Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          nBSVTxm26YDrmIPD7Dd43SmYAm+RO2wIKk0JBcni0T0=
Subject key identifier:   83:69:69:DF:D4:4C:32:AF:76:BC:FB:3A:5D:31:4C:1A:B4:14:CB:CB
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       019D2772B84CFC6DA46A208CB688A7637C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          14B0
Signing time:             Thu 26 Mar 2026 00:02:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:02 +0000
Files and hashes:         1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: A0XyAI9UsAOIHldYyESIHkvg2blJCl/4OGe6A8Tp+Cg=)
                          3: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=)
                          4: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:b8:4c:fc:6d:a4:6a:20:8c:b6:88:a7:63:7c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Mar 26 00:02:02 2026 GMT
            Not After : Mar 27 00:02:02 2026 GMT
        Subject: CN=836969dfd44c32af76bcfb3a5d314c1ab414cbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:a6:2f:09:94:52:27:48:11:46:f8:ae:37:
                    90:3f:ef:62:e6:76:1a:de:76:04:24:b6:da:2c:54:
                    ff:31:c7:28:5a:a6:88:2a:28:55:04:e9:c2:70:71:
                    35:62:b5:00:5a:42:78:1a:4a:4d:b2:e6:ee:a2:60:
                    3d:c1:ef:cc:18:95:1e:53:bf:02:91:34:dd:6a:6a:
                    a7:13:3c:3c:04:01:b3:1d:be:2a:8d:fa:67:19:59:
                    36:1f:a9:f0:d9:00:86:0f:a3:cf:4c:ad:16:c6:6d:
                    b3:5f:cd:d5:0c:19:b2:66:5c:af:8c:11:16:0c:ae:
                    ce:1c:6f:10:fc:2b:77:4f:ef:55:1d:d7:b0:b0:55:
                    9d:c0:95:a0:c8:1e:34:ee:1f:8a:b7:fa:74:b8:58:
                    b4:62:de:ef:ff:9d:8b:61:f9:33:d4:6e:c7:33:bd:
                    ed:31:61:91:aa:b3:ed:10:9f:f8:d3:78:aa:9c:92:
                    04:74:a5:c1:e3:1e:b2:27:2e:d3:ba:2c:51:ce:38:
                    c8:be:41:50:64:51:31:6f:b2:ac:b4:16:8d:cb:7e:
                    a1:2f:17:4c:14:c9:b4:be:c9:6e:ce:f2:09:8f:79:
                    a4:a3:45:8d:eb:d5:86:7f:6c:63:55:6d:04:55:0c:
                    44:02:9d:71:76:b4:74:b8:69:55:16:4b:86:c1:bc:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:69:DF:D4:4C:32:AF:76:BC:FB:3A:5D:31:4C:1A:B4:14:CB:CB
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ae:dc:ee:5e:0d:b7:eb:86:12:ca:ab:96:e1:5b:f3:ac:25:
         87:61:bb:6b:a3:af:25:9d:d5:ac:ad:1c:ed:b7:13:62:52:81:
         aa:32:54:ca:99:56:06:17:1f:7e:c2:e8:72:64:eb:91:e4:58:
         24:02:7b:20:d0:97:1a:56:5e:34:18:a1:c0:d0:44:71:18:b3:
         a6:9c:c4:d4:ab:99:56:d8:6a:2d:06:6b:45:8b:cd:c9:8e:fe:
         9b:79:25:d9:a1:53:97:ac:61:4e:0c:de:f7:7a:a6:cf:aa:75:
         fd:89:14:48:6b:1b:54:e5:e9:60:c1:da:e5:34:6c:9a:c0:75:
         c9:9c:c6:ee:ea:34:1a:01:ac:d2:b1:2d:df:fa:26:90:08:9d:
         42:e5:02:7b:03:48:d3:dc:d2:e9:d4:d3:7b:f6:3a:78:79:f6:
         be:0c:5f:5e:f4:cf:c0:97:ad:d6:0c:c8:73:65:e6:db:bf:71:
         9c:9b:1b:19:ed:c8:fe:b6:68:52:88:62:b6:65:97:5c:e5:16:
         04:54:0b:d4:1a:d6:fd:54:eb:2d:46:59:ed:2b:b8:93:62:49:
         71:e4:af:a9:08:bc:5f:26:fd:15:65:a8:2b:65:f4:d3:65:0b:
         d4:e1:fc:2f:ed:23:90:5f:05:a2:92:a5:d5:c9:39:17:8e:cb:
         8d:cd:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:55 2026 by rpki-client