Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File:                     ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier:          9VB/HmY4EwFVgyf9QKeNArDI94E8FyIsK6D/y6tRZRw=
Subject key identifier:   F9:33:52:9C:93:B4:DB:F3:F5:2D:97:74:43:41:7B:5A:62:9C:62:F7
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer:       /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial:       019D99D0C76B2661EA89BA9A8A68FB5E4C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number:          0FA4
Signing time:             Fri 17 Apr 2026 05:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:29 +0000
Files and hashes:         1: LihjF3erJvHMjTYo7GDxbJGT55U.roa (hash: tOjtoNpUm+UuyQUObaS6VVdDcVoLBkYa2bxLOM78Y7k=)
                          2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: Nv89NURuJjrS8xE+rlEOaBAOwW3+N3noEd147HAV9KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:c7:6b:26:61:ea:89:ba:9a:8a:68:fb:5e:4c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
        Validity
            Not Before: Apr 17 05:01:29 2026 GMT
            Not After : Apr 18 05:01:29 2026 GMT
        Subject: CN=f933529c93b4dbf3f52d977443417b5a629c62f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:05:09:e1:47:17:08:2a:39:31:63:cc:5b:
                    c4:c8:5a:55:d3:a5:d7:e7:82:f9:ad:0b:86:e2:8e:
                    f4:44:82:cb:15:03:fb:69:a5:1d:5f:7a:dd:bc:98:
                    4d:06:3d:10:fe:d8:0d:d5:b5:62:0a:35:33:13:92:
                    e9:d0:ef:d0:bf:c1:81:2d:6b:98:02:87:2c:34:27:
                    e2:e1:c8:44:33:17:37:b0:e6:84:d6:3e:14:35:92:
                    a7:97:65:a7:91:e8:36:e8:f7:02:ac:bd:c0:96:92:
                    5a:b4:bf:c1:9a:73:d9:ee:62:49:af:25:a0:20:c8:
                    31:4a:23:c5:2f:c4:c9:bb:29:30:d8:5b:19:12:21:
                    54:8b:41:88:84:0e:7b:46:b4:b5:c8:db:7b:f6:2b:
                    02:a1:75:9d:ef:02:dc:ee:07:5a:54:2c:93:f8:2a:
                    82:1a:df:0f:3c:b1:ea:9a:65:a6:ee:be:c8:52:a1:
                    a1:7c:05:fc:af:e9:65:1d:37:7c:ea:5d:4f:f9:cf:
                    54:63:ec:2f:84:7b:74:42:9f:48:ea:03:a7:29:8a:
                    f3:89:aa:5f:08:92:d7:7f:54:be:4b:be:9f:f2:07:
                    34:63:98:da:eb:68:d2:74:5d:af:c6:05:c1:0a:a9:
                    71:53:7e:95:8b:03:12:13:00:9f:46:25:0c:3f:d7:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:52:9C:93:B4:DB:F3:F5:2D:97:74:43:41:7B:5A:62:9C:62:F7
            X509v3 Authority Key Identifier:
                keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:ed:21:dc:08:75:7d:5c:cd:9e:b9:9d:4d:7a:27:4a:ad:
         48:52:bd:8b:e6:f4:37:dc:00:c8:cb:dd:a2:3b:2f:da:b7:9d:
         96:0d:ab:df:0d:07:d0:92:cb:5f:84:51:0e:79:71:ae:91:dc:
         ee:e3:fc:8f:55:bc:7e:d7:d6:1d:d2:d8:5a:49:2a:79:d0:ea:
         c1:5e:aa:96:2b:7f:fe:31:f0:79:92:c5:bf:4a:9e:e6:1e:35:
         1e:2b:b4:fb:8b:66:42:bd:d9:a6:19:4d:8f:7f:cc:bb:a4:ba:
         d0:8c:84:7c:2f:83:c3:bb:31:5a:71:69:98:de:09:2c:ac:01:
         fc:12:18:d5:06:2b:45:12:2f:7d:80:e4:46:aa:a1:fb:a4:db:
         1d:ae:a8:ec:9a:42:99:52:54:37:ef:b9:a7:5b:63:82:71:ca:
         69:a2:79:ed:72:16:19:91:ab:c0:cb:35:d3:db:c8:61:f2:df:
         bd:f5:f7:82:14:e0:34:cf:3e:d4:0e:74:1d:ad:af:1f:aa:01:
         c6:55:04:d0:b3:30:64:9e:46:8b:bf:2c:d2:e8:8c:40:75:9e:
         e4:5b:e4:97:61:cc:c1:01:d1:ec:c7:8d:b7:b9:56:8a:db:4b:
         21:ce:b0:05:dc:60:34:25:c6:c0:8b:0c:8c:7e:18:17:c2:39:
         78:52:3d:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0MdrJmHqibqaimj7XkyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0
NzQ4MzUwHhcNMjYwNDE3MDUwMTI5WhcNMjYwNDE4MDUwMTI5WjAzMTEwLwYDVQQD
EyhmOTMzNTI5YzkzYjRkYmYzZjUyZDk3NzQ0MzQxN2I1YTYyOWM2MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa0FCeFHFwgqOTFjzFvEyFpV06XX
54L5rQuG4o70RILLFQP7aaUdX3rdvJhNBj0Q/tgN1bViCjUzE5Lp0O/Qv8GBLWuY
AocsNCfi4chEMxc3sOaE1j4UNZKnl2Wnkeg26PcCrL3AlpJatL/BmnPZ7mJJryWg
IMgxSiPFL8TJuykw2FsZEiFUi0GIhA57RrS1yNt79isCoXWd7wLc7gdaVCyT+CqC
Gt8PPLHqmmWm7r7IUqGhfAX8r+llHTd86l1P+c9UY+wvhHt0Qp9I6gOnKYrziapf
CJLXf1S+S76f8gc0Y5ja62jSdF2vxgXBCqlxU36ViwMSEwCfRiUMP9flawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkzUpyTtNvz9S2XdENBe1pinGL3MB8GA1UdIwQY
MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct
MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx
LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcHtIdwI
dX1czZ65nU16J0qtSFK9i+b0N9wAyMvdojsv2redlg2r3w0H0JLLX4RRDnlxrpHc
7uP8j1W8ftfWHdLYWkkqedDqwV6qlit//jHweZLFv0qe5h41Hiu0+4tmQr3ZphlN
j3/Mu6S60IyEfC+Dw7sxWnFpmN4JLKwB/BIY1QYrRRIvfYDkRqqh+6TbHa6o7JpC
mVJUN++5p1tjgnHKaaJ57XIWGZGrwMs109vIYfLfvfX3ghTgNM8+1A50Ha2vH6oB
xlUE0LMwZJ5Gi78s0uiMQHWe5Fvkl2HMwQHR7MeNt7lWittLIc6wBdxgNCXGwIsM
jH4YF8I5eFI9pw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:35 2026 by rpki-client