Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          VL02P6W1ZRTHQ89UYeYmWSOyVdg+cg1e4fAuynX5EJI=
Subject key identifier:   AD:4D:29:34:FD:90:E6:5B:4D:C2:1B:6C:A0:A5:B6:02:F6:7B:C0:44
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       019D2704D62BD8652865F97DC0839E4CDAD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0EA2
Signing time:             Wed 25 Mar 2026 22:02:01 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:01 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:01 +0000
Files and hashes:         1: WOR1ryq1yq_sySTGxjjKrKinhZM.roa (hash: BLhtkn0XoKuNpX6EOUgjUhzDHI6DAMy035uEGXaAl50=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: NPpA1L/8xKIDGn+Yj1qzkv7LJFs+TsSPqjfTf0q5Jfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:d6:2b:d8:65:28:65:f9:7d:c0:83:9e:4c:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: Mar 25 22:02:01 2026 GMT
            Not After : Mar 26 22:02:01 2026 GMT
        Subject: CN=ad4d2934fd90e65b4dc21b6ca0a5b602f67bc044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:9b:5d:7d:44:0e:84:bf:fe:00:d0:80:14:
                    f0:01:25:ef:14:b6:29:5f:9b:c4:6f:c5:b9:31:48:
                    0d:c8:a0:b3:3a:6b:68:8c:ee:3d:24:fc:76:9c:1d:
                    41:86:ed:e4:27:14:2b:18:c4:e4:7a:6f:d4:82:b8:
                    f5:cc:ed:53:84:47:66:d2:58:6e:56:46:cb:8d:f2:
                    d6:a8:c0:05:f6:ff:04:80:bc:74:8b:f2:bd:04:f6:
                    ad:0f:1b:9a:6a:9b:41:58:94:eb:eb:9f:6b:87:01:
                    46:fb:ad:f3:d4:26:5c:a7:19:0a:7d:9a:1b:f6:24:
                    0e:e4:18:bf:f0:97:df:33:e6:ba:2e:34:6a:a9:72:
                    a5:1a:a2:70:d6:63:7e:b1:77:5d:ef:fc:25:5e:f3:
                    2c:84:07:ab:31:01:81:0e:5b:df:da:72:8c:e7:7d:
                    dd:4e:cf:e2:10:a2:d2:7e:b3:80:af:92:d9:2a:d8:
                    c9:06:ae:7b:9b:6b:53:52:d3:44:cc:6d:9a:c8:81:
                    4e:f7:eb:27:60:93:75:d8:65:cd:e6:21:cd:bf:f4:
                    26:3c:d2:d0:ce:c9:ac:52:be:f4:0b:e4:0d:b3:32:
                    c3:e2:c9:5d:68:b9:ed:f6:7d:47:7b:ee:21:f2:77:
                    b6:2e:02:3e:5e:72:67:ff:6d:84:16:28:02:56:6e:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:29:34:FD:90:E6:5B:4D:C2:1B:6C:A0:A5:B6:02:F6:7B:C0:44
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:59:40:3b:47:41:4a:c9:bb:6a:47:2a:7c:04:c8:e0:60:
         64:19:65:4b:8a:92:da:8b:3c:ce:c6:1e:b6:3e:b6:69:04:ea:
         f3:da:6a:cf:1a:b5:df:0c:67:d9:ad:0f:01:af:b3:41:c7:f9:
         a0:0f:ba:d3:dd:d9:65:94:8d:e1:f4:12:d8:ea:3f:9d:40:b4:
         b5:cd:8c:cc:dc:ef:0d:50:79:a9:93:07:95:0c:aa:a1:61:57:
         f8:9c:64:68:f3:9d:67:17:e4:93:10:44:33:01:75:77:46:39:
         29:70:08:32:2c:94:d6:38:f1:06:32:f5:00:82:f1:e1:a7:4b:
         30:85:a0:95:99:0b:ba:cf:1d:50:aa:e0:e1:6b:9f:05:27:ba:
         04:ae:90:ad:ea:cf:2d:84:8d:78:2a:d8:f7:fc:13:0e:6e:63:
         2a:23:8b:9e:03:a8:c6:e4:12:8f:89:27:8d:2b:7c:fa:4b:51:
         e9:ae:e2:01:42:e0:d1:ef:76:9e:2f:09:ea:8f:e7:39:55:b7:
         f9:7e:44:ea:1b:97:b5:4a:11:9c:c9:0d:c6:d6:69:81:87:a5:
         34:38:43:47:7c:e6:72:03:e7:20:e4:a7:d8:21:b7:c8:27:0c:
         c2:47:a5:8b:df:80:f8:a2:0b:8f:5d:95:e6:4d:0f:34:1e:73:
         96:1d:02:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNYr2GUoZfl9wIOeTNrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl
Mzk4MjAwHhcNMjYwMzI1MjIwMjAxWhcNMjYwMzI2MjIwMjAxWjAzMTEwLwYDVQQD
EyhhZDRkMjkzNGZkOTBlNjViNGRjMjFiNmNhMGE1YjYwMmY2N2JjMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYKbXX1EDoS//gDQgBTwASXvFLYp
X5vEb8W5MUgNyKCzOmtojO49JPx2nB1Bhu3kJxQrGMTkem/Ugrj1zO1ThEdm0lhu
VkbLjfLWqMAF9v8EgLx0i/K9BPatDxuaaptBWJTr659rhwFG+63z1CZcpxkKfZob
9iQO5Bi/8JffM+a6LjRqqXKlGqJw1mN+sXdd7/wlXvMshAerMQGBDlvf2nKM533d
Ts/iEKLSfrOAr5LZKtjJBq57m2tTUtNEzG2ayIFO9+snYJN12GXN5iHNv/QmPNLQ
zsmsUr70C+QNszLD4sldaLnt9n1He+4h8ne2LgI+XnJn/22EFigCVm6LQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1NKTT9kOZbTcIbbKCltgL2e8BEMB8GA1UdIwQY
MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt
OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz
LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBtZQDtH
QUrJu2pHKnwEyOBgZBllS4qS2os8zsYetj62aQTq89pqzxq13wxn2a0PAa+zQcf5
oA+6093ZZZSN4fQS2Oo/nUC0tc2MzNzvDVB5qZMHlQyqoWFX+JxkaPOdZxfkkxBE
MwF1d0Y5KXAIMiyU1jjxBjL1AILx4adLMIWglZkLus8dUKrg4WufBSe6BK6QrerP
LYSNeCrY9/wTDm5jKiOLngOoxuQSj4knjSt8+ktR6a7iAULg0e92ni8J6o/nOVW3
+X5E6huXtUoRnMkNxtZpgYelNDhDR3zmcgPnIOSn2CG3yCcMwkeli9+A+KILj12V
5k0PNB5zlh0Cig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:32 2026 by rpki-client