Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File:                     EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier:          Bgb54r/WvQdip1Qc1b2E88u/vCiv8Tu+8ATqX6zteYQ=
Subject key identifier:   21:57:66:34:B3:3E:16:98:20:16:A9:68:8F:9F:B2:35:CD:25:BA:8A
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer:       /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial:       01A0CE2397B7D2BD7D1D855145263379AC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:33 +0000
Files and hashes:         1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: nlvoAqTU9bdKCURpo4hfyTF/IwRfBeqd9E3IDbGCbYA=)
                          2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
                          3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
                          4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:97:b7:d2:bd:7d:1d:85:51:45:26:33:79:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
        Validity
            Not Before: Sep 23 12:00:33 2026 GMT
            Not After : Sep 24 12:00:33 2026 GMT
        Subject: CN=21576634b33e16982016a9688f9fb235cd25ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:a7:26:90:c4:ec:76:22:48:0a:a5:9e:08:
                    31:47:ad:d2:07:41:37:25:6b:a9:57:28:84:0a:94:
                    e5:66:40:f9:4b:02:6f:53:57:3e:37:2c:3c:ec:19:
                    c5:95:5a:45:d0:68:79:29:fd:7a:ae:39:ba:85:37:
                    1a:71:d1:8f:18:ec:ea:a1:32:0d:3f:ca:ac:e4:59:
                    c1:fd:e8:9d:9d:0a:70:ac:1a:79:55:1e:c5:31:fc:
                    81:18:c1:e8:13:4b:31:3d:a0:9c:b6:97:7b:60:ac:
                    b3:11:df:b0:10:c7:08:d1:6e:d2:ae:0c:fe:e9:85:
                    63:94:52:14:9d:b9:c2:88:07:26:e7:ae:c7:b4:c0:
                    80:a0:53:c3:4f:74:48:46:6a:ef:25:e2:7b:2f:cf:
                    5a:9b:b4:3d:99:80:4f:a3:2c:d7:02:19:26:6e:61:
                    f8:ba:72:e1:3d:8a:56:34:67:1b:e0:b3:ab:05:e7:
                    a5:6d:a2:79:21:0a:3e:0a:84:c5:bd:29:e9:a4:53:
                    28:3b:e4:0d:24:37:1d:ad:b4:14:38:eb:ba:8e:10:
                    52:44:43:8f:9b:09:79:78:f1:d1:52:8b:56:f1:0b:
                    2f:94:4d:46:05:73:4b:14:23:bf:ba:34:f4:7f:24:
                    71:75:09:85:4c:3e:7b:07:40:ee:e2:77:fc:72:f2:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:57:66:34:B3:3E:16:98:20:16:A9:68:8F:9F:B2:35:CD:25:BA:8A
            X509v3 Authority Key Identifier:
                keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:de:2f:67:da:25:e8:af:1e:76:e2:d0:7f:aa:46:16:0d:ea:
         d3:a3:d6:12:d5:8e:af:c0:ba:52:0b:10:0b:6c:28:9b:73:e9:
         92:f8:df:d9:9d:fa:ee:12:23:64:be:e8:85:96:3b:fc:3a:5e:
         49:60:b7:d9:96:f3:fd:f9:db:19:f8:25:ad:d5:42:0b:66:ec:
         54:e1:38:be:07:7e:6f:71:88:5a:6f:d0:0d:66:07:76:89:c3:
         c2:bb:a9:3b:cc:b6:f8:84:3f:14:d2:71:0f:d6:65:c0:78:f1:
         52:f1:4b:73:95:58:bc:b0:c1:2b:12:d5:38:8b:70:52:1b:4b:
         d8:54:bf:7c:54:3d:cd:40:ff:80:fe:06:ce:72:82:a7:a8:ee:
         f9:34:3d:2d:3b:ab:80:e7:33:93:89:37:b9:4d:92:a6:10:ce:
         7f:fa:aa:31:49:a0:e4:2f:63:ea:1a:4b:7b:96:0a:5c:ce:82:
         40:c3:18:2c:8f:a1:51:be:ea:67:f9:75:e4:03:7b:b9:72:8a:
         e9:43:10:bc:4e:21:6a:31:d9:4f:f5:bf:e7:5e:fc:ee:e2:8f:
         b8:04:e0:30:4e:d5:7c:e0:6c:a1:92:03:f7:07:7c:16:ea:12:
         9c:36:32:88:41:ed:46:24:1b:61:b4:cb:51:bb:3b:04:77:22:
         c5:75:f1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI5e30r19HYVRRSYzeax1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTViNWFkNDYyYmM0OTRjNDMyNDkzMWNkZjQzMDFjZGEw
MWY4MGMwHhcNMjYwOTIzMTIwMDMzWhcNMjYwOTI0MTIwMDMzWjAzMTEwLwYDVQQD
EygyMTU3NjYzNGIzM2UxNjk4MjAxNmE5Njg4ZjlmYjIzNWNkMjViYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+SnJpDE7HYiSAqlnggxR63SB0E3
JWupVyiECpTlZkD5SwJvU1c+Nyw87BnFlVpF0Gh5Kf16rjm6hTcacdGPGOzqoTIN
P8qs5FnB/eidnQpwrBp5VR7FMfyBGMHoE0sxPaCctpd7YKyzEd+wEMcI0W7Srgz+
6YVjlFIUnbnCiAcm567HtMCAoFPDT3RIRmrvJeJ7L89am7Q9mYBPoyzXAhkmbmH4
unLhPYpWNGcb4LOrBeelbaJ5IQo+CoTFvSnppFMoO+QNJDcdrbQUOOu6jhBSREOP
mwl5ePHRUotW8QsvlE1GBXNLFCO/ujT0fyRxdQmFTD57B0Du4nf8cvITXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFXZjSzPhaYIBapaI+fsjXNJbqKMB8GA1UdIwQY
MBaAFBIVta1GK8SUxDJJMc30MBzaAfgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuN4vZ9ol
6K8eduLQf6pGFg3q06PWEtWOr8C6UgsQC2wom3Ppkvjf2Z367hIjZL7ohZY7/Dpe
SWC32Zbz/fnbGfglrdVCC2bsVOE4vgd+b3GIWm/QDWYHdonDwrupO8y2+IQ/FNJx
D9ZlwHjxUvFLc5VYvLDBKxLVOItwUhtL2FS/fFQ9zUD/gP4GznKCp6ju+TQ9LTur
gOczk4k3uU2SphDOf/qqMUmg5C9j6hpLe5YKXM6CQMMYLI+hUb7qZ/l15AN7uXKK
6UMQvE4hajHZT/W/51787uKPuATgME7VfOBsoZID9wd8FuoSnDYyiEHtRiQbYbTL
Ubs7BHcixXXxdQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:27 2026 by rpki-client