Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          RclP6vaUwj21N03aH+cgsH2R+nvCsrm6HqOEjOW3KAM=
Subject key identifier:   37:F4:1B:CA:CE:B3:0F:48:3F:14:CD:F7:2E:73:56:D0:68:15:B9:5A
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CA3B26352230C0C1C74D6B91C9604DACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          188D
Signing time:             Sat 28 Feb 2026 10:01:42 +0000
Manifest this update:     Sat 28 Feb 2026 10:01:42 +0000
Manifest next update:     Sun 01 Mar 2026 10:01:42 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: HNi0cHGE9YzFNJirxRmisZjKaAfrb1XYbKXVb8FBGHU=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a3:b2:63:52:23:0c:0c:1c:74:d6:b9:1c:96:04:da:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Feb 28 10:01:42 2026 GMT
            Not After : Mar  1 10:01:42 2026 GMT
        Subject: CN=37f41bcaceb30f483f14cdf72e7356d06815b95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:43:ce:49:ed:ae:fa:ae:a1:8a:ac:72:93:
                    27:13:0e:32:57:58:f4:21:00:df:1d:c1:35:42:e2:
                    c2:55:ce:38:3f:42:29:a7:6b:e2:e4:ef:fb:4c:f0:
                    1f:71:e7:d2:31:e6:48:4b:f8:e0:1b:51:bf:bd:a3:
                    1b:52:bc:71:d3:3c:60:35:4e:b7:20:91:38:f8:00:
                    86:d8:60:5f:ac:13:85:7e:32:90:df:99:0c:53:b1:
                    4a:9e:10:f8:18:ff:ca:c1:5c:3b:a6:13:f5:e5:82:
                    a6:37:cd:91:c3:3c:56:df:82:68:11:d6:16:15:22:
                    26:96:2c:21:ce:d5:d7:1b:78:f2:20:28:94:70:79:
                    24:5a:7f:d5:91:db:8e:fb:44:56:61:7f:a7:58:73:
                    4f:4d:22:13:c2:06:59:61:d6:aa:bd:d8:8a:61:54:
                    47:96:68:91:e2:45:d9:1f:1d:15:e9:89:b8:03:6c:
                    c5:15:54:68:66:7a:76:02:13:38:29:c0:64:ba:92:
                    d7:0e:78:85:55:6c:7c:a7:9e:08:39:ad:0d:cf:92:
                    7d:c5:15:34:8d:da:71:87:5a:6f:93:e1:36:94:8c:
                    0d:aa:54:a9:9a:71:7e:3e:e2:c3:29:df:43:fb:7f:
                    80:1e:27:cb:6d:80:7e:34:d4:29:bc:f8:a5:1c:1e:
                    fa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:1B:CA:CE:B3:0F:48:3F:14:CD:F7:2E:73:56:D0:68:15:B9:5A
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:dd:bc:7c:db:bb:5d:0a:8e:d9:8a:58:4b:b4:df:b0:cd:
         f9:73:fe:46:da:01:9c:d1:29:18:eb:1d:b2:78:e3:07:fc:8e:
         ad:34:48:47:db:c2:9b:58:34:b7:6a:33:24:ea:16:00:50:93:
         32:8e:cf:99:a5:9c:99:b5:0b:e1:29:38:84:46:3f:2b:87:c1:
         b8:0b:3e:5f:8d:d7:f0:6a:3e:14:9b:5a:ed:69:45:aa:92:d4:
         27:8d:3c:48:f5:69:f0:17:5f:82:11:2c:91:f4:b2:02:2e:06:
         e3:66:bc:c9:0c:17:e3:23:97:f6:35:83:ff:9d:09:f8:5d:54:
         73:22:c8:c6:2e:9f:6f:70:98:ca:7f:09:3b:54:76:58:d5:d8:
         5d:b2:97:97:b9:c1:71:3a:ff:3b:52:f7:fe:b5:bf:fa:70:b2:
         bc:d1:ee:57:d0:12:9e:c8:a3:40:dc:dc:a7:a8:57:45:d4:dc:
         e2:25:12:b6:55:40:1e:66:26:14:15:4a:12:01:ae:03:e4:76:
         2e:c5:35:1f:2c:d7:91:37:24:e4:59:39:15:44:45:3d:ae:19:
         05:60:90:74:9b:ac:5a:b6:1f:59:79:7d:a9:c9:5f:5e:ca:84:
         fc:dd:71:3a:86:c1:7b:07:38:83:47:86:c0:fc:58:64:71:f4:
         18:91:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 17:44:17 2026 by rpki-client