Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          ZT1pynDuoKfcGz7DBXYhwijFnAq+kVXTuBrNZbfE6ss=
Subject key identifier:   E3:ED:A4:05:C4:89:85:30:A7:D0:3F:DF:83:2D:C7:89:8D:34:EF:BD
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       019CAC47768124F53B0CC034B0FF89916E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          0E44
Signing time:             Mon 02 Mar 2026 02:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:30 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: S6AwK2lQ0XI7ty1Ly1KxPCSDoDk/ZZcFbaHt7kxrzwI=)
                          2: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (hash: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:76:81:24:f5:3b:0c:c0:34:b0:ff:89:91:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Mar  2 02:01:30 2026 GMT
            Not After : Mar  3 02:01:30 2026 GMT
        Subject: CN=e3eda405c4898530a7d03fdf832dc7898d34efbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:0d:09:6e:ac:38:8d:b7:85:71:51:35:de:
                    5a:cb:ad:cb:48:76:54:72:d9:0e:e2:ac:13:13:a1:
                    38:ed:ba:aa:11:53:ef:3e:0c:36:66:a8:0e:28:d3:
                    10:d7:e5:1e:15:cd:9f:df:ab:43:db:18:aa:74:29:
                    7b:31:1a:02:15:79:8f:43:e4:27:f9:b7:79:4e:c1:
                    62:9d:29:e2:7d:d3:0a:f5:2b:92:85:fb:7c:9b:e7:
                    c0:5c:36:49:44:24:8e:de:27:2c:7a:72:62:5f:76:
                    8a:ce:58:03:43:be:1b:04:de:6a:5d:ce:55:99:7b:
                    49:88:b8:bc:f5:76:1b:96:ae:46:ff:c3:cb:ab:31:
                    8d:9f:8e:c7:b6:1a:c1:05:15:44:d2:81:20:ea:16:
                    dc:6d:d4:49:46:48:68:c0:bc:0d:10:f9:a6:03:c4:
                    eb:88:f6:42:11:1a:e3:32:85:7e:e0:1b:79:06:af:
                    aa:a0:a6:da:4b:1d:ba:95:0f:c0:b8:4e:94:d0:09:
                    cf:55:bf:c7:98:9d:8a:b9:18:0a:cd:94:65:a0:75:
                    06:76:62:f5:fd:f1:7c:f4:27:d2:7f:90:99:e7:25:
                    05:da:d8:6a:96:bd:9a:e3:7d:3e:e0:d3:86:44:05:
                    ab:7a:81:91:b7:35:ba:36:75:9f:b2:59:cb:34:c9:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:A4:05:C4:89:85:30:A7:D0:3F:DF:83:2D:C7:89:8D:34:EF:BD
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1c:47:2a:8b:4d:c9:4a:8c:91:9c:85:6a:17:4c:ae:3e:e4:
         71:c2:d9:0c:17:e3:85:b5:c6:4f:8d:12:29:31:13:cc:01:c5:
         23:ba:68:75:4d:8a:34:d6:8e:26:79:58:24:ec:7c:c7:ad:b8:
         fc:96:09:a9:5c:ae:d0:99:9d:8f:19:b8:d6:ed:67:97:e9:1d:
         f2:de:35:ed:7b:7d:02:80:f4:42:86:d5:a6:7b:16:70:22:2f:
         67:63:e2:a4:1a:1e:d7:8c:3f:21:a2:ad:20:0b:0e:e9:e6:53:
         c5:a0:1b:2e:e6:76:3c:74:c6:f7:ff:e2:12:0e:97:11:d6:d5:
         85:38:27:02:6d:c5:e7:94:11:fd:a8:42:7a:15:e9:86:a5:d6:
         39:93:2f:cd:83:ff:13:fa:e9:c6:7d:17:f9:d3:03:29:f8:af:
         4d:e5:a1:48:1d:5c:38:6b:b2:89:79:9e:3f:5f:9a:82:26:e5:
         5d:01:5f:42:cb:b8:3c:0a:b1:45:6e:2e:06:b3:ad:6d:4b:ed:
         50:17:3d:02:8d:d5:65:45:4d:39:ee:b1:8d:27:26:ab:ea:a1:
         e7:a0:75:e9:8c:3b:ed:2c:e6:4b:0b:81:cc:61:73:85:e2:d1:
         9a:c9:41:65:af:d9:ea:33:1e:75:24:ee:43:3b:f6:3f:42:03:
         33:a2:82:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3aBJPU7DMA0sP+JkW5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjYwMzAyMDIwMTMwWhcNMjYwMzAzMDIwMTMwWjAzMTEwLwYDVQQD
EyhlM2VkYTQwNWM0ODk4NTMwYTdkMDNmZGY4MzJkYzc4OThkMzRlZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+kNCW6sOI23hXFRNd5ay63LSHZU
ctkO4qwTE6E47bqqEVPvPgw2ZqgOKNMQ1+UeFc2f36tD2xiqdCl7MRoCFXmPQ+Qn
+bd5TsFinSnifdMK9SuShft8m+fAXDZJRCSO3icsenJiX3aKzlgDQ74bBN5qXc5V
mXtJiLi89XYblq5G/8PLqzGNn47HthrBBRVE0oEg6hbcbdRJRkhowLwNEPmmA8Tr
iPZCERrjMoV+4Bt5Bq+qoKbaSx26lQ/AuE6U0AnPVb/HmJ2KuRgKzZRloHUGdmL1
/fF89CfSf5CZ5yUF2thqlr2a430+4NOGRAWreoGRtzW6NnWfslnLNMm07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPtpAXEiYUwp9A/34Mtx4mNNO+9MB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxxHKotN
yUqMkZyFahdMrj7kccLZDBfjhbXGT40SKTETzAHFI7podU2KNNaOJnlYJOx8x624
/JYJqVyu0Jmdjxm41u1nl+kd8t417Xt9AoD0QobVpnsWcCIvZ2PipBoe14w/IaKt
IAsO6eZTxaAbLuZ2PHTG9//iEg6XEdbVhTgnAm3F55QR/ahCehXphqXWOZMvzYP/
E/rpxn0X+dMDKfivTeWhSB1cOGuyiXmeP1+agiblXQFfQsu4PAqxRW4uBrOtbUvt
UBc9Ao3VZUVNOe6xjScmq+qh56B16Yw77SzmSwuBzGFzheLRmslBZa/Z6jMedSTu
Qzv2P0IDM6KCMg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:47 2026 by rpki-client