Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
File:                     EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json)
Hash identifier:          n9UccirXg3Wd7VoNZCUyWJzQ2BGno9BdwsnfWNJdPWE=
Subject key identifier:   0B:1C:6A:23:CE:0B:A4:A6:14:96:A4:25:F0:E8:69:A9:41:16:47:69
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       019D28BB3264184D379C8F8C6558D1016E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
Manifest number:          16A1
Signing time:             Thu 26 Mar 2026 06:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:49 +0000
Files and hashes:         1: 1-aBWAUYXeNqWKAQsZifxbYqTz40.roa (hash: LP5gdiKclCS5MRY6PjE2n/jFS6tNTa5O9LpT5vH/DNQ=)
                          2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: 6hr+JWAeHqYPhQGyXyP3c2B/iz0xpWypP6LYqTyLC04=)
                          3: ERVnvcHm3_aCNNp0XApisyyWMMo.roa (hash: A6lnUxQU45bl1IXJraY/n4k6V7kjC4ZKad6O1K1oIds=)
                          4: ayNw208-0jdHTmZbn4HX-2MZet0.roa (hash: tNFhBG2uENbbChNJjGZGwhvIYrpJIH7cPKL/gvb0Bd4=)
                          5: jEHF2JhlerkwgIZYhi0p-P37ie0.roa (hash: nTp/Ugz+no+JQBbMsJeybMXRhILIChUqzXvxTziroZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:32:64:18:4d:37:9c:8f:8c:65:58:d1:01:6e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Mar 26 06:00:49 2026 GMT
            Not After : Mar 27 06:00:49 2026 GMT
        Subject: CN=0b1c6a23ce0ba4a61496a425f0e869a941164769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:9d:f1:5d:ed:ea:86:27:ca:9d:89:87:13:
                    d9:55:c2:7d:57:01:08:7b:bd:dc:3c:0a:ee:0b:e9:
                    2a:83:d7:81:20:83:f9:ed:bf:ae:1d:b4:67:7f:70:
                    e3:e2:14:e1:38:6f:38:53:10:71:4e:3c:8a:59:20:
                    5f:4f:13:81:2a:04:85:09:48:c0:41:b9:ee:20:f0:
                    0e:b8:ae:96:eb:a2:02:c6:90:9e:65:c3:9e:66:c5:
                    6d:c2:33:79:e2:bc:3e:97:ec:24:04:c6:f2:d5:d6:
                    74:f0:cd:d3:36:d8:a4:1e:d1:79:b2:c7:00:3f:13:
                    4c:2c:c2:64:7d:b9:2b:ad:c9:2d:97:a5:29:fc:57:
                    3e:e7:4b:2e:20:d2:55:a6:55:a4:b8:12:ff:53:19:
                    4f:56:7f:2a:06:c1:77:bb:22:65:26:dc:8c:f5:f0:
                    96:82:bd:3b:66:69:62:de:e1:26:04:3f:20:6b:e7:
                    6f:b7:1e:24:b4:a2:b8:45:b9:bf:ff:fd:5a:47:64:
                    d5:c1:6e:71:2e:08:d2:cb:af:6d:54:89:87:a8:7d:
                    69:c5:b6:89:e6:f9:c4:84:cc:6e:63:1a:12:60:f6:
                    61:82:21:6d:58:d8:69:0d:69:13:74:89:25:60:69:
                    ba:c8:ab:1b:8e:61:05:f9:08:f1:86:78:bf:c7:6d:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:6A:23:CE:0B:A4:A6:14:96:A4:25:F0:E8:69:A9:41:16:47:69
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:c0:f8:74:c9:81:bf:17:c4:fd:a8:68:0a:e6:40:88:00:
         d6:21:08:1d:29:f8:73:a8:1b:1d:f6:69:37:ca:08:a3:0a:78:
         eb:18:97:5a:c9:86:2d:df:09:8d:9e:b6:5a:c3:6a:f2:5e:8e:
         1c:e5:35:e9:63:bc:0e:ae:08:21:d7:34:b0:34:84:eb:df:86:
         f0:d7:bb:69:71:94:44:ba:fa:c0:8a:eb:60:cb:dd:84:88:bf:
         4f:4d:67:2d:c7:25:7d:2a:dc:3d:1d:ac:bf:79:15:76:2e:76:
         3c:f8:7d:0f:a1:4e:ee:5f:b8:5c:03:ff:c4:9b:11:57:c6:18:
         aa:6a:46:b7:70:5d:ac:df:78:5e:92:89:33:44:0a:54:84:f1:
         64:dc:7f:6d:c7:22:bd:32:90:79:fb:b0:b1:a9:7a:fd:ce:5d:
         8b:03:b6:bd:7f:9e:be:ae:0e:b7:13:7f:88:c7:bb:9b:9b:41:
         91:1a:ae:aa:63:2d:65:85:3b:bc:1a:f6:2c:f2:3a:b7:cc:e5:
         8f:e4:5b:85:17:5c:0b:3a:9b:9d:ea:16:4b:0f:2b:57:65:c6:
         4a:d0:77:25:82:34:ce:58:55:32:f3:ce:46:28:d0:35:b1:d1:
         11:81:4f:6f:ff:b7:f0:bd:f9:6c:1a:b6:ee:46:dd:64:db:7c:
         88:26:7f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzJkGE03nI+MZVjRAW5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNjJiYzM2NTEyNjU4YTBmN2QzZjk2YmMxZDhlNjdkOWZk
NDkxOGIwHhcNMjYwMzI2MDYwMDQ5WhcNMjYwMzI3MDYwMDQ5WjAzMTEwLwYDVQQD
EygwYjFjNmEyM2NlMGJhNGE2MTQ5NmE0MjVmMGU4NjlhOTQxMTY0NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAid8V3t6oYnyp2JhxPZVcJ9VwEI
e73cPAruC+kqg9eBIIP57b+uHbRnf3Dj4hThOG84UxBxTjyKWSBfTxOBKgSFCUjA
QbnuIPAOuK6W66ICxpCeZcOeZsVtwjN54rw+l+wkBMby1dZ08M3TNtikHtF5sscA
PxNMLMJkfbkrrcktl6Up/Fc+50suINJVplWkuBL/UxlPVn8qBsF3uyJlJtyM9fCW
gr07Zmli3uEmBD8ga+dvtx4ktKK4Rbm///1aR2TVwW5xLgjSy69tVImHqH1pxbaJ
5vnEhMxuYxoSYPZhgiFtWNhpDWkTdIklYGm6yKsbjmEF+Qjxhni/x21eYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAscaiPOC6SmFJakJfDoaalBFkdpMB8GA1UdIwQY
MBaAFBBivDZRJlig99P5a8HY5n2f1JGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYt
OTVhZDkyYWM4Njk4LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYtOTVhZDkyYWM4Njk4
LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO7A+HTJ
gb8XxP2oaArmQIgA1iEIHSn4c6gbHfZpN8oIowp46xiXWsmGLd8JjZ62WsNq8l6O
HOU16WO8Dq4IIdc0sDSE69+G8Ne7aXGURLr6wIrrYMvdhIi/T01nLcclfSrcPR2s
v3kVdi52PPh9D6FO7l+4XAP/xJsRV8YYqmpGt3BdrN94XpKJM0QKVITxZNx/bcci
vTKQefuwsal6/c5diwO2vX+evq4OtxN/iMe7m5tBkRquqmMtZYU7vBr2LPI6t8zl
j+RbhRdcCzqbneoWSw8rV2XGStB3JYI0zlhVMvPORijQNbHREYFPb/+38L35bBq2
7kbdZNt8iCZ/NA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:44 2026 by rpki-client