms3fCBhSF3vpFJMSjW2RVtgV7ogOy+VDu0Ux3xlc
+fSx9JL/jvHvrP/KpEMzDMBTwKqLHQt8XbWB5npdcZT/paRPaNfUtCnVHOU42pGD
Z0IFMgq0p3FGOIZJCBVz4Rc+R4d+lhnkSHSC3VmixtnaaXgg0SoXj1PI6GUhKxpf
NgADh9urOZwYUPK4dNRIZeD2wn9vrRAKjoWKXiqsGXzl39gKuHItuubpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfZJMRbazt7mtQP62MZ5Q4ieYKSMB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri3czuW7
ZFn0fcJTtuZwepwYho3ieX1yZl4cC8gcs1Q9n33iXduVrOn3H+Ta7D+W1kxDdIIq
VZFw5KGNSbmXkWzTdYFkvwfclKaASqK2yqWl0dPItFZM7COCbDib/I7p31FDbgpC
f+CEpfETky8nhtIzZbUbbsJad5V/ht+PEUm+RVzDX2OY+0tHxuWlyj7G/O0MLdFC
kAHMg6BZOQRNL56tlLiMOTXAkTy9f4FxBLRBWWtfFrICHdxiEU/ZYRlUx1d7P/oa
DfgrEaX8i16elOYYp6MtWuGZAIC6FCBJ8gAPxnRMDX3/3ouL2BVlb+3+SPEWRY0N
9FPKOizSrX1/dg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:38 2026 by rpki-client