Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          EPo3e3WunBl42CJXt2miEHdEa+d839FplHA+XTYHc7M=
Subject key identifier:   5E:07:46:5A:2C:E7:2F:83:54:E2:42:DF:13:60:6E:64:02:88:D2:83
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       019D284E670C2B0A84D4D7BD9F2E6A856E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          06EB
Signing time:             Thu 26 Mar 2026 04:02:00 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:00 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:00 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: DaVfhS+pn5zADStDiOxgoK7gWLdwoeVPp1GWFIsz8GM=)
                          2: widqsiuwPxfEW8bWQB1tkfB48s4.roa (hash: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:67:0c:2b:0a:84:d4:d7:bd:9f:2e:6a:85:6e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Mar 26 04:02:00 2026 GMT
            Not After : Mar 27 04:02:00 2026 GMT
        Subject: CN=5e07465a2ce72f8354e242df13606e640288d283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:0a:f7:a1:72:2b:ea:96:43:96:ab:f0:17:
                    5f:34:95:a7:12:24:e6:01:73:7e:88:de:ff:02:13:
                    52:87:14:6a:1c:b0:f5:3c:f2:f1:a0:68:36:40:be:
                    91:6a:ca:2b:6e:77:1a:fd:95:3e:b4:63:1d:89:88:
                    7d:d1:42:2c:b7:2b:bc:ab:2b:ee:45:ff:57:53:5c:
                    4c:89:5c:16:55:8d:e5:fc:cb:66:e8:e1:33:c5:b2:
                    30:6b:79:6b:00:92:fa:c0:50:3f:40:b7:4f:5b:fe:
                    fc:65:ed:0d:7b:60:bf:54:a0:c0:3a:16:6a:51:2e:
                    f6:a0:8a:31:53:66:bd:aa:ea:03:4b:ee:dd:70:0c:
                    e5:02:b7:f0:01:f2:e9:e3:e6:cb:e4:49:05:e8:ae:
                    78:0d:33:b9:b8:25:5a:9a:e1:2a:05:b2:16:bf:ea:
                    72:c5:eb:ff:b8:b5:3c:15:87:1f:91:3b:04:89:16:
                    07:8d:77:16:40:30:bd:e1:a2:cd:7e:5c:4e:0c:45:
                    94:e1:a5:17:10:37:1b:b0:50:7d:a8:1b:e0:1f:96:
                    4c:32:9a:2b:e8:5b:9f:c2:3b:ce:f0:c2:c4:ba:67:
                    9d:32:7c:1f:3c:e9:32:fb:b1:76:27:6c:54:6f:81:
                    6e:bb:22:26:67:b3:d1:42:f0:da:b3:3c:9e:91:a8:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:07:46:5A:2C:E7:2F:83:54:E2:42:DF:13:60:6E:64:02:88:D2:83
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:31:54:82:22:6d:32:cc:3e:f7:25:4c:49:3f:b2:b0:aa:
         37:9c:ab:5c:6b:32:17:59:69:b0:5d:54:66:9b:b9:36:c9:bb:
         58:2b:09:da:db:58:a5:dc:94:e1:41:47:61:27:e0:11:0a:66:
         8b:63:d0:4e:ea:47:a2:5b:1d:fc:bd:c0:e3:60:18:7f:94:f7:
         28:83:0a:b5:a3:dd:39:bc:36:59:6f:5c:bc:40:78:ed:3e:28:
         69:11:26:e7:13:2b:2c:51:8d:03:24:44:81:7e:85:8a:c3:bc:
         48:52:33:e9:a8:0c:43:95:50:63:7a:da:72:e3:4b:f7:ec:e6:
         07:15:1c:2a:38:2e:ad:95:c0:bc:99:88:62:c0:ae:22:bd:1f:
         85:03:f2:8b:9a:74:ce:7d:f6:d6:95:17:92:9f:a6:3a:8c:b4:
         1f:37:87:3e:52:57:39:f8:9c:bf:a3:c5:4e:e1:02:7e:b1:ab:
         45:71:03:62:80:a4:be:c2:f2:7b:7e:60:f4:7b:fc:2d:a1:90:
         1f:0a:c7:39:d0:08:06:83:de:c9:8e:a0:b3:dd:19:83:59:55:
         0f:cb:69:ba:3c:18:79:9f:0c:ab:55:7f:80:63:4d:47:98:fd:
         e8:a9:ec:b7:4c:0d:fc:3e:51:46:da:33:b7:76:dd:dd:67:a5:
         b2:5e:7a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTmcMKwqE1Ne9ny5qhW6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk
NjYxNWUwHhcNMjYwMzI2MDQwMjAwWhcNMjYwMzI3MDQwMjAwWjAzMTEwLwYDVQQD
Eyg1ZTA3NDY1YTJjZTcyZjgzNTRlMjQyZGYxMzYwNmU2NDAyODhkMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fMK96FyK+qWQ5ar8BdfNJWnEiTm
AXN+iN7/AhNShxRqHLD1PPLxoGg2QL6Rasorbnca/ZU+tGMdiYh90UIstyu8qyvu
Rf9XU1xMiVwWVY3l/Mtm6OEzxbIwa3lrAJL6wFA/QLdPW/78Ze0Ne2C/VKDAOhZq
US72oIoxU2a9quoDS+7dcAzlArfwAfLp4+bL5EkF6K54DTO5uCVamuEqBbIWv+py
xev/uLU8FYcfkTsEiRYHjXcWQDC94aLNflxODEWU4aUXEDcbsFB9qBvgH5ZMMpor
6FufwjvO8MLEumedMnwfPOky+7F2J2xUb4FuuyImZ7PRQvDaszyekahOywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4HRlos5y+DVOJC3xNgbmQCiNKDMB8GA1UdIwQY
MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt
MWNmNzFkZjgyOGQ4LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4
LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/IxVIIi
bTLMPvclTEk/srCqN5yrXGsyF1lpsF1UZpu5Nsm7WCsJ2ttYpdyU4UFHYSfgEQpm
i2PQTupHolsd/L3A42AYf5T3KIMKtaPdObw2WW9cvEB47T4oaREm5xMrLFGNAyRE
gX6FisO8SFIz6agMQ5VQY3racuNL9+zmBxUcKjgurZXAvJmIYsCuIr0fhQPyi5p0
zn321pUXkp+mOoy0HzeHPlJXOficv6PFTuECfrGrRXEDYoCkvsLye35g9Hv8LaGQ
HwrHOdAIBoPeyY6gs90Zg1lVD8tpujwYeZ8Mq1V/gGNNR5j96Knst0wN/D5RRtoz
t3bd3Welsl56jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:39 2026 by rpki-client