Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          zq61Z2gl2mSBeA08lFQ1MSZmG3x9iQLSe59Gx9h07r4=
Subject key identifier:   F0:20:1B:9F:3E:5F:34:B0:B5:2D:42:00:11:98:E6:05:97:55:83:3F
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019CAAC61A23653673428458C3BE673AC81F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          12EE
Signing time:             Sun 01 Mar 2026 19:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:35 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: xCG3pcvqLFwpzqy4Gx/7F0Jta6/AEQm8JGkBmgpAP4I=)
                          2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
                          3: JtnFvVL5luwjJsUrKE_PkZqBzv0.roa (hash: bNLA85FkwBGVG4amTnLndpNSGrwg8SVdNJn4yP+K6lQ=)
                          4: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
                          5: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:1a:23:65:36:73:42:84:58:c3:be:67:3a:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Mar  1 19:00:35 2026 GMT
            Not After : Mar  2 19:00:35 2026 GMT
        Subject: CN=f0201b9f3e5f34b0b52d42001198e6059755833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:98:0c:92:17:0c:97:f2:0d:1c:4c:6b:0f:
                    22:d4:01:01:8e:e2:44:68:97:64:00:cf:c9:35:f7:
                    4b:58:64:93:56:c2:e0:33:41:5a:5f:88:8c:81:93:
                    a3:8b:06:25:70:e3:cb:b8:41:4a:1e:1f:e1:4b:bf:
                    c1:9b:f0:c3:72:57:29:af:90:fa:d5:6c:fc:d4:d8:
                    ca:f9:c1:6a:e0:90:f4:65:f7:b4:6d:6a:dd:e1:c3:
                    c0:45:4b:98:db:ea:48:94:30:f5:7a:66:3f:b2:a6:
                    90:d9:e0:8c:1b:2e:bd:f0:f9:a3:16:0b:91:49:7a:
                    b4:c3:42:7f:d9:03:eb:56:ee:49:74:f8:66:78:bd:
                    45:8f:c4:19:57:eb:91:a7:83:42:a9:f8:b1:b5:8b:
                    e1:d8:68:a3:bd:a7:6b:21:9d:60:83:46:5d:85:03:
                    77:da:91:5a:44:be:7f:90:a9:3c:b2:53:fe:d3:bd:
                    ed:2b:0f:ce:1f:88:3d:84:0b:ab:46:ef:07:b0:5c:
                    86:59:8e:cb:f8:2c:42:48:e8:fa:e1:eb:9c:a9:c8:
                    be:7c:e9:11:75:03:9e:14:53:73:29:2f:82:3b:78:
                    16:d7:16:11:70:1d:38:9b:7e:6c:6d:20:01:09:cc:
                    97:7e:4a:fc:3b:82:c2:24:29:8f:9c:47:8d:a0:94:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:1B:9F:3E:5F:34:B0:B5:2D:42:00:11:98:E6:05:97:55:83:3F
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:5d:5e:49:9c:8e:34:a5:1a:d1:56:72:2d:4b:d9:7b:3a:
         53:37:14:22:05:99:36:ae:7f:25:45:a8:de:55:37:97:26:98:
         28:94:f0:eb:b6:9b:5c:f1:07:17:0f:71:4b:21:03:33:05:bd:
         52:99:a9:3d:37:2a:51:a0:e0:73:74:8a:08:70:52:79:e8:d5:
         d8:46:24:77:74:6f:e0:44:1f:b3:96:92:4b:f4:a7:c0:8d:1a:
         d4:c0:80:35:c1:79:9a:3e:13:7a:8b:36:d9:ca:ed:07:d7:8f:
         b9:78:f2:f0:1f:f1:52:5e:37:88:0d:6f:e5:19:a4:4a:9f:f3:
         95:38:a1:29:7b:78:7c:02:b8:fa:73:c7:e6:4f:09:b9:cf:dd:
         7d:31:0c:2f:c0:a2:d7:51:08:d7:05:a9:d0:a9:58:8e:f4:51:
         f3:18:8f:a4:41:82:b3:c4:2d:e7:2b:f8:b6:ca:f2:6e:2d:a8:
         40:90:94:af:82:d1:a4:d1:02:35:5a:15:c1:a5:72:00:16:e3:
         ac:a7:a6:c6:55:18:4b:63:71:56:f0:ab:70:68:e2:03:41:03:
         21:57:01:75:c8:b3:ed:13:3b:1a:49:cb:d1:ea:12:58:18:43:
         54:15:07:d0:cc:10:4e:57:1c:71:d6:97:92:fe:4f:5d:88:a9:
         9f:fc:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:44 2026 by rpki-client