Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          4b7OzEf6izBlTHQS0ZFIqs3nCckNY9WLiLDNRT/L554=
Subject key identifier:   C3:99:1A:C3:2E:31:8D:C9:45:6B:A3:15:9B:2D:8D:39:B6:09:FC:C4
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       019D29296DECE4EBD5193311929B7A786193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0F80
Signing time:             Thu 26 Mar 2026 08:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:13 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: 5Dt715IEaPmrdoyLcTGKkLPQVaUPk7G24582SpniM9s=)
                          2: e-UyDpfAgeCXwVCZG2C_8K2xub8.roa (hash: 9M9KcCzKHonhmbTtNOcC9taMG1LtCMlTc8IfcKGHBuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:6d:ec:e4:eb:d5:19:33:11:92:9b:7a:78:61:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Mar 26 08:01:13 2026 GMT
            Not After : Mar 27 08:01:13 2026 GMT
        Subject: CN=c3991ac32e318dc9456ba3159b2d8d39b609fcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f5:68:56:b1:f8:b8:32:4f:3a:b7:5f:d9:85:
                    6a:07:52:82:51:75:60:ba:be:c9:99:b0:e2:38:dd:
                    41:aa:a5:02:cf:80:17:75:25:da:83:54:11:db:69:
                    76:7c:83:d5:4a:4e:c7:3d:50:7f:49:76:7b:3f:ec:
                    35:78:cd:54:b9:b1:f7:8d:1b:7f:78:2b:8f:33:76:
                    e5:74:00:d4:65:a8:03:f8:50:db:2c:fe:65:84:e5:
                    94:78:36:45:9a:c8:6d:3d:4d:14:e6:b3:a8:48:19:
                    c4:52:d8:94:e5:62:ce:bd:1c:01:22:0b:e7:95:bc:
                    1c:c0:31:80:1b:c5:04:24:31:c4:de:27:c6:1c:c0:
                    37:a8:8e:80:ab:e4:43:e1:1a:48:cc:1c:d4:78:c5:
                    71:a8:83:1b:fd:03:b8:dc:70:36:69:ea:56:d2:bf:
                    9d:1f:bd:25:da:97:07:43:8a:4e:86:8a:6b:71:b5:
                    92:9b:3b:80:5f:8b:6b:af:9f:3b:bc:24:94:a0:5a:
                    1e:61:0c:d4:f2:29:8c:00:3b:15:3c:de:86:e2:38:
                    c4:b9:09:4a:c9:1d:40:b2:c1:16:da:d9:32:38:c5:
                    19:37:38:51:93:e3:ab:5d:5a:94:0d:3b:26:53:03:
                    7e:da:92:ec:1b:b9:09:ff:af:9e:7c:f9:7b:54:5c:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:1A:C3:2E:31:8D:C9:45:6B:A3:15:9B:2D:8D:39:B6:09:FC:C4
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:85:ff:84:6d:e3:f9:28:9b:3c:3f:a2:b7:96:2c:0f:bb:
         76:73:1c:f5:16:6a:f0:6a:d1:df:e5:be:bf:bb:83:b9:1b:d9:
         3d:86:bc:83:77:fe:e2:17:c1:e7:a8:cc:2a:dd:cc:ae:a7:1f:
         5d:b3:67:18:d1:cf:01:fe:7c:a9:4d:0d:69:b6:5b:e2:42:ef:
         43:f7:4f:48:93:da:0b:75:23:56:77:1c:78:0a:e6:d4:ec:0b:
         59:fc:73:b9:b7:22:0d:15:91:1a:81:13:70:2e:26:4a:49:2d:
         10:91:36:10:4f:0c:f5:94:fd:19:fb:f1:ad:84:f0:d5:2a:5a:
         e3:4f:d0:10:a5:d7:1d:b4:0f:56:56:14:2d:61:39:05:7e:aa:
         2a:0a:48:12:2d:2a:ec:01:9c:82:a8:40:4e:00:8f:53:f0:8f:
         c5:d4:f3:82:76:a8:7b:30:01:ff:b7:04:20:40:c1:f0:26:90:
         26:fc:80:dd:e2:30:72:46:27:1b:b8:a8:3d:e3:a0:34:22:fc:
         b0:6a:92:7b:e5:4f:2c:fe:07:ae:e3:b5:e9:1b:fe:4f:f9:99:
         4d:5d:70:15:0a:4d:ec:66:a6:c9:50:4b:40:40:bd:68:d3:b4:
         eb:bd:cc:b1:37:8c:7b:07:d7:f3:b3:44:df:98:e4:91:aa:b5:
         e0:e8:6a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKW3s5OvVGTMRkpt6eGGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmM1ZGRmNDllMzZkNjk5MzYzMDFhZDIyYmYyNDNhNDcx
YjUyNGMwHhcNMjYwMzI2MDgwMTEzWhcNMjYwMzI3MDgwMTEzWjAzMTEwLwYDVQQD
EyhjMzk5MWFjMzJlMzE4ZGM5NDU2YmEzMTU5YjJkOGQzOWI2MDlmY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/VoVrH4uDJPOrdf2YVqB1KCUXVg
ur7JmbDiON1BqqUCz4AXdSXag1QR22l2fIPVSk7HPVB/SXZ7P+w1eM1UubH3jRt/
eCuPM3bldADUZagD+FDbLP5lhOWUeDZFmshtPU0U5rOoSBnEUtiU5WLOvRwBIgvn
lbwcwDGAG8UEJDHE3ifGHMA3qI6Aq+RD4RpIzBzUeMVxqIMb/QO43HA2aepW0r+d
H70l2pcHQ4pOhoprcbWSmzuAX4trr587vCSUoFoeYQzU8imMADsVPN6G4jjEuQlK
yR1AssEW2tkyOMUZNzhRk+OrXVqUDTsmUwN+2pLsG7kJ/6+efPl7VFwxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOZGsMuMY3JRWujFZstjTm2CfzEMB8GA1UdIwQY
MBaAFBP8Xd9J421pk2MBrSK/JDpHG1JMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMt
NDRhN2ExNTg4MTYyLzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMtNDRhN2ExNTg4MTYy
LzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbiF/4Rt
4/komzw/oreWLA+7dnMc9RZq8GrR3+W+v7uDuRvZPYa8g3f+4hfB56jMKt3Mrqcf
XbNnGNHPAf58qU0NabZb4kLvQ/dPSJPaC3UjVncceArm1OwLWfxzubciDRWRGoET
cC4mSkktEJE2EE8M9ZT9GfvxrYTw1Spa40/QEKXXHbQPVlYULWE5BX6qKgpIEi0q
7AGcgqhATgCPU/CPxdTzgnaoezAB/7cEIEDB8CaQJvyA3eIwckYnG7ioPeOgNCL8
sGqSe+VPLP4HruO16Rv+T/mZTV1wFQpN7GamyVBLQEC9aNO0673MsTeMewfX87NE
35jkkaq14OhqMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:15 2026 by rpki-client