Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          a4gmGuk/ZL+bEYDcvg4Qb0eE6lpnvHLAYO9UTrsx78M=
Subject key identifier:   0F:3D:AB:5F:83:33:BA:8F:7F:DC:0C:F7:96:C7:64:43:D3:7E:4C:B3
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019CAA9005A2F6047A926F35866907C59E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          0BEB
Signing time:             Sun 01 Mar 2026 18:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:31 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: mf+/zWpxTWJW0tet2nYRH+vOHmgaE0Iq4GcpEsT8pnM=)
                          2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
                          3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:90:05:a2:f6:04:7a:92:6f:35:86:69:07:c5:9e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Mar  1 18:01:31 2026 GMT
            Not After : Mar  2 18:01:31 2026 GMT
        Subject: CN=0f3dab5f8333ba8f7fdc0cf796c76443d37e4cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:7c:64:8b:14:71:1c:5c:f3:de:ab:7f:de:
                    33:f3:76:41:d7:7d:1a:fb:78:38:6e:7b:ac:80:7a:
                    9e:e7:92:5f:e9:9e:39:74:18:e5:b6:c6:15:f3:15:
                    54:5f:87:37:7a:56:50:b1:f4:3f:63:f9:a4:17:9a:
                    c9:f5:de:57:70:cd:04:36:9a:f7:26:b5:74:33:5a:
                    e1:99:18:1f:cc:1f:cd:e4:7a:93:86:d4:90:68:ae:
                    36:d7:a5:4d:b3:a1:45:0b:de:4e:f3:44:f4:fb:9d:
                    45:6e:57:8a:d6:51:55:c5:14:45:df:ec:84:7e:e1:
                    77:72:78:bb:fc:e5:19:e4:9c:fb:32:2d:44:3a:22:
                    b7:2d:4a:50:43:0e:7c:bc:2b:17:55:f0:92:b6:27:
                    c5:b4:ca:e6:b0:ed:42:36:cc:dd:5b:13:af:d2:b1:
                    13:b6:8d:d2:50:a9:cd:a2:34:2e:40:23:77:a3:8e:
                    8a:8d:d7:78:f5:24:aa:56:84:55:db:ed:34:71:72:
                    73:af:6c:49:0d:72:e5:52:20:4f:c3:5b:b5:98:df:
                    16:84:1b:2c:fe:c6:c8:22:e4:da:7d:02:96:ac:77:
                    a2:63:58:6b:70:ad:1e:0a:85:1b:23:28:e7:c6:e9:
                    6f:af:85:61:7f:c7:49:c0:1d:10:23:62:69:bf:c5:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:AB:5F:83:33:BA:8F:7F:DC:0C:F7:96:C7:64:43:D3:7E:4C:B3
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:00:b9:10:4c:9e:ad:64:8a:e0:c2:28:fb:c1:e7:b2:25:16:
         6a:fd:37:07:13:6f:f5:b6:5d:cd:2d:81:3e:6b:b1:aa:e6:14:
         e2:7f:67:fe:41:68:11:8e:75:e8:e7:ae:70:6f:45:f6:75:94:
         3b:7e:a5:08:a0:92:fa:55:47:84:09:89:c8:2e:d6:8e:02:0e:
         6b:ab:6e:bb:a0:b4:86:f8:60:6f:1c:e2:07:58:f5:8d:19:0b:
         9e:86:6e:9f:9c:08:05:32:c4:5a:82:18:ad:b3:ab:e7:78:ac:
         ca:69:11:00:10:58:eb:68:2a:48:0b:bf:a6:61:d1:f1:1f:d4:
         e6:d6:00:f0:63:0b:52:f2:b0:2d:7a:5a:d4:58:7e:8a:91:ca:
         f5:c8:de:05:82:45:91:98:ab:b2:5f:05:31:de:36:f1:ef:44:
         79:77:cd:dd:22:fc:f0:2c:89:f6:3b:65:95:db:db:32:85:86:
         5b:05:0c:66:4b:1f:74:55:4a:2a:1a:eb:b6:ef:84:b8:69:49:
         f5:3c:c2:61:3a:5a:5b:93:73:3c:9e:2b:c5:63:56:77:b2:e0:
         d4:58:65:ed:51:07:db:0d:b3:98:6a:16:44:dc:a2:8d:ca:eb:
         ee:a8:e2:02:ea:4a:82:e3:f8:0d:7d:91:ea:55:6e:a7:76:3f:
         95:f6:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:14:19 2026 by rpki-client