Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          EnhVgGZ+7cl+0MqT98wXO6ZDcQijosozFUaIueUMzmk=
Subject key identifier:   E8:F2:7B:5B:70:86:4B:24:9D:5D:2C:09:0D:5F:8F:6F:47:18:10:DA
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       019CAAC71C59FA0A2FD81A9C06B4F4EDC383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          06AA
Signing time:             Sun 01 Mar 2026 19:01:41 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:41 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:41 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: M5WT8AKxcq8TRrNYqQq2xLzpaygDjkZOMVZUdXXL6E4=)
                          2: widqsiuwPxfEW8bWQB1tkfB48s4.roa (hash: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:1c:59:fa:0a:2f:d8:1a:9c:06:b4:f4:ed:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Mar  1 19:01:41 2026 GMT
            Not After : Mar  2 19:01:41 2026 GMT
        Subject: CN=e8f27b5b70864b249d5d2c090d5f8f6f471810da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:9f:fa:c5:7f:bc:94:87:47:f1:08:c6:3b:
                    15:b0:0d:5c:26:37:be:10:0f:0b:09:89:51:ec:c6:
                    3b:ab:ac:2f:b3:8d:7e:c2:3b:3b:4d:25:08:e6:a5:
                    c4:71:f9:f6:ae:4d:31:35:0a:0c:41:6a:a6:9b:a7:
                    50:f6:52:fa:c1:21:f4:61:87:16:c7:b8:89:4b:5d:
                    53:e3:3f:67:b6:f8:6b:02:cc:2a:3b:53:fe:e4:4e:
                    6a:27:c4:87:06:98:52:e7:8f:7f:bb:a7:57:ac:19:
                    60:89:f7:d5:04:e8:da:af:f5:0e:48:fc:aa:d9:53:
                    93:b2:4b:12:e8:a1:c6:81:ee:5a:01:ee:f9:94:80:
                    41:2a:ab:d2:15:d8:38:6c:b8:c2:60:43:3b:1c:93:
                    43:be:ba:28:51:1c:97:a3:97:a0:2b:2e:2b:77:8d:
                    97:a6:4a:a3:eb:05:37:76:eb:00:45:53:63:9f:a4:
                    16:0b:e3:9b:5e:47:19:cc:de:4b:df:ab:6b:9e:80:
                    4f:6d:89:56:a6:04:8e:cc:99:cd:f4:9f:36:0d:39:
                    70:9d:80:14:62:83:3a:5b:9e:3f:52:ac:64:66:9e:
                    2a:be:cf:b9:97:88:b2:14:71:91:f4:46:ec:2e:2c:
                    33:d5:8f:ff:91:9f:50:74:e5:8c:4a:3e:7d:42:72:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:7B:5B:70:86:4B:24:9D:5D:2C:09:0D:5F:8F:6F:47:18:10:DA
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ce:20:2f:eb:d4:0a:f0:a2:8a:ef:af:88:fa:b8:10:a2:36:
         51:7c:0c:38:8a:f8:ec:89:79:c9:e3:4d:a1:03:a6:c2:0e:2d:
         13:a6:ac:2d:10:1c:85:1f:91:81:69:a1:a3:fc:fe:4b:79:8a:
         ab:46:88:bc:68:29:ba:4a:79:c6:ef:24:d4:f2:00:1b:87:ce:
         f1:9e:f9:48:bb:5c:4c:7c:0b:41:26:43:6b:d6:2e:d0:24:bb:
         64:dd:c2:9b:fa:45:69:fd:3e:2a:19:ec:af:fd:ab:0a:c5:12:
         32:cf:59:34:d0:0c:de:89:a2:bd:47:4d:2a:09:ff:bf:89:6b:
         c3:47:ed:9e:c0:23:cc:6e:94:8c:ab:e8:e8:ea:78:69:a5:65:
         ce:3b:27:9e:61:eb:6a:3f:cb:41:71:d7:7c:0c:bc:f1:36:0e:
         de:c3:96:65:e3:e3:e8:5f:4f:e3:47:a2:0a:d3:41:63:5b:b7:
         71:23:93:31:c9:34:5d:0a:87:28:ab:05:bc:44:cc:86:fb:f5:
         ec:7b:ac:37:7e:bd:b9:f5:a9:0b:32:68:ee:bb:f5:83:23:3f:
         bd:dd:48:75:58:ec:27:33:a1:38:2e:d6:5d:11:e9:07:90:48:
         da:88:99:3f:79:5b:47:9a:ca:20:4f:07:36:03:fc:55:a8:c8:
         af:39:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:24 2026 by rpki-client