Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File:                     L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier:          sC/X4kavA3p6hUagSFyZc5kxNed8JzzurvstBc7U3xo=
Subject key identifier:   CE:F1:30:35:E1:97:66:E5:A2:C1:F9:67:70:A8:6B:78:16:0D:A2:2C
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       019CAAC6BAEEB97A5182D07C46EA25DFB3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number:          1864
Signing time:             Sun 01 Mar 2026 19:01:16 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:16 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:16 +0000
Files and hashes:         1: 0N1ybgxxtNhvCwLcIqKzP6B5Bdc.roa (hash: as7k9qaZ/282WKH3mpIqj9cBm6rSsZBjpJcgWfn8pO4=)
                          2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: WicQBvrwCel51HoYY+acmeLNs0nHaY01EX+jXpIhjbw=)
                          3: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:ba:ee:b9:7a:51:82:d0:7c:46:ea:25:df:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Mar  1 19:01:16 2026 GMT
            Not After : Mar  2 19:01:16 2026 GMT
        Subject: CN=cef13035e19766e5a2c1f96770a86b78160da22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:82:2a:38:8b:c2:e0:0c:dc:88:16:81:94:
                    6d:53:a3:6f:8f:16:e0:e5:e7:55:f8:8c:1d:88:fa:
                    27:a8:c8:32:99:9a:1e:8a:97:49:17:51:12:cd:7e:
                    59:1e:f6:c8:ce:5f:11:f8:4e:03:90:9c:df:2e:7c:
                    c2:00:a7:ec:10:73:e1:8f:f2:64:93:de:e3:1f:ff:
                    b2:e3:d4:6d:ed:6b:27:10:06:f9:7c:5b:02:0b:12:
                    cd:8d:b5:b9:5b:a0:80:09:51:88:6b:4a:37:ff:9a:
                    92:ee:18:74:86:1f:80:d6:f8:83:df:41:48:04:0e:
                    1a:94:89:85:2b:e0:7e:fc:4b:14:0e:4c:3c:4a:12:
                    7f:12:ef:dd:e8:52:aa:4f:6b:20:fb:58:d9:0e:fb:
                    9d:e4:ed:bc:5a:ee:f5:72:f0:e9:f8:00:b3:76:b9:
                    39:b0:d8:f3:66:7c:9a:78:fa:5b:c4:e8:6f:63:bd:
                    e4:4d:1c:14:59:50:5f:a1:68:fd:99:2c:ad:14:3e:
                    10:de:ac:23:7f:56:33:53:0e:e8:a1:09:1e:0c:b0:
                    c8:ec:4e:cc:6b:a1:98:66:60:29:53:3a:ef:72:35:
                    0b:c3:4c:c4:4a:9c:e5:57:92:db:02:8c:6f:5d:de:
                    ff:d4:58:aa:5d:86:d3:a1:d2:a5:8c:b2:a7:c2:9a:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:30:35:E1:97:66:E5:A2:C1:F9:67:70:A8:6B:78:16:0D:A2:2C
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:75:84:22:7c:be:a7:9b:a3:36:6c:13:cf:21:d0:e1:81:
         16:e6:a3:63:17:00:02:c7:9d:00:0c:38:bd:c7:1e:0a:43:71:
         5b:0e:60:a5:5b:3d:ae:e2:2e:32:0f:5a:d8:0e:e1:98:f0:9e:
         ec:f7:a9:70:de:c7:f0:bb:05:d7:de:f1:d8:b9:c4:11:78:52:
         05:ac:d4:84:40:2a:aa:56:c4:f4:62:3c:84:73:9e:cb:46:9f:
         3d:c4:35:a5:65:a9:4c:3d:98:9b:a6:20:1c:e6:d7:5e:45:d0:
         74:74:17:8d:52:62:e7:07:21:b1:08:fe:ab:a3:56:aa:77:19:
         1d:ad:e3:1f:b2:87:76:54:2c:6d:c8:b8:a8:05:f8:a3:85:33:
         50:02:34:9c:e5:73:01:d6:ad:6d:1f:6c:d4:8f:f5:2d:d1:65:
         d9:ae:51:0a:fe:37:f4:ba:ad:fc:54:cb:b5:fc:e1:63:86:7a:
         c0:dd:1e:4e:ca:aa:a5:ca:d3:7f:aa:44:7c:0d:10:87:c5:49:
         33:38:7d:3f:23:34:b8:41:16:80:38:a2:b8:4f:de:7d:c5:c9:
         9e:19:70:20:de:fd:cb:0c:50:36:8f:a9:89:50:49:7b:14:b1:
         d3:a0:54:5e:a7:d1:21:a1:63:bc:ba:94:2f:76:1f:3d:be:4c:
         7f:26:05:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrruuXpRgtB8Ruol37PXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjYwMzAxMTkwMTE2WhcNMjYwMzAyMTkwMTE2WjAzMTEwLwYDVQQD
EyhjZWYxMzAzNWUxOTc2NmU1YTJjMWY5Njc3MGE4NmI3ODE2MGRhMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfSCKjiLwuAM3IgWgZRtU6Nvjxbg
5edV+IwdiPonqMgymZoeipdJF1ESzX5ZHvbIzl8R+E4DkJzfLnzCAKfsEHPhj/Jk
k97jH/+y49Rt7WsnEAb5fFsCCxLNjbW5W6CACVGIa0o3/5qS7hh0hh+A1viD30FI
BA4alImFK+B+/EsUDkw8ShJ/Eu/d6FKqT2sg+1jZDvud5O28Wu71cvDp+ACzdrk5
sNjzZnyaePpbxOhvY73kTRwUWVBfoWj9mSytFD4Q3qwjf1YzUw7ooQkeDLDI7E7M
a6GYZmApUzrvcjULw0zESpzlV5LbAoxvXd7/1FiqXYbTodKljLKnwpoSjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7xMDXhl2blosH5Z3Coa3gWDaIsMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHJ1hCJ8
vqebozZsE88h0OGBFuajYxcAAsedAAw4vcceCkNxWw5gpVs9ruIuMg9a2A7hmPCe
7PepcN7H8LsF197x2LnEEXhSBazUhEAqqlbE9GI8hHOey0afPcQ1pWWpTD2Ym6Yg
HObXXkXQdHQXjVJi5wchsQj+q6NWqncZHa3jH7KHdlQsbci4qAX4o4UzUAI0nOVz
AdatbR9s1I/1LdFl2a5RCv439Lqt/FTLtfzhY4Z6wN0eTsqqpcrTf6pEfA0Qh8VJ
Mzh9PyM0uEEWgDiiuE/efcXJnhlwIN79ywxQNo+piVBJexSx06BUXqfRIaFjvLqU
L3YfPb5MfyYF7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:14 2026 by rpki-client