Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          gXmXGpspM8+Z5Xh9kEH9kQwlh6kapEhc/kLgBnJGv7I=
Subject key identifier:   95:CA:7F:18:F9:F1:CD:B0:97:0D:97:03:8F:8D:F8:69:D3:91:C0:C8
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       019CAAFD6154C9CC6D4FE613C5600C95D4F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 20:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:57 +0000
Files and hashes:         1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
                          2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
                          3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
                          4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
                          5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: zK4aGoHFG3ZNviTH9KGYK7jOgu18JSP8bMlD3z7QMjw=)
                          7: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:61:54:c9:cc:6d:4f:e6:13:c5:60:0c:95:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Mar  1 20:00:57 2026 GMT
            Not After : Mar  2 20:00:57 2026 GMT
        Subject: CN=95ca7f18f9f1cdb0970d97038f8df869d391c0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:32:26:2f:c9:a0:ea:34:81:eb:c7:ca:6c:
                    8b:ba:a8:21:ec:c5:4e:c2:eb:b8:2c:5a:02:d4:26:
                    50:32:f4:f7:4f:17:02:3b:e6:f2:46:81:26:7f:ef:
                    ca:cc:0a:c8:e9:7b:f4:8c:7f:1b:a6:82:f0:1a:af:
                    01:f7:b6:4f:23:f9:9e:fc:98:20:a5:28:cc:f1:ed:
                    a2:34:f4:71:dc:b6:8c:ca:57:ed:61:16:a5:e5:65:
                    9e:43:fd:1e:16:19:f8:a3:c9:4c:7e:1e:ed:10:f1:
                    80:ee:06:cd:96:91:b3:03:2b:d7:7f:06:49:b7:5e:
                    fd:b4:cc:58:a6:73:87:15:37:43:d8:7a:d0:df:b2:
                    da:0d:5f:70:df:f9:ac:27:c9:fb:30:28:5d:7e:0d:
                    56:4e:72:7c:8f:7e:28:65:6a:12:a1:99:eb:69:9f:
                    6e:b0:de:f2:9a:7a:71:6f:9b:54:75:15:3c:b5:ae:
                    c9:51:bd:f5:e3:6c:bb:a8:64:a8:56:6e:ad:82:4c:
                    65:6e:ba:ad:9f:cf:38:3c:84:f9:5a:b8:59:93:2a:
                    aa:97:8d:85:35:84:92:76:08:a7:0b:7a:d6:3a:c5:
                    7e:89:f1:3b:98:b1:0b:47:25:0e:09:91:2e:fc:48:
                    2a:c4:ea:00:d9:34:f3:d4:d2:07:5a:83:13:d5:fc:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CA:7F:18:F9:F1:CD:B0:97:0D:97:03:8F:8D:F8:69:D3:91:C0:C8
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:32:ad:39:bf:59:6a:24:3d:a9:e4:73:f7:08:c5:1b:fe:17:
         60:4c:1b:e5:2f:49:95:e8:69:7d:dd:64:ac:61:f1:da:07:57:
         64:7b:d7:3b:98:16:ea:7f:f6:83:a6:ad:d7:86:0d:30:c8:16:
         57:d6:ac:f5:cd:18:e5:fc:c8:42:e4:e4:71:f5:82:c3:e8:cd:
         9d:ba:3c:52:33:8d:0a:6d:80:c3:16:4b:6b:be:b1:b6:aa:7d:
         50:2c:52:1b:7a:19:75:3b:de:fb:6e:58:5d:6a:86:ab:77:2b:
         f6:6b:b1:c2:ac:37:3e:61:fa:6e:87:78:24:7b:37:41:7b:0d:
         cb:bc:07:4b:81:09:0b:04:45:63:85:0e:1c:eb:75:49:61:64:
         5e:75:1f:19:a1:12:5f:ee:3c:fe:ce:9b:9d:c3:e9:d4:07:6a:
         30:f6:58:8d:f4:12:3a:43:63:8e:6e:69:4d:66:29:15:bd:f8:
         b2:19:d7:13:f5:da:eb:09:f5:ba:09:3b:ac:39:a0:29:70:f8:
         ea:24:b2:34:68:c8:74:24:4c:f4:85:83:96:45:5e:d9:6c:90:
         66:f2:6a:b5:da:60:e0:29:fc:90:12:f2:12:ac:31:8e:22:6c:
         57:ad:82:90:95:6e:c7:ee:7c:7f:d8:a5:99:e0:21:24:8c:e3:
         2b:01:d0:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/WFUycxtT+YTxWAMldT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0
NzdmNzUwHhcNMjYwMzAxMjAwMDU3WhcNMjYwMzAyMjAwMDU3WjAzMTEwLwYDVQQD
Eyg5NWNhN2YxOGY5ZjFjZGIwOTcwZDk3MDM4ZjhkZjg2OWQzOTFjMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QwyJi/JoOo0gevHymyLuqgh7MVO
wuu4LFoC1CZQMvT3TxcCO+byRoEmf+/KzArI6Xv0jH8bpoLwGq8B97ZPI/me/Jgg
pSjM8e2iNPRx3LaMylftYRal5WWeQ/0eFhn4o8lMfh7tEPGA7gbNlpGzAyvXfwZJ
t179tMxYpnOHFTdD2HrQ37LaDV9w3/msJ8n7MChdfg1WTnJ8j34oZWoSoZnraZ9u
sN7ymnpxb5tUdRU8ta7JUb3142y7qGSoVm6tgkxlbrqtn884PIT5WrhZkyqql42F
NYSSdginC3rWOsV+ifE7mLELRyUOCZEu/EgqxOoA2TTz1NIHWoMT1fwEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXKfxj58c2wlw2XA4+N+GnTkcDIMB8GA1UdIwQY
MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt
OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1
LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzKtOb9Z
aiQ9qeRz9wjFG/4XYEwb5S9Jlehpfd1krGHx2gdXZHvXO5gW6n/2g6at14YNMMgW
V9as9c0Y5fzIQuTkcfWCw+jNnbo8UjONCm2AwxZLa76xtqp9UCxSG3oZdTve+25Y
XWqGq3cr9muxwqw3PmH6bod4JHs3QXsNy7wHS4EJCwRFY4UOHOt1SWFkXnUfGaES
X+48/s6bncPp1AdqMPZYjfQSOkNjjm5pTWYpFb34shnXE/Xa6wn1ugk7rDmgKXD4
6iSyNGjIdCRM9IWDlkVe2WyQZvJqtdpg4Cn8kBLyEqwxjiJsV62CkJVux+58f9il
meAhJIzjKwHQyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:34 2026 by rpki-client