Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          qwCF22XsGVoDjwM/Xu/q6jj/ZA5NN8ymQQOxwwhPo6g=
Subject key identifier:   FE:2A:26:23:11:E9:69:B9:0B:CF:2F:65:50:C8:E4:C3:74:52:2E:D6
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CD7D5A668B2D44DA902E95D21D9FDEBB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          18A8
Signing time:             Tue 10 Mar 2026 13:00:28 +0000
Manifest this update:     Tue 10 Mar 2026 13:00:28 +0000
Manifest next update:     Wed 11 Mar 2026 13:00:28 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: PVoiA7dTeLzeatuEFMPmrGLc+mW/aI4RLIrY7szn+XM=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d7:d5:a6:68:b2:d4:4d:a9:02:e9:5d:21:d9:fd:eb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar 10 13:00:28 2026 GMT
            Not After : Mar 11 13:00:28 2026 GMT
        Subject: CN=fe2a262311e969b90bcf2f6550c8e4c374522ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:9f:32:54:11:0b:37:fb:0d:bb:c9:f3:4f:
                    3d:51:3e:29:32:40:dd:82:39:8e:ca:99:70:a5:5d:
                    63:91:ca:a4:1c:3f:6d:b6:8e:3c:9a:6b:39:f8:fd:
                    cd:aa:82:3d:8c:96:37:0c:69:e8:78:b4:8e:d1:c7:
                    78:8e:1b:d4:a4:2d:d2:0a:58:85:8c:93:e7:a5:69:
                    6b:4b:55:ae:88:46:fc:a9:d4:7c:01:45:63:fa:2f:
                    02:6d:f4:54:29:fa:69:a0:cb:88:79:b3:0e:fa:ea:
                    a4:5d:79:62:79:e4:c2:75:02:9b:d5:9b:06:91:a3:
                    72:d9:46:5a:63:99:e7:4e:97:6b:c9:7b:39:08:20:
                    4a:e6:8f:3c:a8:1f:77:42:5f:06:1b:f6:c6:6f:3b:
                    68:74:1f:9b:b3:d2:bc:e8:4a:04:4e:52:92:c7:96:
                    61:4a:e6:b6:7b:d4:c5:c1:21:a1:36:8e:6d:e4:08:
                    34:83:be:3d:9a:65:10:ca:f4:5e:7a:f7:f6:05:a5:
                    7a:4a:02:d1:19:06:2c:4b:19:75:84:b1:dc:69:e0:
                    d4:b4:1e:82:c8:ab:eb:58:15:4e:ba:31:18:96:8d:
                    67:f6:d4:0e:81:e5:69:2c:eb:14:f9:af:5e:55:3c:
                    59:35:9a:54:6e:00:33:67:fb:44:12:27:8c:a9:65:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:26:23:11:E9:69:B9:0B:CF:2F:65:50:C8:E4:C3:74:52:2E:D6
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:96:dc:63:ea:52:c1:4d:e7:28:69:41:6f:2b:7e:51:dc:
         6a:84:bc:34:35:c0:48:44:73:da:60:fc:93:5e:c5:90:5b:07:
         df:aa:6b:7d:47:c0:ee:3c:55:e2:5f:3a:0b:74:53:68:ae:54:
         99:a1:6d:21:d0:58:a8:2b:d5:03:10:85:7f:4b:02:30:2a:99:
         c6:9a:dd:22:32:0c:46:2f:86:2f:e7:62:4c:69:e9:ac:ae:c1:
         58:5f:63:29:20:26:6f:07:46:a5:a7:04:be:92:46:ea:5c:b4:
         1f:c1:3b:de:f7:d7:e2:fc:62:d6:46:45:27:0f:ed:0e:fe:49:
         dc:c4:a9:e2:39:ad:0a:98:71:1a:72:fc:1b:ea:c2:dc:20:e9:
         39:26:89:14:cc:c2:c8:2d:d8:58:4b:84:0b:08:62:b5:a0:ee:
         65:eb:66:96:10:70:a5:2b:4f:d1:3f:a4:13:96:1c:72:94:63:
         2d:11:6b:c6:7f:d5:be:e4:23:2c:7e:8a:f9:cf:e1:3f:7a:bb:
         b7:6f:11:ad:0c:ab:fa:7a:96:e3:5b:e2:e1:1d:4c:cd:16:79:
         61:84:83:97:79:08:44:0b:6b:5c:34:38:0c:14:cc:3b:79:a8:
         f0:d8:d0:ea:28:fa:a1:f1:dc:1a:a6:16:60:c4:71:e9:0c:25:
         9f:f5:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:52:35 2026 by rpki-client