Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File:                     4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier:          wz/BmckwRsMoLbzKYKu8tXHeQ5a49EwK8MZpY85OWPo=
Subject key identifier:   5E:4D:61:F4:9D:E3:F8:CE:7F:BE:56:C2:3E:4C:11:49:D8:D8:E4:BF
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer:       /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial:       019D27A8DD6066D8B26526B0A231002EE2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number:          05ED
Signing time:             Thu 26 Mar 2026 01:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:11 +0000
Files and hashes:         1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: dF+29Oibh+SxXh6p6eL34ccozIOCzjmWMhkFJEgYPOM=)
                          2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:dd:60:66:d8:b2:65:26:b0:a2:31:00:2e:e2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
        Validity
            Not Before: Mar 26 01:01:11 2026 GMT
            Not After : Mar 27 01:01:11 2026 GMT
        Subject: CN=5e4d61f49de3f8ce7fbe56c23e4c1149d8d8e4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:6c:01:b5:ca:af:26:91:e7:b5:7f:c3:d0:
                    22:36:0b:7e:60:08:e1:fc:5f:b1:29:b5:2e:67:83:
                    6d:09:58:9b:44:86:70:66:df:53:44:4c:43:45:ce:
                    54:2f:fe:53:79:ce:86:e0:8e:43:5c:2a:f5:3c:80:
                    e1:1c:f1:c5:66:0b:49:c1:5d:f1:c2:6c:be:76:ad:
                    1a:0c:fc:dd:53:f5:9e:a6:49:9d:8b:13:87:98:4f:
                    f5:15:b5:51:42:8a:01:c9:4e:64:c1:bd:87:54:7a:
                    1c:90:8f:e7:2f:37:4d:f6:78:b1:a3:4b:9a:ec:7c:
                    1a:a2:98:30:b2:56:f3:1d:44:42:e7:e2:29:24:b7:
                    af:20:e1:ea:c8:07:b8:55:05:f8:ad:f6:7b:9e:93:
                    0d:0f:3b:a5:30:55:ee:e9:d8:17:3f:bb:74:b2:dc:
                    ae:81:06:26:23:5f:90:67:ef:db:7f:76:c0:3a:e8:
                    56:6a:0d:78:75:c2:6d:7f:21:98:72:37:c1:33:e8:
                    46:c7:a8:50:04:46:43:c4:c9:3e:29:d5:29:fd:54:
                    e7:87:16:26:3b:de:d9:d8:fc:78:03:c1:58:b6:eb:
                    64:62:1a:e9:9e:08:dd:12:76:bd:35:14:b4:5e:4e:
                    6b:e6:3b:30:0b:65:5b:ed:de:d0:22:45:8f:13:d7:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4D:61:F4:9D:E3:F8:CE:7F:BE:56:C2:3E:4C:11:49:D8:D8:E4:BF
            X509v3 Authority Key Identifier:
                keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:77:c7:70:c6:d1:12:13:f9:b3:6c:42:56:ac:89:8d:4a:
         a4:12:13:c9:bd:56:71:48:0b:7c:ac:92:bd:8d:3b:1f:28:83:
         9b:73:30:6c:85:63:54:9e:50:67:e8:65:84:81:3d:e4:85:9d:
         7b:12:4a:0a:c2:13:c3:8d:ab:68:d0:ea:24:e5:05:32:6f:4a:
         ae:22:d0:6a:c5:53:49:ad:ca:70:63:b6:2d:7e:36:25:e6:44:
         39:91:1e:04:6d:52:9f:f2:22:23:73:b0:ba:7b:95:87:13:11:
         0f:b7:35:fc:e2:25:81:a0:87:8c:31:98:63:2d:ed:e3:29:2c:
         94:2f:e5:9d:ff:23:cb:51:75:1e:32:ee:09:99:b5:f9:e0:8c:
         12:a7:14:ff:6d:bf:73:95:fb:42:bc:aa:c5:cb:1b:dd:68:90:
         94:e8:30:9d:5b:b7:74:f7:b4:c7:98:33:b7:3c:f3:bf:43:a8:
         2e:4a:55:74:40:93:64:64:d2:8f:1c:09:ff:dd:51:52:e8:48:
         6b:51:8b:86:1e:ac:34:30:a6:c6:dd:6b:20:b3:0c:65:da:49:
         6b:ac:88:d5:0b:a3:08:33:37:b0:7e:ec:87:0e:0f:92:a7:4a:
         44:e1:6a:16:c7:42:52:0b:3a:29:ca:c9:70:a1:57:d6:bc:3b:
         a9:35:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:01 2026 by rpki-client