Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          gdOxWJJoFyuviwzIxhajWhpqNZIf5zsMDnc2MOdPUg4=
Subject key identifier:   2B:BB:3C:1F:9A:F7:9F:46:B2:60:27:AD:F6:87:63:ED:E1:9E:1F:AE
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       019D2960F3623C6C74CA63FD1A5981E30D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          175B
Signing time:             Thu 26 Mar 2026 09:01:52 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:52 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:52 +0000
Files and hashes:         1: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: CfMudBy9d2bw+2z721otVrbnbyzZacECab5YJ80SXhE=)
                          2: 9ECy6xMC0QhH_pOivg-rQM4g-LY.roa (hash: zvlC8cgCNjvHx+kjOIl69ehjpjFO8D76qsG5Uxnt+E0=)
                          3: RpaCjdRSa-ZXBxWyWy2b1QJvShE.roa (hash: Je7gOL1A4cNI+FOPPNsoCM8EDxPKoSVwHmNzkdP57i8=)
                          4: _1m8AbFgCaUHu45103GtcnU-Bsk.roa (hash: XDKSo1Roj7NESH25VDoYxt2TEtXl/ulkf6Ak7JsGDiQ=)
                          5: iXTTTS-nkmqjatbhOVM0CNWv4xs.roa (hash: mekB3Ob2oSZO7b98NYgMQKBlF4RIFyldyH/8tcheBuM=)
                          6: jBQ6iqUVJNuGNHuEQTjudB5sG6c.roa (hash: 5vRltqBxLQBblzxtE89pQTvupEcZThWKDrWuNr0JFrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:f3:62:3c:6c:74:ca:63:fd:1a:59:81:e3:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Mar 26 09:01:52 2026 GMT
            Not After : Mar 27 09:01:52 2026 GMT
        Subject: CN=2bbb3c1f9af79f46b26027adf68763ede19e1fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:47:b8:5a:14:c0:0e:06:ee:40:f9:80:86:
                    69:2a:73:75:f1:97:d7:7d:a2:8b:5c:f9:5f:24:57:
                    8f:01:3a:1c:35:63:96:4e:99:ff:79:3a:b2:9b:0d:
                    1b:f5:97:ed:56:44:07:f6:8a:29:7c:b4:81:ce:f2:
                    28:e1:05:82:2b:3b:bb:f6:74:9c:32:31:34:ed:58:
                    cd:18:6c:fa:02:25:d4:07:53:eb:0e:7b:73:82:c9:
                    e8:51:a1:35:6b:ac:aa:c8:4a:1a:06:58:b7:22:86:
                    b7:a7:25:11:d1:d3:94:99:72:76:15:e6:3d:d3:ba:
                    8b:32:fe:95:4d:76:9b:2e:1f:0a:f4:1a:4a:e5:9d:
                    ca:70:f6:02:99:0b:71:88:fe:b2:43:ee:4b:53:93:
                    25:d5:47:09:68:4a:b2:92:c1:d2:8b:49:d5:b8:f8:
                    78:f2:ea:5d:a1:fa:0c:c9:c9:82:33:6b:da:0b:80:
                    3b:26:fc:63:e4:5d:e6:e6:da:d0:b0:c3:1e:f4:5f:
                    a8:db:0d:bc:52:7d:52:79:31:3d:d4:8f:80:e9:46:
                    f1:d7:b5:f3:b4:d9:67:30:e8:fc:9b:d7:5d:22:ef:
                    51:42:db:b5:5b:b1:25:1b:79:9b:d9:48:4e:db:f8:
                    bb:bd:13:bd:12:33:6e:4e:7c:96:82:79:74:20:31:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BB:3C:1F:9A:F7:9F:46:B2:60:27:AD:F6:87:63:ED:E1:9E:1F:AE
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:f2:c8:58:7e:f0:d0:02:0f:7d:3e:8d:71:8d:ed:05:11:a9:
         a5:3f:c0:ec:24:da:85:67:0b:51:60:e3:38:01:a7:ec:d6:df:
         68:1c:8b:51:8c:84:3b:3e:0a:4e:81:bd:ee:dc:45:c8:3b:92:
         26:0e:19:ff:10:73:45:32:17:b4:6b:e0:26:73:08:fb:f5:e7:
         ce:30:ad:d7:c9:fe:48:99:52:93:8c:03:70:70:c0:f4:51:81:
         a4:f8:67:e9:3a:c2:33:4e:62:c7:49:f5:d9:03:b5:65:99:49:
         be:0c:59:6b:97:8a:3d:ee:26:e9:3c:15:45:9e:2d:be:f3:ef:
         a9:10:9f:c5:06:6e:05:b4:3c:81:c8:71:8d:f6:6f:f9:55:42:
         b6:80:de:82:0a:89:e2:f2:e5:db:f2:b0:cd:27:d1:c6:56:1e:
         53:41:81:7a:79:cb:e2:09:3e:0b:dc:c3:e4:33:3a:bd:5c:55:
         08:18:f2:64:92:79:34:6d:af:99:c1:13:61:12:67:87:ce:0c:
         09:dd:e2:03:18:1f:9b:86:2a:c9:b1:d6:b8:5c:ce:1b:52:93:
         f2:a3:7f:b1:53:ee:98:7b:6c:a0:f0:5d:62:3d:99:58:a1:1b:
         fa:62:40:f0:50:25:9e:fc:19:d4:70:7d:df:6a:6e:af:7f:bd:
         b6:da:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:10 2026 by rpki-client