Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          IAFwEwypBPhY2XQ4BF2hVYGVLm5VFfbdNNhe/3qCt9Q=
Subject key identifier:   3C:BA:E3:F9:D0:E6:49:28:1A:41:6B:E4:A0:00:1A:CB:EC:27:58:44
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019DCF06DCFB01D13BCB3B61EC8020EB9DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1928
Signing time:             Mon 27 Apr 2026 13:00:26 +0000
Manifest this update:     Mon 27 Apr 2026 13:00:26 +0000
Manifest next update:     Tue 28 Apr 2026 13:00:26 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: //+FKwGwMET/JpA1AJ0uF5HXaTK8XcmMX/GVqRAvCFk=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:06:dc:fb:01:d1:3b:cb:3b:61:ec:80:20:eb:9d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr 27 13:00:26 2026 GMT
            Not After : Apr 28 13:00:26 2026 GMT
        Subject: CN=3cbae3f9d0e649281a416be4a0001acbec275844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:62:af:3f:36:be:12:43:1b:5a:7d:92:ea:
                    17:12:90:25:14:f9:68:ed:3e:ad:09:84:57:4a:f3:
                    d9:f1:c1:f7:d3:7e:44:c4:8a:2c:09:cf:ba:c1:ed:
                    24:0c:23:b8:fe:59:76:39:69:81:62:2f:0f:48:65:
                    af:ea:f6:2b:d5:62:5a:66:b1:da:65:92:0f:d2:af:
                    67:4a:cc:d2:8a:f5:e7:fd:91:5d:d4:e0:27:b6:57:
                    3d:45:c6:cd:bf:98:b7:47:05:64:94:b3:78:e1:12:
                    d7:8a:22:42:b6:c2:7e:23:98:46:11:6a:ad:ad:99:
                    58:cc:52:6a:f5:e7:4b:cf:cb:4e:56:73:2f:02:58:
                    38:e9:bf:86:5e:c8:cc:3b:61:7a:8d:fb:ea:f7:5a:
                    3b:a8:bc:94:0d:9e:3f:2f:ca:ee:03:30:22:70:40:
                    cc:39:03:ed:b3:f1:d2:b9:25:3b:19:79:cc:f1:bf:
                    59:89:1a:66:42:1c:f8:54:08:25:ef:c1:8a:2e:00:
                    88:be:8c:df:9a:79:0a:2c:79:dc:38:25:6e:62:ec:
                    17:7b:66:0e:75:52:35:f3:56:d5:65:3a:0b:6f:0d:
                    26:a5:64:a6:59:e8:f9:f5:dd:a7:5c:fa:30:e7:f2:
                    93:96:90:44:21:f5:b9:ae:7b:75:13:96:fe:fd:03:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:E3:F9:D0:E6:49:28:1A:41:6B:E4:A0:00:1A:CB:EC:27:58:44
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:7d:56:cc:80:fd:e9:bc:3a:fc:70:ff:f6:46:fb:79:39:
         bc:be:68:d6:70:98:07:8d:f1:3d:25:cf:77:86:a2:26:69:00:
         3c:4e:01:96:09:9d:15:87:86:17:4f:33:9e:63:42:5c:76:20:
         7f:70:93:e9:7d:86:4e:4f:3a:f2:6e:0e:b0:2a:b1:10:30:c5:
         26:4c:2d:1c:ba:e9:28:ec:54:2a:4f:8e:37:91:4a:9c:4d:fd:
         bc:58:64:4c:1a:00:e6:c8:40:fc:72:49:d1:9c:af:8a:0d:70:
         67:77:3e:3a:4f:65:8a:7b:f3:98:1e:33:4c:b8:8f:be:dc:d3:
         fd:77:f5:42:0c:c5:09:48:8f:6e:88:35:33:8a:6a:54:87:eb:
         47:da:cd:24:46:fc:83:ba:40:0d:d9:13:f8:0e:98:bf:b2:77:
         f7:c5:34:1b:61:4c:c8:6e:b3:b2:ad:aa:51:39:d1:d4:8d:c3:
         5d:a5:6f:8b:ed:39:bc:1a:4d:2f:fa:4c:65:ef:e4:75:b4:98:
         0c:f4:f0:dc:13:bf:21:32:8d:d4:4a:28:43:67:f9:d1:a7:ca:
         af:1b:4e:0c:2a:bb:2c:44:7d:36:5b:83:54:cf:f5:5a:14:52:
         e8:e1:35:ed:2d:3d:df:d0:8c:4a:19:36:c8:bd:27:87:64:1d:
         13:a4:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:57 2026 by rpki-client