Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          uy3FaGqRVwLjtV1yJigyB0uLY25PHCTwHR6iJhOYTY0=
Subject key identifier:   01:68:D9:15:47:14:31:F9:F3:3D:B9:D2:71:0F:2C:BF:2E:BD:63:DC
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019CACB508C5D55F6B51B9847610F63EDC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          12EF
Signing time:             Mon 02 Mar 2026 04:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:11 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: vAxmp3n4nawU/mx+CkXMna841T9Ze/z5ljRH9ggjyfA=)
                          2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
                          3: JtnFvVL5luwjJsUrKE_PkZqBzv0.roa (hash: bNLA85FkwBGVG4amTnLndpNSGrwg8SVdNJn4yP+K6lQ=)
                          4: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
                          5: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:08:c5:d5:5f:6b:51:b9:84:76:10:f6:3e:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Mar  2 04:01:11 2026 GMT
            Not After : Mar  3 04:01:11 2026 GMT
        Subject: CN=0168d915471431f9f33db9d2710f2cbf2ebd63dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:50:7a:8b:90:43:50:d1:bc:1c:db:4b:29:
                    e8:5b:aa:a5:a1:54:df:67:10:86:14:66:c8:88:3a:
                    1a:b3:1f:0c:76:28:df:08:d6:2d:94:27:83:a6:3f:
                    40:93:32:77:1b:28:e5:f0:0e:28:c3:79:2a:57:6a:
                    7a:ec:97:ee:b9:59:b6:8c:b6:ae:07:e0:2a:61:bf:
                    1d:29:33:bd:3f:4a:80:f7:34:7d:47:7b:1c:bf:0c:
                    c1:6e:a0:b5:f1:a4:fa:83:97:e5:13:e3:15:39:63:
                    bd:75:4c:bc:bc:65:43:7d:77:81:64:54:e4:1e:26:
                    5d:0a:a8:76:96:fa:59:dc:2d:d6:5a:43:07:e4:ed:
                    bc:76:89:36:7c:f9:47:b3:9f:ec:9a:54:db:04:22:
                    a2:44:e6:63:b3:a3:0a:e0:24:59:35:6d:91:89:cf:
                    19:64:c8:2a:03:8c:90:fc:0b:31:44:44:3e:af:90:
                    39:0a:44:10:05:a9:e9:c3:13:0d:a3:69:c4:b9:a7:
                    1c:23:db:72:6f:70:2c:6a:99:b4:8f:b9:9a:8e:3d:
                    16:62:4e:81:44:f5:f5:b4:c2:66:04:4c:6b:33:00:
                    19:93:6f:33:8f:8b:f6:82:01:25:d6:e2:eb:76:45:
                    3c:d0:90:d9:ea:b0:3b:47:9c:f2:47:c3:dc:fb:a1:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:D9:15:47:14:31:F9:F3:3D:B9:D2:71:0F:2C:BF:2E:BD:63:DC
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:23:77:16:52:dc:b3:fb:1b:73:fe:7d:23:fd:84:38:b5:5a:
         f1:2b:31:fa:0f:c5:d3:a0:02:60:1a:fb:46:46:63:31:d9:55:
         6d:38:6e:4c:d8:17:cd:cc:f0:10:15:ff:d8:64:5a:81:1c:ed:
         ab:40:d9:1c:0e:5b:c8:2f:c6:b7:ba:89:eb:37:44:1b:f8:28:
         e9:d6:d5:37:a3:4c:a0:1e:a6:6a:b0:11:29:d8:02:7b:90:d4:
         75:cf:7a:85:73:db:79:d9:21:31:b2:e2:a2:8e:b6:2b:9a:ab:
         ad:02:3b:b3:a7:cd:08:1e:60:15:52:45:25:12:cc:31:eb:a3:
         77:d9:93:26:f2:f4:98:32:9d:81:16:58:aa:29:91:fc:72:53:
         e0:5f:0c:9f:1c:57:0b:29:4d:b3:a2:44:c4:06:ec:b0:9b:78:
         2c:09:11:79:c9:6c:7e:63:f3:68:35:28:ef:2a:44:df:61:fa:
         b9:a3:69:3b:31:2f:d4:f5:66:67:c4:3e:a7:36:14:4a:cf:b3:
         53:ad:3f:18:27:4c:6e:5d:57:28:a8:d3:6c:21:7f:78:e8:eb:
         1e:04:1e:2d:e9:d7:91:89:00:7a:e4:40:20:1f:f1:56:46:b8:
         c6:53:8b:bd:70:93:76:ee:29:ae:45:df:12:de:5b:9a:c1:77:
         fc:60:05:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:36 2026 by rpki-client