Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          knnJU9eD+zwO/uiZ5dK8wL0Zqg6Bge7G9iGQ+O5K3q0=
Subject key identifier:   1A:E7:81:32:3E:43:08:16:38:36:5C:8E:3E:A7:05:99:D1:F7:FE:FA
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       019D296089801715C15993042F1EC741D0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          0268
Signing time:             Thu 26 Mar 2026 09:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:25 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: v/3nVASvmGR4jeAeAyHUHN/z3+IQTQhbrhLUn6rmoe0=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
                          6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:89:80:17:15:c1:59:93:04:2f:1e:c7:41:d0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Mar 26 09:01:25 2026 GMT
            Not After : Mar 27 09:01:25 2026 GMT
        Subject: CN=1ae781323e43081638365c8e3ea70599d1f7fefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:02:58:b9:83:50:a0:d3:e8:0d:9c:29:2d:
                    cc:25:2c:d3:0d:53:a9:48:cd:be:dd:55:6d:df:f5:
                    99:b8:1e:80:f0:95:31:43:f5:c7:df:59:28:72:d6:
                    38:0d:22:36:07:7f:db:a2:0c:e1:d5:ed:30:49:fe:
                    08:b2:18:93:69:8b:b7:30:3b:49:8b:63:51:5b:80:
                    07:c8:66:fe:e6:6a:d6:05:37:d5:d3:f7:a9:2c:e5:
                    6d:9a:02:92:6b:05:0f:6b:2d:ab:47:4d:d3:b5:ac:
                    4a:88:8f:a1:bd:25:fb:10:44:94:01:51:1c:7d:26:
                    0f:a0:76:4e:c5:72:e5:b8:4b:00:f9:2f:b3:32:35:
                    18:02:af:83:8a:7e:64:71:a0:b0:8a:67:34:1b:9b:
                    a5:9f:1f:44:58:eb:82:c9:41:cb:19:7e:ca:fb:98:
                    28:7a:90:79:4d:24:c3:cd:f3:a3:24:e2:e8:20:2d:
                    ef:51:98:ae:b6:28:de:c1:33:c7:50:3e:c2:a7:0e:
                    eb:37:19:97:23:1a:17:d2:5a:c4:21:8e:08:20:fd:
                    f1:86:12:f9:f8:1e:28:0d:b1:45:20:64:e1:57:a2:
                    da:d5:5e:1b:97:1f:74:db:55:cf:88:91:c0:d0:12:
                    34:ad:9a:27:bb:9e:7d:ed:f8:67:8e:14:9a:68:86:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:81:32:3E:43:08:16:38:36:5C:8E:3E:A7:05:99:D1:F7:FE:FA
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:dc:75:b2:43:ca:62:44:86:1e:a6:4e:1a:e7:23:cb:17:62:
         8a:ef:45:33:2f:a1:cf:02:53:ad:28:71:32:25:55:15:8f:ea:
         63:82:41:67:ec:f7:cb:94:d8:7c:a7:7f:b8:c0:13:43:77:08:
         30:70:01:75:1d:01:7e:c3:eb:2a:e2:d5:a0:d3:1e:e5:7f:4d:
         c2:08:57:f4:a6:a0:7d:fc:d2:0f:5a:9e:e4:57:2e:f6:4e:09:
         3a:f4:a3:7e:30:0d:90:89:27:04:54:f8:d5:f4:06:a3:e7:2b:
         0e:b3:bc:b9:39:64:0c:eb:a4:6e:1d:17:3c:06:10:7b:45:40:
         a4:af:98:a6:ad:89:28:5c:d3:ca:80:d1:d0:df:7f:68:63:49:
         08:05:0f:ca:e9:91:80:a6:0b:80:39:42:a8:ba:3f:19:68:17:
         f4:af:c2:c6:86:2d:08:78:a5:34:36:1c:90:1e:92:12:00:af:
         c5:67:46:11:b3:54:72:63:5e:07:06:cd:4a:ef:24:9a:1c:01:
         44:f0:ba:32:84:23:c1:ce:73:d5:c0:78:f3:89:b0:a7:01:8a:
         a4:20:40:11:4a:f5:95:07:0e:38:e3:6d:f1:ea:70:5b:a7:6b:
         5d:b2:8f:ad:e3:56:5b:f0:87:6f:02:1d:82:91:34:fe:05:aa:
         ea:c5:24:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYImAFxXBWZMELx7HQdDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw
ODUzYTEwHhcNMjYwMzI2MDkwMTI1WhcNMjYwMzI3MDkwMTI1WjAzMTEwLwYDVQQD
EygxYWU3ODEzMjNlNDMwODE2MzgzNjVjOGUzZWE3MDU5OWQxZjdmZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkICWLmDUKDT6A2cKS3MJSzTDVOp
SM2+3VVt3/WZuB6A8JUxQ/XH31koctY4DSI2B3/bogzh1e0wSf4IshiTaYu3MDtJ
i2NRW4AHyGb+5mrWBTfV0/epLOVtmgKSawUPay2rR03TtaxKiI+hvSX7EESUAVEc
fSYPoHZOxXLluEsA+S+zMjUYAq+Din5kcaCwimc0G5ulnx9EWOuCyUHLGX7K+5go
epB5TSTDzfOjJOLoIC3vUZiutijewTPHUD7Cpw7rNxmXIxoX0lrEIY4IIP3xhhL5
+B4oDbFFIGThV6La1V4blx9021XPiJHA0BI0rZonu5597fhnjhSaaIbV3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrngTI+QwgWODZcjj6nBZnR9/76MB8GA1UdIwQY
MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt
YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj
LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdx1skPK
YkSGHqZOGucjyxdiiu9FMy+hzwJTrShxMiVVFY/qY4JBZ+z3y5TYfKd/uMATQ3cI
MHABdR0BfsPrKuLVoNMe5X9NwghX9KagffzSD1qe5Fcu9k4JOvSjfjANkIknBFT4
1fQGo+crDrO8uTlkDOukbh0XPAYQe0VApK+Ypq2JKFzTyoDR0N9/aGNJCAUPyumR
gKYLgDlCqLo/GWgX9K/CxoYtCHilNDYckB6SEgCvxWdGEbNUcmNeBwbNSu8kmhwB
RPC6MoQjwc5z1cB484mwpwGKpCBAEUr1lQcOOONt8epwW6drXbKPreNWW/CHbwId
gpE0/gWq6sUkIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:50:49 2026 by rpki-client