Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          /lmRQSGLWfW8o62U+Ds1SU4VR7bXco2wyI0srVWDjWI=
Subject key identifier:   45:C3:03:DD:1F:6A:D8:23:10:4E:44:D5:EC:2D:36:38:72:04:74:B0
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019D27E07A1D22574C6BC3BFF7A0CE97B61D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0EAD
Signing time:             Thu 26 Mar 2026 02:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:55 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: XVJtEW1q+5KB9Ma9PPBqghHGOoa9wUgKGk1+wzQe/u4=)
                          2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:7a:1d:22:57:4c:6b:c3:bf:f7:a0:ce:97:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Mar 26 02:01:55 2026 GMT
            Not After : Mar 27 02:01:55 2026 GMT
        Subject: CN=45c303dd1f6ad823104e44d5ec2d3638720474b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:2c:77:05:91:2b:82:86:47:d6:b8:99:06:
                    79:ee:1e:2f:6a:62:bb:b8:03:e9:ac:99:07:75:45:
                    6c:8b:9b:68:57:8c:9e:09:0c:86:e9:a1:0c:62:2d:
                    f3:52:1d:4a:59:86:8f:09:93:b2:74:1a:de:67:03:
                    ad:66:67:98:41:c7:62:74:9c:3d:96:35:86:06:f8:
                    c8:c5:07:00:27:96:38:bc:46:59:36:37:64:ca:e1:
                    4b:1a:68:63:f3:58:76:65:9d:cb:0c:de:a3:18:22:
                    2a:ce:ef:8f:9d:c1:92:ab:08:1a:1c:14:bf:00:77:
                    b2:79:92:3b:8b:dd:88:2b:40:3d:34:96:f7:d2:f0:
                    5f:0f:55:85:b8:e5:e9:ee:96:7a:f7:82:74:42:90:
                    9b:1e:e7:00:b2:b1:77:e1:fd:b3:41:5d:b1:8d:de:
                    75:f2:ff:18:52:ee:61:b8:71:f8:2f:e5:07:10:67:
                    a7:aa:1f:27:a6:47:a2:80:6a:43:02:04:cf:d6:57:
                    ec:37:5e:60:6b:22:8b:9f:34:e3:b1:3b:af:de:6e:
                    82:f5:e7:77:b9:eb:59:d1:89:df:b0:ca:c8:a4:dd:
                    59:cc:b1:34:95:03:4b:ee:f3:48:59:46:66:38:84:
                    a0:dd:10:79:52:e0:55:8a:54:45:b9:72:77:47:28:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:03:DD:1F:6A:D8:23:10:4E:44:D5:EC:2D:36:38:72:04:74:B0
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:77:08:c8:eb:18:71:9e:27:25:51:64:1a:c8:69:26:b8:af:
         fa:4b:81:5a:04:be:0e:58:0d:73:0d:1f:92:ae:d6:0f:aa:30:
         a5:05:6b:a7:15:50:3c:b6:3b:ae:90:11:02:f2:9b:6d:4e:57:
         f3:39:15:b2:43:7f:31:31:53:79:90:59:b7:8a:bc:c1:07:6b:
         ba:57:6a:3c:04:80:fb:ac:f2:3c:c1:ad:e5:8f:5f:5d:ff:76:
         36:2b:93:58:f3:82:4f:28:79:60:00:c3:bb:33:30:92:1c:18:
         47:87:4e:3c:3b:13:ad:55:88:95:c3:73:d0:9f:c0:7c:e4:02:
         06:d8:26:ab:f8:bd:5b:df:91:82:e9:aa:62:59:b6:46:25:24:
         5a:31:07:2c:0c:1d:40:94:b3:8c:b2:14:d9:9c:51:e1:7e:c3:
         d5:5b:80:91:9a:2d:a1:99:82:d7:21:f3:28:39:ab:32:61:54:
         fe:07:95:9f:ec:a8:1b:8c:50:92:49:9b:db:ac:cc:a4:16:4d:
         98:91:50:8b:51:46:ab:52:cd:97:eb:ad:1e:40:76:93:43:b9:
         4f:99:95:89:bf:3c:ce:42:12:4f:4e:97:ef:6f:a4:9e:d6:1f:
         48:61:54:bd:97:6c:ee:1c:38:fa:0d:a1:43:df:36:bf:67:e9:
         ba:3b:64:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HodIldMa8O/96DOl7YdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjYwMzI2MDIwMTU1WhcNMjYwMzI3MDIwMTU1WjAzMTEwLwYDVQQD
Eyg0NWMzMDNkZDFmNmFkODIzMTA0ZTQ0ZDVlYzJkMzYzODcyMDQ3NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZQsdwWRK4KGR9a4mQZ57h4vamK7
uAPprJkHdUVsi5toV4yeCQyG6aEMYi3zUh1KWYaPCZOydBreZwOtZmeYQcdidJw9
ljWGBvjIxQcAJ5Y4vEZZNjdkyuFLGmhj81h2ZZ3LDN6jGCIqzu+PncGSqwgaHBS/
AHeyeZI7i92IK0A9NJb30vBfD1WFuOXp7pZ694J0QpCbHucAsrF34f2zQV2xjd51
8v8YUu5huHH4L+UHEGenqh8npkeigGpDAgTP1lfsN15gayKLnzTjsTuv3m6C9ed3
uetZ0YnfsMrIpN1ZzLE0lQNL7vNIWUZmOISg3RB5UuBVilRFuXJ3Ryit5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXDA90fatgjEE5E1ewtNjhyBHSwMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXcIyOsY
cZ4nJVFkGshpJriv+kuBWgS+DlgNcw0fkq7WD6owpQVrpxVQPLY7rpARAvKbbU5X
8zkVskN/MTFTeZBZt4q8wQdruldqPASA+6zyPMGt5Y9fXf92NiuTWPOCTyh5YADD
uzMwkhwYR4dOPDsTrVWIlcNz0J/AfOQCBtgmq/i9W9+RgumqYlm2RiUkWjEHLAwd
QJSzjLIU2ZxR4X7D1VuAkZotoZmC1yHzKDmrMmFU/geVn+yoG4xQkkmb26zMpBZN
mJFQi1FGq1LNl+utHkB2k0O5T5mVib88zkIST06X72+kntYfSGFUvZds7hw4+g2h
Q982v2fpujtkeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:57 2026 by rpki-client