Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          AWRhUHPU9/XTeT9Q+GT7wl7YH/PpqYTQaydHN6nNIEg=
Subject key identifier:   B4:13:9A:46:A4:4F:AE:E4:DF:1F:07:AD:92:9E:F6:91:41:F4:43:F7
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       019D2BF310DD5719C373C60EF975D7AFD111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          13CB
Signing time:             Thu 26 Mar 2026 21:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 21:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 21:00:42 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: WsmW8sPsl8vxqcXVJEjF+aCoZrLgh6LR+gFiE77MPyo=)
                          2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
                          3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
                          4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:f3:10:dd:57:19:c3:73:c6:0e:f9:75:d7:af:d1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Mar 26 21:00:42 2026 GMT
            Not After : Mar 27 21:00:42 2026 GMT
        Subject: CN=b4139a46a44faee4df1f07ad929ef69141f443f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:87:5a:a3:c3:03:ed:07:41:84:d8:34:3e:
                    78:78:cf:77:e8:1c:85:8b:0b:58:33:a8:87:cf:31:
                    1c:de:68:26:7e:74:1e:30:fc:88:5f:43:c9:41:d4:
                    e5:60:d9:e0:c1:54:ea:d2:1f:25:3b:8e:fb:d0:c9:
                    cd:3a:85:c4:93:b9:11:f1:88:9d:52:44:f7:75:fc:
                    df:08:7a:f3:e6:7d:be:74:c7:8e:2d:69:03:c5:1d:
                    e9:9e:5d:c9:e1:3d:cc:08:1b:7c:d2:ca:20:4f:a4:
                    fa:a8:68:1f:33:96:8a:ff:06:1f:bd:aa:e6:1f:27:
                    3d:50:4f:92:ac:2a:ac:74:01:08:3f:b8:44:ab:8b:
                    6e:dd:6a:32:dd:d4:a1:3d:1d:e7:b7:4b:fb:61:8e:
                    fe:7f:d5:0d:62:0d:74:72:7f:ff:02:51:bb:93:04:
                    a7:d3:b1:29:ce:01:93:f1:83:15:95:fe:55:00:d8:
                    5f:81:62:97:b0:0d:4a:a8:79:ff:bb:33:71:b8:db:
                    03:80:a7:c4:86:57:8e:70:ec:c0:86:01:6a:28:b4:
                    6f:30:64:90:54:f7:4c:2a:6d:9e:74:81:8c:b0:dd:
                    c3:ec:fc:ca:04:a6:49:58:c0:ac:bf:35:60:85:a7:
                    cb:2c:49:cb:28:ea:e1:9f:2b:d6:31:fa:fa:d2:11:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:13:9A:46:A4:4F:AE:E4:DF:1F:07:AD:92:9E:F6:91:41:F4:43:F7
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:01:4c:45:20:33:40:0c:fa:59:c3:4b:33:0c:52:6d:7a:
         26:40:ce:1f:35:00:99:d2:4f:00:93:41:34:80:5b:b5:92:0c:
         c9:23:73:aa:7e:14:ed:a5:66:87:65:92:19:97:29:69:b8:29:
         db:70:90:27:2c:c3:eb:24:15:a4:57:4a:8c:42:89:87:7c:ed:
         7d:c7:0e:06:9c:66:bc:54:ac:d4:24:68:a4:5e:8b:e8:ff:36:
         6a:02:33:b2:a7:c9:d5:ea:ec:fc:b5:9a:ec:3f:4f:31:bf:0e:
         e4:ae:a9:c1:a4:90:f4:ab:66:57:68:63:c1:47:8a:31:66:47:
         5a:d0:c5:96:bb:ea:2a:fd:67:aa:a3:e8:36:61:c3:18:1a:0c:
         62:3e:5e:62:fd:b8:f7:d8:84:1b:6f:ba:02:a0:5a:74:4f:bc:
         8a:fa:2a:4a:b2:4c:8f:e4:69:bb:a3:cb:c8:44:48:9d:09:2f:
         29:44:72:4e:57:87:a5:8c:c2:ab:94:a1:ff:82:28:01:13:58:
         86:ec:d4:cd:7a:57:38:ca:2a:28:0c:5c:0e:94:e3:f5:b8:1a:
         d6:aa:a4:3d:8e:2d:9c:5a:0c:ec:7b:8a:a6:ed:19:e6:5f:68:
         40:5a:1e:96:d6:e9:8b:e3:04:bb:84:3c:e3:cf:8a:4e:97:c8:
         8b:09:47:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r8xDdVxnDc8YO+XXXr9ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYwMzI2MjEwMDQyWhcNMjYwMzI3MjEwMDQyWjAzMTEwLwYDVQQD
EyhiNDEzOWE0NmE0NGZhZWU0ZGYxZjA3YWQ5MjllZjY5MTQxZjQ0M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReHWqPDA+0HQYTYND54eM936ByF
iwtYM6iHzzEc3mgmfnQeMPyIX0PJQdTlYNngwVTq0h8lO4770MnNOoXEk7kR8Yid
UkT3dfzfCHrz5n2+dMeOLWkDxR3pnl3J4T3MCBt80sogT6T6qGgfM5aK/wYfvarm
Hyc9UE+SrCqsdAEIP7hEq4tu3Woy3dShPR3nt0v7YY7+f9UNYg10cn//AlG7kwSn
07EpzgGT8YMVlf5VANhfgWKXsA1KqHn/uzNxuNsDgKfEhleOcOzAhgFqKLRvMGSQ
VPdMKm2edIGMsN3D7PzKBKZJWMCsvzVghafLLEnLKOrhnyvWMfr60hGPZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQTmkakT67k3x8HrZKe9pFB9EP3MB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSsBTEUg
M0AM+lnDSzMMUm16JkDOHzUAmdJPAJNBNIBbtZIMySNzqn4U7aVmh2WSGZcpabgp
23CQJyzD6yQVpFdKjEKJh3ztfccOBpxmvFSs1CRopF6L6P82agIzsqfJ1ers/LWa
7D9PMb8O5K6pwaSQ9KtmV2hjwUeKMWZHWtDFlrvqKv1nqqPoNmHDGBoMYj5eYv24
99iEG2+6AqBadE+8ivoqSrJMj+Rpu6PLyERInQkvKURyTleHpYzCq5Sh/4IoARNY
huzUzXpXOMoqKAxcDpTj9bga1qqkPY4tnFoM7HuKpu0Z5l9oQFoeltbpi+MEu4Q8
48+KTpfIiwlHJA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:54 2026 by rpki-client