Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File:                     4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier:          Zz39OhU9q467+Mr1zdAr8iNkiGi5pzX2FQG9VKxjDHk=
Subject key identifier:   9D:2F:EF:91:40:48:20:4D:6B:C4:69:E1:91:FE:11:78:A9:38:D5:47
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer:       /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial:       019D292904EA8CB51F552C1F89A7ACA285C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number:          032C
Signing time:             Thu 26 Mar 2026 08:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:47 +0000
Files and hashes:         1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: EkC9D9xoXJrhG3QgkLL4IPkXndhuUXhsIEA4x2d3yD8=)
                          2: bvn9xrtj8WOl66unrLqZtL1bs_8.roa (hash: /pqD3nrcEleiPqOHk8dm0+W2Klr4HRio578jwUq+GZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:04:ea:8c:b5:1f:55:2c:1f:89:a7:ac:a2:85:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
        Validity
            Not Before: Mar 26 08:00:47 2026 GMT
            Not After : Mar 27 08:00:47 2026 GMT
        Subject: CN=9d2fef914048204d6bc469e191fe1178a938d547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:60:15:90:11:e2:d8:62:ed:07:0b:9c:9c:
                    11:20:6c:26:83:83:fd:dc:a2:51:3f:9f:4c:51:ae:
                    5a:3b:02:35:ea:46:46:08:5a:bf:b6:8b:8b:6e:c9:
                    db:1e:22:f3:f7:0d:ab:ae:5a:1f:36:ec:cf:52:65:
                    55:86:07:fe:af:0a:4b:2d:2b:c1:9a:8b:c5:d5:c5:
                    29:93:ec:c6:3d:c4:fc:82:c1:ad:39:6b:c3:8d:50:
                    1d:d7:c1:d7:54:3f:00:88:29:32:d7:18:bc:41:8b:
                    96:2c:ac:85:58:0a:15:a9:cd:c3:f4:a2:6e:ac:90:
                    b7:1b:5e:c9:5a:6d:da:d7:96:34:31:2c:04:bc:15:
                    55:8c:3f:2e:72:cc:97:be:2d:49:be:bb:12:85:e7:
                    46:98:9e:ef:1c:ab:f1:ed:9c:f4:9e:bb:31:53:f9:
                    71:8a:93:42:58:ac:33:ef:98:b2:98:0c:c9:c7:eb:
                    61:b4:59:71:4c:12:cd:58:0b:5a:33:6d:e5:96:fa:
                    a5:41:a1:aa:31:34:47:87:07:9c:7c:f9:f3:e5:b5:
                    29:b6:6f:79:2c:20:d7:d5:65:14:24:fa:9c:6e:39:
                    89:1d:71:96:60:85:08:38:e2:7b:de:e6:d4:c5:63:
                    94:e9:79:9c:50:61:4e:93:22:93:17:41:e2:0b:39:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2F:EF:91:40:48:20:4D:6B:C4:69:E1:91:FE:11:78:A9:38:D5:47
            X509v3 Authority Key Identifier:
                keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:f5:16:08:a4:b9:66:08:17:95:86:49:14:d3:8c:60:12:
         d7:a5:6c:ea:ec:e6:4c:c4:3d:d3:13:46:05:71:e2:5d:ec:4b:
         63:e7:e2:40:c6:5a:25:a7:0c:d8:f4:fb:c1:18:19:e3:9a:12:
         cf:91:16:3a:9f:05:d5:95:22:0b:1d:d2:65:25:1d:de:1e:4a:
         27:f1:05:4a:b9:50:61:ef:49:58:41:76:cb:f2:d7:b5:e1:cd:
         58:f4:d1:9b:fe:0e:b3:bf:80:25:fb:43:35:ee:da:a4:5b:53:
         f9:27:42:6c:76:5b:8f:86:10:d7:cc:ec:f4:ab:9d:09:b9:ba:
         08:ef:b9:f3:4d:51:9a:97:1f:ee:84:27:c2:e6:e9:b0:b6:d4:
         be:1d:7f:a6:09:f5:df:1f:cc:ed:1c:53:1a:7d:92:1e:cb:23:
         34:a6:c5:4d:81:a3:24:a9:98:1c:35:d7:b0:e2:5a:60:db:1f:
         59:d0:7a:9f:9c:a7:75:be:6f:bf:ad:41:80:1d:cc:8f:3f:f8:
         ee:47:24:c7:08:6a:84:88:61:f8:51:b0:3d:8d:0d:7e:f8:f1:
         01:c2:e5:6e:bc:d1:dc:8f:f4:32:6b:27:c6:20:21:4b:78:69:
         17:8e:a6:41:95:0e:a4:96:56:c8:e6:8b:c5:71:ea:1a:40:c4:
         b1:09:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:56 2026 by rpki-client