Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
File:                     4VE2_v81dO-bImLeWbBqIZCPqz4.mft (raw, json)
Hash identifier:          1REaHwE8Nldki8yh5v8MW8rYion6/PpxsthMvsAk0IQ=
Subject key identifier:   1F:A2:CC:7C:40:08:6B:5E:CE:90:5C:77:34:18:5B:C0:D8:E7:B0:FC
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Certificate issuer:       /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial:       019CA97D7A81C75F6DA407F693EC1DE92EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
Manifest number:          140A
Signing time:             Sun 01 Mar 2026 13:01:38 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:38 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:38 +0000
Files and hashes:         1: 02ewy2NdwEqIPhzTQYrOjSAN2Pc.roa (hash: 1z0GuLX6P5o980y+Or1DXnPEqAb65d6y04qZo2Fq+bI=)
                          2: 4VE2_v81dO-bImLeWbBqIZCPqz4.crl (hash: fkiFmXmST4PIAu/jiKi9uw/p7LUoZN5QoTSIQuol0Uo=)
                          3: 6ASQk4Y7CI6ASkE0wQBheaqnf5A.asa (hash: H7jwtkFJLcpI5vTaQ7HL/g1XQv3iBkHAjj1YfjncfUE=)
                          4: BuaO7x7CizzehjR3wAMfxPM-upw.asa (hash: /l4j7MBdQud4LEWwCc4v0bKpr2n3ZZy/m+CkXbPi6pA=)
                          5: IO5mUJfpT1xU43YlzKHSEsPH-sM.roa (hash: eQXB16Lc63zu32ovMGwxvRTwr/w6x80LNOqhE2sjF08=)
                          6: J2nnsl4hy2WE-qoC70S5KQsrADI.roa (hash: 31L418Se3H5NxhFPerS0cbyc5yLfPuyzYUI2VkqYY9Q=)
                          7: U8_wzZE8n8bfCc5My7nsBIg3MGg.roa (hash: 0pUs+FOERfMRc5PwTXXbnvoGjgKD10riM+7V7dCl1Cc=)
                          8: tnBkR8qwS1hNlMZc7734TqbrFRE.asa (hash: EltXP1kfWq4RRj0QlyeQxvXD4q59DhdbDR/9rseLyBM=)
                          9: xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa (hash: d6gMqqQgOngwVzvKSMbg+S1gXWQvMt1hGMdLmOwF4eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:7a:81:c7:5f:6d:a4:07:f6:93:ec:1d:e9:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
        Validity
            Not Before: Mar  1 13:01:38 2026 GMT
            Not After : Mar  2 13:01:38 2026 GMT
        Subject: CN=1fa2cc7c40086b5ece905c7734185bc0d8e7b0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:fe:2e:4c:ec:78:23:05:ad:c4:32:bd:89:
                    36:85:60:df:8b:65:0c:ca:c3:e8:8f:8f:f7:a8:1c:
                    07:af:77:b6:bb:50:9e:c7:a9:2a:38:ff:f4:90:94:
                    57:0e:b2:ff:f0:5f:92:8e:e2:50:1d:c9:11:c1:d1:
                    b1:f8:80:f1:6e:f0:e7:ba:80:81:9b:96:58:9f:c4:
                    2a:a9:22:54:ba:11:0a:32:15:74:39:fe:3c:ce:e7:
                    03:27:2c:25:72:41:88:b9:70:4b:b0:67:05:3f:30:
                    bc:66:c6:bb:af:ba:db:72:95:34:da:17:51:83:6e:
                    41:71:60:45:3c:29:da:64:66:13:44:ec:c4:c5:4d:
                    91:2d:05:b8:8c:c9:27:bf:55:57:83:5f:b7:2a:40:
                    0d:d3:1b:09:29:54:fb:9e:b4:83:06:24:1e:9b:16:
                    66:d8:91:f4:b0:f1:d0:18:31:e1:4d:7e:3d:b5:64:
                    b5:4f:f7:00:72:75:e9:19:f2:03:9b:fb:9f:1b:34:
                    12:b5:57:48:e3:cd:f3:ea:cf:a4:c3:44:b8:01:0b:
                    82:2b:70:5e:47:d3:1d:9b:f0:ed:41:07:12:e1:83:
                    7c:ea:d7:95:10:cc:41:fb:34:0d:b7:ec:7b:d2:f7:
                    8c:68:e3:f6:40:a8:5a:7e:7d:30:58:3a:b1:ee:72:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:CC:7C:40:08:6B:5E:CE:90:5C:77:34:18:5B:C0:D8:E7:B0:FC
            X509v3 Authority Key Identifier:
                keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:97:f3:33:0e:65:ad:d9:3c:d4:50:90:f5:76:d2:96:82:
         13:93:bf:a2:e1:e6:50:61:34:ad:eb:f7:0e:ac:34:3d:5a:eb:
         e7:9d:06:e4:59:65:a9:38:20:02:8b:38:e4:6f:5c:e6:0c:82:
         ba:89:f0:d3:c6:b9:8f:64:43:35:1e:2b:26:50:09:1f:93:2d:
         08:64:3c:59:9f:62:22:05:62:ff:e2:06:12:67:9b:cf:05:67:
         1e:05:ac:0f:a9:99:0c:84:85:fa:89:48:e9:e4:41:d9:a3:fb:
         39:4d:91:0d:6f:61:6d:f6:61:31:15:0a:24:67:47:3c:45:cb:
         a1:88:30:b7:ec:5e:e4:de:07:8c:db:e8:bd:27:0a:7c:5f:dd:
         8e:0d:87:e1:cd:61:10:1a:a2:64:42:87:cf:62:bc:ec:36:e2:
         9e:73:e7:90:03:ee:6b:04:87:d9:f8:e6:12:04:f5:41:db:f1:
         6d:ba:d3:55:78:f5:56:38:34:76:9e:81:d9:28:ff:19:2b:8d:
         2d:83:a4:5f:d8:1c:a2:26:57:99:23:d7:9c:6e:dd:29:27:21:
         d0:f9:f0:d9:21:ef:1c:44:9b:68:e2:c7:6f:1b:2e:ca:b8:0f:
         78:99:37:53:e2:1d:5d:cf:e5:75:a9:61:66:35:3a:4a:ab:3f:
         5f:a6:78:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfXqBx19tpAf2k+wd6S7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjYwMzAxMTMwMTM4WhcNMjYwMzAyMTMwMTM4WjAzMTEwLwYDVQQD
EygxZmEyY2M3YzQwMDg2YjVlY2U5MDVjNzczNDE4NWJjMGQ4ZTdiMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDr+LkzseCMFrcQyvYk2hWDfi2UM
ysPoj4/3qBwHr3e2u1Cex6kqOP/0kJRXDrL/8F+SjuJQHckRwdGx+IDxbvDnuoCB
m5ZYn8QqqSJUuhEKMhV0Of48zucDJywlckGIuXBLsGcFPzC8Zsa7r7rbcpU02hdR
g25BcWBFPCnaZGYTROzExU2RLQW4jMknv1VXg1+3KkAN0xsJKVT7nrSDBiQemxZm
2JH0sPHQGDHhTX49tWS1T/cAcnXpGfIDm/ufGzQStVdI483z6s+kw0S4AQuCK3Be
R9Mdm/DtQQcS4YN86teVEMxB+zQNt+x70veMaOP2QKhafn0wWDqx7nJtYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+izHxACGtezpBcdzQYW8DY57D8MB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDiX8zMO
Za3ZPNRQkPV20paCE5O/ouHmUGE0rev3Dqw0PVrr550G5FllqTggAos45G9c5gyC
uonw08a5j2RDNR4rJlAJH5MtCGQ8WZ9iIgVi/+IGEmebzwVnHgWsD6mZDISF+olI
6eRB2aP7OU2RDW9hbfZhMRUKJGdHPEXLoYgwt+xe5N4HjNvovScKfF/djg2H4c1h
EBqiZEKHz2K87DbinnPnkAPuawSH2fjmEgT1QdvxbbrTVXj1Vjg0dp6B2Sj/GSuN
LYOkX9gcoiZXmSPXnG7dKSch0Pnw2SHvHESbaOLHbxsuyrgPeJk3U+IdXc/ldalh
ZjU6Sqs/X6Z44g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:52 2026 by rpki-client