Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          76H/E8JIcfszlbYjDC392SZP19bER5KV6x6fYyKvuzE=
Subject key identifier:   48:B9:E1:7E:5E:40:EE:85:5E:FB:7E:D2:36:2D:13:30:17:B2:BD:F7
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CB32465658E7BEF8D1FEBCB565DD48507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1895
Signing time:             Tue 03 Mar 2026 10:00:32 +0000
Manifest this update:     Tue 03 Mar 2026 10:00:32 +0000
Manifest next update:     Wed 04 Mar 2026 10:00:32 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 6XDfyQQdJnMoAbn9WTIPamhsDlMDQpb/jHZrJqeIBMc=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b3:24:65:65:8e:7b:ef:8d:1f:eb:cb:56:5d:d4:85:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar  3 10:00:32 2026 GMT
            Not After : Mar  4 10:00:32 2026 GMT
        Subject: CN=48b9e17e5e40ee855efb7ed2362d133017b2bdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:fe:7e:ab:a7:f7:a4:0c:e8:e1:f3:e8:42:
                    bc:d9:9e:71:c4:38:44:91:9a:58:70:84:59:cb:f9:
                    19:23:2a:d9:2f:07:7b:3b:e7:63:c1:b6:5d:96:73:
                    93:fc:c7:18:ac:c3:11:77:f7:f3:e1:9e:8c:27:56:
                    d7:dd:4f:3a:17:64:1c:a9:f3:cb:cf:9b:25:dd:4b:
                    40:98:15:dc:c7:a8:16:7c:65:5e:a8:0a:54:b5:40:
                    0b:a8:92:43:87:fa:f8:9b:b8:db:6a:44:f6:01:a0:
                    d8:8e:1b:c4:03:83:02:ea:44:80:ac:33:ca:67:70:
                    c4:c2:20:6d:59:52:08:8c:f3:0b:96:75:49:f9:9a:
                    5d:06:72:2c:a0:57:46:fe:70:41:b5:f7:c1:cb:2d:
                    27:85:6e:dc:d2:df:df:82:0b:d7:c8:79:30:1e:75:
                    ed:63:6a:87:46:cb:cf:55:25:96:58:7d:6e:19:0d:
                    22:b1:ed:6b:f8:e3:56:87:fd:79:58:fe:8d:58:cd:
                    d9:40:87:ad:60:94:b1:26:59:a0:53:0e:bb:bc:0f:
                    07:84:6c:ec:16:c9:93:23:b2:e1:29:8f:f9:ec:44:
                    a2:1c:ad:5a:f3:72:a8:6e:17:3a:03:8f:b0:d4:40:
                    d4:b1:42:92:9e:bc:de:46:db:35:89:17:4d:5e:6e:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:E1:7E:5E:40:EE:85:5E:FB:7E:D2:36:2D:13:30:17:B2:BD:F7
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:4b:3c:44:bd:5c:22:dd:f6:5e:7b:68:2e:c3:4c:ab:5e:
         97:9b:bb:6b:0e:b9:ac:b4:34:bc:78:97:c4:c2:0f:d6:ca:e4:
         33:0d:17:51:e0:05:4f:14:1b:bf:36:44:17:63:77:ae:61:09:
         c2:68:f8:e1:e3:48:4b:07:82:eb:a3:02:7d:d3:4e:9e:67:25:
         b1:70:9c:3d:c8:7a:d6:ee:20:a7:8a:26:b6:5a:22:a0:f8:fd:
         fb:98:5e:85:d0:95:0c:86:a4:3b:98:1d:31:bd:25:89:0b:85:
         c5:e5:65:fa:c3:e5:a8:8f:1d:b6:40:cf:3a:9e:c4:96:19:4f:
         e6:5a:20:a6:b6:c8:44:f1:e3:c4:a2:cd:04:7a:f7:fe:2b:a5:
         57:77:18:65:0a:83:1e:c1:2f:a1:0f:3b:e2:7f:95:3b:26:0b:
         97:3a:f1:e6:69:4d:6b:88:39:ad:31:c3:da:5c:2f:b7:8e:b4:
         75:fa:c6:83:e6:b5:3c:1d:e0:b7:a7:19:5b:f9:cf:b4:42:8b:
         c4:59:41:98:89:c9:38:8f:88:09:7f:30:23:78:8a:28:74:91:
         2f:e5:2e:6e:32:2d:a6:9c:8d:ff:04:4e:82:aa:88:01:a8:8d:
         29:d4:90:19:dd:29:25:a3:fb:ef:ca:81:3d:32:32:cf:0b:7f:
         5b:68:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:21:50 2026 by rpki-client