Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File:                     4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier:          k6PGyO7GMuxQJq8q9lHNL7NtxHDbBoYny562jmbKrVc=
Subject key identifier:   79:E2:EF:D6:C0:F3:2F:BC:74:93:92:6D:C5:A6:D8:66:94:DF:F7:2E
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer:       /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial:       019CAC46D8860F9BFEC09D26845580E9E5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number:          081E
Signing time:             Mon 02 Mar 2026 02:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:49 +0000
Files and hashes:         1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: IhDmoyzktM6/NyfOV0ToOFSiIX09cN/0GmeDmIKsKfY=)
                          2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d8:86:0f:9b:fe:c0:9d:26:84:55:80:e9:e5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
        Validity
            Not Before: Mar  2 02:00:49 2026 GMT
            Not After : Mar  3 02:00:49 2026 GMT
        Subject: CN=79e2efd6c0f32fbc7493926dc5a6d86694dff72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:19:e2:b9:e8:02:22:65:c1:74:3e:06:09:
                    f2:f8:e1:6b:a1:d3:0f:b0:71:3e:ea:7a:4b:5b:f6:
                    c0:a2:cf:41:40:30:36:cb:93:74:83:94:a2:fe:3c:
                    7d:d4:01:8c:0c:fd:5a:e0:c8:94:18:a8:84:db:ff:
                    0e:f5:24:95:61:e9:81:c6:e0:a4:28:04:a0:bf:cc:
                    8d:22:aa:22:18:f6:64:48:a2:96:77:8d:d8:27:52:
                    00:60:88:36:0f:a8:2f:a4:10:f7:cf:3b:c4:e1:6a:
                    d3:4f:cc:0f:e2:b5:9b:da:fa:04:20:b1:fe:78:93:
                    74:27:e8:37:a9:c5:9f:87:10:53:2b:ac:55:9e:30:
                    0d:41:07:3a:1d:a3:69:50:89:72:c0:86:7f:f9:16:
                    cd:f6:8a:16:ae:0d:1f:7e:29:7f:0e:eb:c2:3e:00:
                    99:cc:24:70:6d:0e:cb:97:2c:62:e8:d4:b0:e2:45:
                    52:d3:58:5b:0b:3f:0e:8c:98:f0:a2:7b:29:9d:44:
                    27:fe:44:58:0c:66:60:28:29:58:4e:72:a6:a5:9c:
                    13:79:e6:83:c2:0a:bf:df:51:84:b5:6c:ac:10:73:
                    5f:b1:4b:08:88:16:9b:77:16:1b:27:80:74:56:da:
                    82:4f:61:95:06:0d:4a:fd:ca:e8:7b:d5:3b:5c:d0:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:EF:D6:C0:F3:2F:BC:74:93:92:6D:C5:A6:D8:66:94:DF:F7:2E
            X509v3 Authority Key Identifier:
                keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:58:68:74:b3:6b:e6:82:c1:75:87:ef:5a:7c:e1:e2:4f:dc:
         b9:ff:12:37:5d:1b:fa:40:eb:78:8f:67:d8:97:ac:f9:19:1c:
         53:e0:d2:ed:8d:55:41:fc:16:9a:00:d9:86:a4:50:b0:89:67:
         d6:08:d7:d9:7e:37:13:01:16:07:fa:b3:a3:70:a4:b4:45:7b:
         a8:51:f7:6b:90:93:b5:4b:d2:64:84:31:99:81:16:7f:c1:7f:
         87:47:34:22:bd:52:e0:ff:10:9c:22:78:16:4f:df:db:68:c2:
         1c:ac:9e:a3:eb:90:ed:60:ce:c2:8d:07:c7:7b:49:5b:8c:68:
         84:8b:21:2e:83:c6:a0:b4:ed:0d:51:50:62:5c:87:ac:11:6c:
         cd:2f:96:4e:90:5e:03:ba:e3:9f:b2:0e:e4:4d:aa:49:56:bd:
         7c:46:05:ef:41:a9:0c:eb:08:21:04:37:e3:9a:34:6d:39:f6:
         69:90:5f:5c:cc:19:44:07:8d:73:39:b4:60:da:76:13:27:d8:
         cc:28:e6:fb:5e:58:e2:6b:3b:83:db:a5:e7:16:9c:4a:71:c4:
         00:9b:df:58:ec:b2:9c:f6:ed:0f:3c:db:6e:c0:18:ce:a7:b5:
         8f:80:8a:4d:3a:e5:81:b2:40:e0:63:1a:0a:5d:98:5a:59:17:
         ff:41:f9:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRtiGD5v+wJ0mhFWA6eX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTk1MzVmYWMzZmE0ODc3OTU3OWJjZThmYzNiNDAyZGVm
MmNiNDQwHhcNMjYwMzAyMDIwMDQ5WhcNMjYwMzAzMDIwMDQ5WjAzMTEwLwYDVQQD
Eyg3OWUyZWZkNmMwZjMyZmJjNzQ5MzkyNmRjNWE2ZDg2Njk0ZGZmNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZcZ4rnoAiJlwXQ+Bgny+OFrodMP
sHE+6npLW/bAos9BQDA2y5N0g5Si/jx91AGMDP1a4MiUGKiE2/8O9SSVYemBxuCk
KASgv8yNIqoiGPZkSKKWd43YJ1IAYIg2D6gvpBD3zzvE4WrTT8wP4rWb2voEILH+
eJN0J+g3qcWfhxBTK6xVnjANQQc6HaNpUIlywIZ/+RbN9ooWrg0ffil/DuvCPgCZ
zCRwbQ7Llyxi6NSw4kVS01hbCz8OjJjwonspnUQn/kRYDGZgKClYTnKmpZwTeeaD
wgq/31GEtWysEHNfsUsIiBabdxYbJ4B0VtqCT2GVBg1K/croe9U7XNDVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHni79bA8y+8dJOSbcWm2GaU3/cuMB8GA1UdIwQY
MBaAFOEZU1+sP6SHeVebzo/DtALe8stEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQt
ZGU5ZTI3ZWJiMjVkLzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQtZGU5ZTI3ZWJiMjVk
LzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFhodLNr
5oLBdYfvWnzh4k/cuf8SN10b+kDreI9n2Jes+RkcU+DS7Y1VQfwWmgDZhqRQsIln
1gjX2X43EwEWB/qzo3CktEV7qFH3a5CTtUvSZIQxmYEWf8F/h0c0Ir1S4P8QnCJ4
Fk/f22jCHKyeo+uQ7WDOwo0Hx3tJW4xohIshLoPGoLTtDVFQYlyHrBFszS+WTpBe
A7rjn7IO5E2qSVa9fEYF70GpDOsIIQQ345o0bTn2aZBfXMwZRAeNczm0YNp2EyfY
zCjm+15Y4ms7g9ul5xacSnHEAJvfWOyynPbtDzzbbsAYzqe1j4CKTTrlgbJA4GMa
Cl2YWlkX/0H5TQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:27 2026 by rpki-client