Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json)
Hash identifier:          8Rf17piuBN+wm+1WTqr/k7MZFCLJKdkMvOS47lmIO7k=
Subject key identifier:   DE:29:15:3A:7E:35:42:DB:4D:4D:0F:AF:A5:0E:1E:05:85:BC:15:83
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Certificate issuer:       /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial:       019D3752ED82F29C5A387CA2D492937612FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 02:01:14 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:14 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:14 +0000
Files and hashes:         1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: 9M3eMAD5clyXPPVmN9muhlhsKWQAQcAdEDIT7nZPZjY=)
                          2: eSo8jObZn58o_aRi_AxYV9_s9BA.roa (hash: sgezzQUMOk07d245CaAgyimMMdaKOPXfAR78B55UWTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:ed:82:f2:9c:5a:38:7c:a2:d4:92:93:76:12:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Validity
            Not Before: Mar 29 02:01:14 2026 GMT
            Not After : Mar 30 02:01:14 2026 GMT
        Subject: CN=de29153a7e3542db4d4d0fafa50e1e0585bc1583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:c8:38:4e:d4:f7:fe:d4:4e:fe:9a:44:74:
                    7d:6d:e2:cf:53:fb:b8:14:05:2e:e6:2a:f8:55:3b:
                    38:11:04:b7:c7:3c:33:14:0d:4d:c2:40:88:b7:a0:
                    e5:0d:5e:9d:e2:72:34:54:fe:04:be:26:af:ef:85:
                    78:27:ca:f9:82:4a:3e:26:e0:e9:44:49:7f:ec:23:
                    75:d4:d7:c8:e4:30:0c:4b:f4:75:3c:a7:7a:1f:18:
                    4c:ca:78:10:0d:57:d0:ed:49:92:56:d6:0e:a7:5d:
                    98:23:f6:d0:f9:a0:b7:e1:4c:b3:6e:19:6a:bc:29:
                    f8:e2:a5:e9:e3:0d:49:cd:a4:61:e5:7f:92:a3:34:
                    b0:54:ff:a3:7e:fb:18:c7:6e:1a:2c:cf:f3:4c:f3:
                    16:4c:f9:a6:fb:6c:b4:16:ff:8b:d1:e0:09:10:2f:
                    71:27:6f:67:83:17:eb:03:0e:4e:cc:31:04:4b:c9:
                    95:f9:c3:45:96:8e:c6:e6:85:e1:4f:55:20:7b:c7:
                    c5:e4:31:89:f3:a2:8a:f7:00:d2:4c:35:17:61:71:
                    f9:52:39:9a:ca:c9:a1:b1:2b:cd:0a:60:0f:da:b4:
                    2a:96:04:c5:54:58:62:e9:3a:c5:8f:6f:c3:91:3b:
                    80:79:d0:a9:b6:39:9d:63:bd:3c:57:29:09:de:ae:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:15:3A:7E:35:42:DB:4D:4D:0F:AF:A5:0E:1E:05:85:BC:15:83
            X509v3 Authority Key Identifier:
                keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:69:79:4c:74:fa:46:b1:36:80:9c:fc:0d:90:9a:27:c5:5a:
         86:43:f8:51:bd:7f:7b:8e:8c:80:88:3c:b3:f2:8c:3c:c9:8a:
         b5:18:5d:d0:ad:a6:61:29:07:02:c6:b1:e7:a8:6b:32:ab:0e:
         f6:47:67:ff:08:55:fd:6b:00:9c:bf:9b:49:45:da:c4:51:e5:
         cb:20:72:a8:19:4c:a0:c8:44:df:6c:05:1a:d1:e4:e5:63:0f:
         a3:81:ea:12:72:c4:85:ce:f6:f0:d4:89:59:4a:cf:7f:ed:04:
         36:f3:cd:a9:20:c5:54:5d:4f:22:64:dd:83:3c:74:51:b9:0c:
         82:d8:6a:a8:7d:b0:18:a4:d7:14:42:a6:fb:a5:9e:2f:d0:ab:
         5b:da:77:5f:61:af:32:3f:c3:69:95:c3:2d:32:82:78:e0:bd:
         d0:6c:9c:0d:cf:93:a8:a8:a8:11:33:80:95:b3:61:f1:c0:a9:
         55:d6:a5:24:35:78:82:1d:cd:aa:24:8f:a6:a2:2d:f5:59:a4:
         54:86:24:f4:10:1e:72:6a:89:af:b5:ef:12:7e:f7:be:7e:d3:
         dc:dc:89:66:1e:38:57:ba:5b:67:9d:e2:fb:ec:58:8f:2e:05:
         25:26:13:46:81:6d:98:47:da:47:1b:0b:1d:b5:0c:49:57:f3:
         f5:d6:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client