Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File:                     ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier:          K+wWfXOAUxFdP2syLIAafjnFEKIEUB0RZueMBZWKreg=
Subject key identifier:   D6:94:13:09:F8:1A:AD:F4:F8:69:31:FA:50:3D:98:79:5D:1E:2F:A8
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer:       /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial:       019D25BAC94ACCEC954D1F91654F4EF125EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number:          0F28
Signing time:             Wed 25 Mar 2026 16:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:31 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:31 +0000
Files and hashes:         1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: zhwIQenO2Un0bq/J6tJeatBPRETHomCXZwF6mPzUky4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:c9:4a:cc:ec:95:4d:1f:91:65:4f:4e:f1:25:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
        Validity
            Not Before: Mar 25 16:01:31 2026 GMT
            Not After : Mar 26 16:01:31 2026 GMT
        Subject: CN=d6941309f81aadf4f86931fa503d98795d1e2fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:41:3c:91:a6:ca:6d:51:68:84:8d:83:61:a4:
                    be:45:ae:87:f7:02:bd:d1:02:e5:d2:b9:df:7f:04:
                    b7:dd:4a:47:83:c0:fd:ea:dc:c8:fd:3b:15:2f:7e:
                    97:2d:70:7a:f4:24:18:50:b5:11:3d:ef:35:9c:d8:
                    77:e3:a5:b2:79:f9:5d:84:f5:a0:14:69:15:83:0a:
                    ee:f0:13:f3:bd:c1:74:fe:58:76:57:a8:97:67:11:
                    33:e6:03:64:8b:ac:a4:c3:5c:26:e5:a1:47:c6:56:
                    b9:01:d4:1c:3b:41:96:c8:65:6b:72:1c:f9:c1:f7:
                    d4:2e:e2:fb:40:a6:db:9f:c8:7c:e3:9e:0f:dc:57:
                    18:16:9f:96:e6:a4:40:9f:67:9b:7a:dc:17:c4:47:
                    7d:7d:28:71:e1:00:78:9e:2b:98:7a:1f:bf:f2:26:
                    3b:07:d0:2c:f2:6f:20:a2:e2:4e:f7:be:1b:67:93:
                    f2:62:cf:bb:2a:38:f3:c5:10:59:bf:6a:a8:16:89:
                    56:06:47:53:b6:65:22:52:f1:09:83:57:5b:82:25:
                    55:67:56:a6:71:3e:05:f6:03:26:55:ac:57:0a:c4:
                    1d:9d:d2:1d:e4:7b:c8:e1:dd:b0:c5:14:58:d5:57:
                    03:14:33:9a:bb:16:14:41:84:50:5f:eb:0e:0f:23:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:13:09:F8:1A:AD:F4:F8:69:31:FA:50:3D:98:79:5D:1E:2F:A8
            X509v3 Authority Key Identifier:
                keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:e8:19:9b:24:7f:50:e8:4d:6e:1d:ae:7c:7c:0d:85:62:
         78:03:26:7c:88:f3:69:33:8f:d5:db:ee:52:da:cc:d1:96:45:
         02:8f:f0:e4:6f:3c:05:af:57:b7:68:42:c4:57:80:11:c6:fb:
         b2:29:45:b0:10:b2:e2:73:e2:5e:20:8e:94:74:c5:a5:4b:44:
         52:82:c8:a5:1f:ca:bc:18:b0:ca:08:08:62:dd:dd:10:ce:2f:
         d3:d6:15:b7:92:b4:3e:3d:08:08:69:fe:f9:1e:27:54:11:cd:
         4a:a0:1b:2a:b1:0f:a1:99:5b:cb:77:6c:b7:0f:e5:a4:67:11:
         c4:db:ce:d0:8a:4d:bd:ce:e6:88:bd:47:f9:bc:63:a3:93:6d:
         2a:0a:4c:3f:ae:74:ea:b7:3f:da:a0:35:ca:ef:4c:68:41:ae:
         2b:6e:57:c9:8f:53:a0:39:33:4e:48:09:86:8c:a7:ca:82:73:
         fc:4c:56:62:7a:9f:f0:e6:ba:7d:43:60:6d:59:03:be:f2:19:
         83:51:f4:95:7b:82:aa:1c:90:ed:93:d7:86:5a:87:38:89:7c:
         89:44:de:07:81:d3:c0:1a:d6:2f:ba:4c:43:51:a7:90:bb:11:
         01:4b:c1:88:5e:68:95:e9:fe:50:29:b3:94:ac:72:32:4a:15:
         42:37:f8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luslKzOyVTR+RZU9O8SXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzg5ZmI0OGZiMDVkNDgxZjFmMjM5MTk0YzUzN2QxNWIz
NTcwMDkwHhcNMjYwMzI1MTYwMTMxWhcNMjYwMzI2MTYwMTMxWjAzMTEwLwYDVQQD
EyhkNjk0MTMwOWY4MWFhZGY0Zjg2OTMxZmE1MDNkOTg3OTVkMWUyZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EE8kabKbVFohI2DYaS+Ra6H9wK9
0QLl0rnffwS33UpHg8D96tzI/TsVL36XLXB69CQYULURPe81nNh346WyefldhPWg
FGkVgwru8BPzvcF0/lh2V6iXZxEz5gNki6ykw1wm5aFHxla5AdQcO0GWyGVrchz5
wffULuL7QKbbn8h8454P3FcYFp+W5qRAn2ebetwXxEd9fShx4QB4niuYeh+/8iY7
B9As8m8gouJO974bZ5PyYs+7KjjzxRBZv2qoFolWBkdTtmUiUvEJg1dbgiVVZ1am
cT4F9gMmVaxXCsQdndId5HvI4d2wxRRY1VcDFDOauxYUQYRQX+sODyN47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaUEwn4Gq30+Gkx+lA9mHldHi+oMB8GA1UdIwQY
MBaAFHo4n7SPsF1IHx8jkZTFN9FbNXAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUt
YTFhMDhlYmY0ZWVhLzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUtYTFhMDhlYmY0ZWVh
LzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG7oGZsk
f1DoTW4drnx8DYVieAMmfIjzaTOP1dvuUtrM0ZZFAo/w5G88Ba9Xt2hCxFeAEcb7
silFsBCy4nPiXiCOlHTFpUtEUoLIpR/KvBiwyggIYt3dEM4v09YVt5K0Pj0ICGn+
+R4nVBHNSqAbKrEPoZlby3dstw/lpGcRxNvO0IpNvc7miL1H+bxjo5NtKgpMP650
6rc/2qA1yu9MaEGuK25XyY9ToDkzTkgJhoynyoJz/ExWYnqf8Oa6fUNgbVkDvvIZ
g1H0lXuCqhyQ7ZPXhlqHOIl8iUTeB4HTwBrWL7pMQ1GnkLsRAUvBiF5olen+UCmz
lKxyMkoVQjf4YA==
-----END CERTIFICATE-----