Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File:                     4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier:          fsL4sxamu+50Dov+AqFYh6X+pbgvk/9KPnmn54almUc=
Subject key identifier:   5E:8A:EE:5F:70:B5:BF:7F:6A:CF:06:B2:E4:47:12:0A:C2:D5:08:F7
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       019D265ED7881B2A6CFDF88A7B73405E3E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:42 +0000
Files and hashes:         1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: +h4W9lHW2Fa8BXL6hodmOAtgHR3KY8m4FH27J1QgpZk=)
                          2: qimpL4GnPOyoUuwHADETW2Ca-BA.roa (hash: 1Q13z0RPNiBFNEdoqsP4b2RZwfD+sGSDYlp0PmV8cak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:d7:88:1b:2a:6c:fd:f8:8a:7b:73:40:5e:3e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: Mar 25 19:00:42 2026 GMT
            Not After : Mar 26 19:00:42 2026 GMT
        Subject: CN=5e8aee5f70b5bf7f6acf06b2e447120ac2d508f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:59:8a:72:fc:94:6d:82:72:87:8b:8d:b9:
                    ed:46:d8:9a:76:5b:ce:46:d1:aa:64:9d:f2:f6:92:
                    be:93:2c:a1:96:7e:42:79:15:85:9d:5f:6f:8d:29:
                    d9:95:63:98:e2:3a:10:f4:d0:e5:dc:bb:cc:bb:f3:
                    eb:f3:f4:d4:ca:89:56:e5:eb:0d:d9:53:45:79:ef:
                    6e:fb:1b:01:e0:ab:89:1d:e5:89:51:ee:f4:f6:32:
                    0b:e3:4f:77:e6:33:a9:f4:58:09:31:93:38:8c:f1:
                    00:b6:d1:ee:30:57:88:33:b3:43:9c:1f:b3:f3:fc:
                    22:b1:b4:a2:55:4e:8d:77:e3:e1:bd:06:4f:d9:2c:
                    d6:b4:e8:74:b8:59:03:07:b6:67:39:90:61:d3:75:
                    f0:fb:4a:ca:11:4b:d0:8e:4e:40:40:96:2a:a2:2c:
                    f4:07:75:3a:89:25:62:d1:44:19:97:4a:03:1e:86:
                    39:da:f4:e9:6c:6a:79:af:21:61:96:ad:00:d7:b4:
                    f0:e7:20:29:34:23:63:80:de:88:bf:47:70:ed:45:
                    c7:71:ab:9e:94:44:21:a1:b7:4c:f7:37:8d:45:37:
                    42:ba:b9:75:1a:3e:78:98:31:1b:ee:25:af:1a:fa:
                    91:a2:a5:e7:44:ff:78:9a:01:b5:a6:cd:f6:f7:3e:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8A:EE:5F:70:B5:BF:7F:6A:CF:06:B2:E4:47:12:0A:C2:D5:08:F7
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:33:34:8c:55:84:a8:2c:d1:64:0c:c4:d3:83:94:3d:a5:d7:
         1e:86:f0:e0:66:e5:c5:01:d8:05:b2:91:fa:51:37:03:fe:b9:
         90:c7:6d:71:c7:05:68:fa:0f:4b:1c:4f:55:01:1a:d6:2d:c8:
         50:ea:aa:13:8a:ac:c0:0c:ae:59:85:0a:e5:ab:13:a3:89:30:
         64:95:f9:bf:fd:5b:fa:2a:2e:60:33:97:32:c4:1b:48:bf:c4:
         4a:c7:99:8e:1f:72:bc:45:81:bf:e2:54:cf:a8:88:b2:06:03:
         bc:55:e3:21:a7:90:c7:e2:c1:f7:1f:5f:09:bc:13:c9:71:66:
         2a:47:2d:66:4f:96:47:16:6f:ac:86:0d:a4:0f:9e:e2:1b:85:
         a7:0f:b9:c2:d3:1e:5c:47:89:b1:ff:db:8e:53:65:32:01:ea:
         5f:fb:c0:fb:91:3e:05:d4:67:96:0a:37:e5:ae:ba:f9:47:ec:
         d3:42:ac:67:95:b2:5b:0c:87:99:a8:54:df:ea:2f:58:a7:d7:
         8c:a8:5d:15:21:07:60:28:03:26:b3:15:0d:92:a1:90:7e:65:
         1a:26:64:95:76:66:68:bd:42:15:59:2a:26:4d:9b:e6:f8:0e:
         5a:8b:c1:a7:a2:62:4e:ab:2f:9f:cc:e6:42:39:12:c7:4c:7b:
         05:f3:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:09 2026 by rpki-client