Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          LsXo6RI09TeCXMsarK552yIGiN30bnPcg5zVoN2/EOk=
Subject key identifier:   20:9F:3D:9D:41:9B:53:6D:68:AA:3B:93:21:9E:C3:F2:D5:80:E1:48
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       019CB95E79C09802E27CD9DB26AE972546B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          145D
Signing time:             Wed 04 Mar 2026 15:01:42 +0000
Manifest this update:     Wed 04 Mar 2026 15:01:42 +0000
Manifest next update:     Thu 05 Mar 2026 15:01:42 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: ejEKkGEjmGipD0OnwNLq9Md7fOwRogj6tur4wNptePc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:5e:79:c0:98:02:e2:7c:d9:db:26:ae:97:25:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Mar  4 15:01:42 2026 GMT
            Not After : Mar  5 15:01:42 2026 GMT
        Subject: CN=209f3d9d419b536d68aa3b93219ec3f2d580e148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:71:a2:e7:7a:99:2a:eb:27:fb:ac:95:25:
                    21:ea:f3:3b:e2:9b:fe:4e:8b:91:da:39:b2:47:3b:
                    95:68:16:8e:9f:c5:e8:1d:2d:26:b4:75:bb:6d:87:
                    a7:db:7c:31:de:b5:ac:e4:d1:08:a9:ef:de:9f:cf:
                    1d:e8:10:a3:fd:fd:e8:0a:4f:e7:a9:9d:5b:ab:4e:
                    80:a3:89:e4:7f:fa:bf:87:f7:04:8a:e7:9b:43:00:
                    20:ad:69:09:cd:52:a8:2e:3d:90:df:0b:fb:1b:4e:
                    e8:b4:a0:ba:3e:6f:a1:a1:47:fb:da:ee:5f:92:f2:
                    5d:94:15:ef:6c:38:b8:8d:09:0e:a4:3e:66:59:1d:
                    62:27:f5:4c:27:f4:ff:8a:75:87:ea:10:af:38:92:
                    03:45:f7:7e:de:e1:8e:57:c4:74:50:15:f0:6a:35:
                    85:cc:8e:a8:7f:42:d0:2f:c0:a3:49:2e:a5:52:65:
                    77:b4:26:e8:43:e1:76:4b:44:29:f4:67:b9:b9:d8:
                    79:eb:3d:ac:33:74:04:1c:d9:33:c6:05:c0:a6:96:
                    0e:e0:bc:4e:7f:57:62:3e:8d:55:34:b3:10:e9:5b:
                    19:cd:4d:d0:90:d9:b8:74:64:3e:29:5f:2c:4c:3f:
                    93:c7:57:51:01:95:3a:6c:11:01:88:cb:e4:bd:bd:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:3D:9D:41:9B:53:6D:68:AA:3B:93:21:9E:C3:F2:D5:80:E1:48
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:66:7e:86:ed:15:f9:93:90:9c:19:73:dc:d0:bf:1f:86:
         c6:b6:2e:8a:3e:a5:25:d5:b1:fa:41:a9:50:68:af:eb:5c:67:
         6c:0c:2a:3f:90:0a:ef:fe:33:4c:97:a1:aa:21:80:69:44:76:
         18:cc:d9:1d:db:03:84:48:b3:e1:54:90:60:d8:25:d4:05:45:
         aa:ad:95:7f:31:2c:3d:4e:90:37:e9:53:fa:bf:73:c9:6a:4c:
         06:00:4b:ba:bc:18:fb:19:84:46:4b:19:a9:ee:7d:03:1d:ec:
         36:aa:c3:60:79:c1:88:ed:a3:40:0e:98:f0:f4:3f:f7:e2:62:
         14:ce:40:a1:0f:21:7c:23:49:66:56:0a:cd:5f:98:33:7e:32:
         67:59:5e:48:51:ba:74:d9:39:1f:c9:84:47:4a:19:73:5a:3a:
         b2:11:63:42:1b:5c:37:b3:d9:3d:16:1e:30:cf:bb:48:96:05:
         35:e2:fb:c1:0d:b7:b3:28:e2:68:7f:72:4b:ce:2c:22:03:48:
         fe:45:98:64:60:3a:bb:c4:02:11:9b:c1:74:26:dc:10:f9:cf:
         ae:d3:b0:52:bc:04:e0:4b:cc:d7:b1:64:00:dc:a8:1d:0f:81:
         dc:08:17:54:e3:3d:65:03:db:73:6d:97:01:d4:dd:4b:84:68:
         e5:17:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:42:04 2026 by rpki-client