Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          k+hGTFJLPs3lLOCkziqlhS58YGoPfMWdiGzzrk38tSw=
Subject key identifier:   AE:F0:7A:C9:82:8D:26:4E:63:AE:77:4E:29:B1:61:31:D7:78:D9:BB
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       019D37C11A9E4B71641CB6D40AE26495FA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 04:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:35 +0000
Files and hashes:         1: 4SDEWo-xQsKLEV5N5c74kcSp4oo.roa (hash: Mn5HgxK6d1bhThHGyve20eCsHoaIqihBEBC3lrXSKiQ=)
                          2: 9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa (hash: qzv4sP0iawufJ5iQxd2v/qGGI7FMui/kqPe0/MuBNTw=)
                          3: YgTu92EMlSHH6hAx-wKAfH0f5HA.roa (hash: w4NEQ8Pa4tghHvqnWHIsU9oi0/GjMWGF/km3INOctDg=)
                          4: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: 48Q7IQ0Ln6BChK7w10Inf0rSxxvDZ0J66vFXl2mCVBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:1a:9e:4b:71:64:1c:b6:d4:0a:e2:64:95:fa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: Mar 29 04:01:35 2026 GMT
            Not After : Mar 30 04:01:35 2026 GMT
        Subject: CN=aef07ac9828d264e63ae774e29b16131d778d9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:d1:61:eb:24:c8:40:32:69:01:70:9a:64:
                    cc:ed:9d:da:b3:eb:1d:e7:8d:4d:ba:c9:33:3d:b4:
                    dd:f5:48:e6:eb:b0:96:5b:de:d1:6c:9b:c4:81:0a:
                    34:2e:07:86:d9:58:40:8e:b2:50:57:92:f1:b6:ba:
                    f9:52:57:06:a6:06:88:06:10:02:f5:27:be:5e:73:
                    74:97:8b:77:be:30:ac:57:f7:79:07:15:9c:92:c1:
                    7a:1b:5d:b3:d2:77:36:90:ce:cf:63:79:8a:7d:3e:
                    5c:15:07:97:e7:b7:58:69:72:7c:a4:8b:d3:35:44:
                    32:e4:ec:eb:a6:b0:0a:02:93:65:67:e9:ed:3c:c7:
                    59:ba:75:81:49:0d:3b:d6:69:45:fd:7b:f7:e5:ca:
                    9e:99:b1:2b:a3:e5:30:d5:f5:2c:d0:1b:27:0f:f5:
                    a0:9d:f2:1d:c6:9b:5e:f4:44:ca:41:ca:a7:8c:be:
                    02:2f:38:09:81:3d:3b:fd:d8:f4:93:f7:14:59:59:
                    20:b4:48:a7:5d:58:24:34:29:d6:19:8e:32:c4:a8:
                    d2:80:47:5e:09:24:22:6f:85:79:1e:15:45:b8:a2:
                    4a:94:b0:ad:af:b9:b3:b1:8e:ca:8c:b7:98:39:f2:
                    f6:04:c8:04:63:e3:0e:2d:a6:57:ed:d9:fd:b3:2b:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:7A:C9:82:8D:26:4E:63:AE:77:4E:29:B1:61:31:D7:78:D9:BB
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:32:a6:b9:7b:97:7c:a6:98:bb:65:b7:5f:9f:81:61:95:81:
         a9:ce:bd:00:40:7a:8c:30:f5:f2:ac:31:1e:20:68:c0:8b:3b:
         af:ef:72:16:12:0e:e2:2e:33:a9:4e:a3:22:40:27:f0:97:ff:
         16:aa:3f:74:d7:fb:c8:f0:43:16:b4:cf:dc:8c:2e:e6:d4:11:
         eb:cd:a4:61:b1:23:7a:50:4a:b6:7d:24:90:22:e9:61:b0:6f:
         f5:b8:34:4a:e1:26:d9:db:03:c4:17:bd:a8:3d:d3:dd:30:97:
         d7:5c:5d:0f:df:60:d7:32:a3:46:65:78:e9:bd:6b:a9:4e:d7:
         07:bf:68:ff:4f:4c:95:a0:16:21:e3:15:08:bf:3d:35:c1:93:
         fc:7d:9f:2b:69:09:5b:de:82:88:51:92:15:e6:d1:75:88:d6:
         a1:a4:84:18:79:ae:f2:43:69:db:88:ac:5b:88:2f:ad:78:32:
         3c:ed:85:26:5e:82:f3:b5:12:27:e0:80:b1:53:5b:85:68:67:
         f2:22:50:f2:98:d0:26:ca:60:37:78:60:e6:f5:1a:ce:d9:96:
         6b:a0:6d:af:7f:af:b5:e8:55:45:2d:de:5a:db:05:64:c5:4f:
         96:e0:1c:d3:db:a7:25:8d:88:24:b1:73:b1:f6:6e:fd:87:9b:
         9e:b1:3f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wRqeS3FkHLbUCuJklfoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjYwMzI5MDQwMTM1WhcNMjYwMzMwMDQwMTM1WjAzMTEwLwYDVQQD
EyhhZWYwN2FjOTgyOGQyNjRlNjNhZTc3NGUyOWIxNjEzMWQ3NzhkOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKjRYeskyEAyaQFwmmTM7Z3as+sd
541NuskzPbTd9Ujm67CWW97RbJvEgQo0LgeG2VhAjrJQV5Lxtrr5UlcGpgaIBhAC
9Se+XnN0l4t3vjCsV/d5BxWcksF6G12z0nc2kM7PY3mKfT5cFQeX57dYaXJ8pIvT
NUQy5OzrprAKApNlZ+ntPMdZunWBSQ071mlF/Xv35cqembEro+Uw1fUs0BsnD/Wg
nfIdxpte9ETKQcqnjL4CLzgJgT07/dj0k/cUWVkgtEinXVgkNCnWGY4yxKjSgEde
CSQib4V5HhVFuKJKlLCtr7mzsY7KjLeYOfL2BMgEY+MOLaZX7dn9sytQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7wesmCjSZOY653TimxYTHXeNm7MB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDKmuXuX
fKaYu2W3X5+BYZWBqc69AEB6jDD18qwxHiBowIs7r+9yFhIO4i4zqU6jIkAn8Jf/
Fqo/dNf7yPBDFrTP3Iwu5tQR682kYbEjelBKtn0kkCLpYbBv9bg0SuEm2dsDxBe9
qD3T3TCX11xdD99g1zKjRmV46b1rqU7XB79o/09MlaAWIeMVCL89NcGT/H2fK2kJ
W96CiFGSFebRdYjWoaSEGHmu8kNp24isW4gvrXgyPO2FJl6C87USJ+CAsVNbhWhn
8iJQ8pjQJspgN3hg5vUaztmWa6Btr3+vtehVRS3eWtsFZMVPluAc09unJY2IJLFz
sfZu/YebnrE/BA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:22 2026 by rpki-client