Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          Lbrrm4IrIKBgyFLPn2AaMWLRzeXH7rKlveh2UprmO+c=
Subject key identifier:   98:62:B5:EC:8B:BE:63:DA:D4:FF:EF:71:7E:C2:4A:7A:EA:3F:29:9B
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       019CAC7E4FE07AF89F1FAEA6688AEBBBF905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0D12
Signing time:             Mon 02 Mar 2026 03:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:24 +0000
Files and hashes:         1: 2YFl1nz6ibOdUXICM8EmCPLdQEU.roa (hash: e6z98KANzMTmyp6yuocLyiolXniFv4kx3RLaW4TSkDA=)
                          2: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: f5SxPHs79PyAu0DOFKksZb6Of6u2UgREmTl8aSJOMjY=)
                          3: Xx27rFNzn0CKCl9qSt2PCELhh7M.roa (hash: lrSb36B35+cjoGY4fibEVUmY5+MNB48JzpR68OA81aQ=)
                          4: bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa (hash: 4P/0oP6KrZeB/0pCl0SqvxvPAOXuMv82h87HkIeA7+0=)
                          5: otd5V2cV1Ca3eD_CY3OTJoxda-o.roa (hash: q2udBVaxk+e2Vd86P+KK9uKGO31T3slWZ/u6JA3I8mc=)
                          6: u8jIlP-9sy1xmDDwt89PXIovv5w.roa (hash: e83kW8pSB5IhX9GGs940RM/rz2pGIWlSPel7ssIVenI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:4f:e0:7a:f8:9f:1f:ae:a6:68:8a:eb:bb:f9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Mar  2 03:01:24 2026 GMT
            Not After : Mar  3 03:01:24 2026 GMT
        Subject: CN=9862b5ec8bbe63dad4ffef717ec24a7aea3f299b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:fb:b3:3f:7e:c7:26:e2:5b:c9:6a:e2:b0:
                    d8:65:b7:75:3b:bc:bc:55:33:89:f3:01:28:64:e0:
                    b2:fd:98:c1:1e:19:1e:79:13:9d:8f:5c:4d:21:f2:
                    80:5a:3c:1a:81:40:e1:db:54:51:c2:b6:da:96:41:
                    01:c9:55:ff:c1:22:9e:4f:f9:58:8d:88:4e:60:0f:
                    5e:0b:22:58:21:b6:ac:97:8f:ef:e7:78:56:f4:c3:
                    eb:30:4d:e3:37:40:ce:d0:16:a4:89:73:4a:1c:89:
                    74:ae:76:f6:b8:6c:a4:17:b5:2a:f4:6b:f5:1a:d5:
                    5e:88:d0:5e:65:68:ec:2e:51:4e:39:ef:d0:81:72:
                    ad:ca:56:97:a2:35:dc:8d:c5:81:ac:0b:3e:5b:40:
                    5d:9a:e1:80:c8:91:a0:12:a7:ea:97:37:de:30:20:
                    51:54:dc:5f:b9:bc:9b:e4:d7:ec:60:85:06:98:d3:
                    4e:dd:04:c8:97:16:ad:1a:f1:7d:81:1a:d4:d4:7e:
                    6b:aa:62:ee:35:89:46:7e:70:8a:67:62:58:dc:44:
                    58:1d:19:11:ad:3e:90:ef:04:96:15:f0:74:b7:53:
                    72:09:66:68:2d:28:14:33:83:14:01:60:a7:1c:7f:
                    d2:44:0a:33:b0:08:0d:e6:d1:9e:ca:20:29:b6:9a:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:B5:EC:8B:BE:63:DA:D4:FF:EF:71:7E:C2:4A:7A:EA:3F:29:9B
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:03:01:54:06:05:40:f7:b0:1f:f9:d3:0f:73:11:d6:42:d9:
         e4:de:bb:f0:34:3e:15:37:85:3e:a8:2d:f9:c8:22:58:2a:c2:
         5d:4f:3f:4f:99:4c:28:18:b1:22:3a:e5:99:fc:3e:9d:c0:f6:
         9c:60:da:dd:80:a0:bb:82:3c:05:5a:38:67:1c:ee:73:ba:0b:
         9d:20:5d:76:81:76:b1:00:da:d7:f7:43:2a:94:72:6e:6a:62:
         7d:9c:9b:44:7c:a8:18:46:41:43:78:97:42:97:e6:31:d9:61:
         0d:9f:d9:96:73:bf:91:02:96:fd:da:ae:bf:2c:c9:50:30:86:
         74:af:4c:e7:1f:21:8f:30:1f:70:1d:c2:36:36:fb:8c:37:fe:
         2b:fa:e5:c3:cb:b0:78:73:4e:3b:c0:95:80:05:da:d0:85:67:
         a4:b8:c7:2a:19:df:41:fb:7a:72:e2:a6:34:8d:ff:1d:63:df:
         6b:71:40:9e:fd:16:bd:c7:54:b4:91:15:41:d4:c0:c5:a9:f9:
         56:97:3c:ef:b4:e6:77:e7:94:7b:43:dd:1d:d3:aa:29:54:65:
         45:36:11:3a:5d:69:e5:f3:df:61:bc:59:0b:12:88:79:f1:5f:
         86:4a:e1:54:22:ed:06:06:90:dc:6a:a3:40:ba:d3:33:2a:35:
         7c:7d:36:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfk/gevifH66maIrru/kFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4
YTdiMzMwHhcNMjYwMzAyMDMwMTI0WhcNMjYwMzAzMDMwMTI0WjAzMTEwLwYDVQQD
Eyg5ODYyYjVlYzhiYmU2M2RhZDRmZmVmNzE3ZWMyNGE3YWVhM2YyOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwH7sz9+xybiW8lq4rDYZbd1O7y8
VTOJ8wEoZOCy/ZjBHhkeeROdj1xNIfKAWjwagUDh21RRwrbalkEByVX/wSKeT/lY
jYhOYA9eCyJYIbasl4/v53hW9MPrME3jN0DO0BakiXNKHIl0rnb2uGykF7Uq9Gv1
GtVeiNBeZWjsLlFOOe/QgXKtylaXojXcjcWBrAs+W0BdmuGAyJGgEqfqlzfeMCBR
VNxfubyb5NfsYIUGmNNO3QTIlxatGvF9gRrU1H5rqmLuNYlGfnCKZ2JY3ERYHRkR
rT6Q7wSWFfB0t1NyCWZoLSgUM4MUAWCnHH/SRAozsAgN5tGeyiAptppcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhiteyLvmPa1P/vcX7CSnrqPymbMB8GA1UdIwQY
MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt
MjFjNTg0NzBiOGQyLzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy
LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAMBVAYF
QPewH/nTD3MR1kLZ5N678DQ+FTeFPqgt+cgiWCrCXU8/T5lMKBixIjrlmfw+ncD2
nGDa3YCgu4I8BVo4Zxzuc7oLnSBddoF2sQDa1/dDKpRybmpifZybRHyoGEZBQ3iX
QpfmMdlhDZ/ZlnO/kQKW/dquvyzJUDCGdK9M5x8hjzAfcB3CNjb7jDf+K/rlw8uw
eHNOO8CVgAXa0IVnpLjHKhnfQft6cuKmNI3/HWPfa3FAnv0WvcdUtJEVQdTAxan5
Vpc877Tmd+eUe0PdHdOqKVRlRTYROl1p5fPfYbxZCxKIefFfhkrhVCLtBgaQ3Gqj
QLrTMyo1fH02HA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:48 2026 by rpki-client