Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          aqd7D593eMrr8W4hUSQk6WSL+XHMsmJgyK40K//KNw0=
Subject key identifier:   1E:79:C2:30:20:F9:BC:6F:99:20:97:7B:E9:3F:B5:08:EC:AF:48:CA
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       019DDC8C2B3BB18C1F472C7031A628725281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          048F
Signing time:             Thu 30 Apr 2026 04:01:06 +0000
Manifest this update:     Thu 30 Apr 2026 04:01:06 +0000
Manifest next update:     Fri 01 May 2026 04:01:06 +0000
Files and hashes:         1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: xLkOKQ9FXOD6P/TdG3ec7f9/5TxzYQN/2WE3tRYjafc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:8c:2b:3b:b1:8c:1f:47:2c:70:31:a6:28:72:52:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Apr 30 04:01:06 2026 GMT
            Not After : May  1 04:01:06 2026 GMT
        Subject: CN=1e79c23020f9bc6f9920977be93fb508ecaf48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:f2:1e:94:58:3d:73:22:ea:87:3b:c8:44:
                    4b:7d:80:3d:a6:33:62:7b:ab:70:aa:12:e1:41:46:
                    59:3d:76:86:c9:60:76:72:2a:d2:ae:d3:4a:90:86:
                    91:7b:27:58:88:76:7a:7d:5d:bc:e7:24:9e:4c:db:
                    bb:fa:24:fa:8d:68:19:97:5e:ee:b8:d8:39:33:41:
                    29:a5:58:f7:64:1a:f1:d0:dd:a0:a8:c5:62:d1:05:
                    5c:01:34:a2:fa:f3:c3:a9:7a:ab:54:cd:fe:23:57:
                    df:2c:91:e1:82:b9:75:ac:71:4c:df:ca:db:bf:de:
                    45:3f:c0:52:1b:1b:6c:03:73:24:21:f5:4e:4e:49:
                    c9:b6:e5:39:b4:de:66:c8:4c:8d:87:ef:71:4b:53:
                    42:4e:4c:ee:f7:d2:43:40:87:38:f1:d7:ed:f5:ce:
                    40:ff:31:13:3b:eb:8e:3b:4e:45:5e:28:38:21:9b:
                    0a:aa:43:1d:aa:4a:49:dd:75:d1:e4:2e:c3:1d:b4:
                    bc:34:33:c0:5e:0d:9f:e5:da:07:e2:d2:d5:62:88:
                    83:20:7b:a8:05:be:71:06:00:60:b1:03:7a:57:ef:
                    1a:19:61:ae:58:ab:85:66:04:ec:73:7c:96:02:75:
                    9f:9c:16:fa:7a:4b:0d:b0:94:5b:79:c0:41:b4:be:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:C2:30:20:F9:BC:6F:99:20:97:7B:E9:3F:B5:08:EC:AF:48:CA
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:3e:f1:e8:60:e8:5b:f1:56:04:bb:33:4f:aa:9d:8f:4f:
         08:ba:34:72:6c:89:b7:f1:6e:19:b1:ef:87:3f:d2:50:8f:f5:
         73:4f:9b:06:aa:c2:94:e8:cc:15:e6:c5:fb:be:cf:5c:4c:2e:
         4e:6b:cc:ce:47:1c:90:c5:e3:c4:8d:4f:df:7e:87:a1:96:24:
         cc:9a:89:6e:49:c6:4c:41:fe:b4:6a:ce:5e:9b:6b:40:f3:8f:
         f1:e0:aa:43:29:ff:3c:a1:d5:23:98:94:dc:49:2f:6a:9c:3e:
         25:d9:77:94:7a:12:93:cb:89:1b:c7:9e:10:1a:4d:eb:cf:24:
         20:24:b9:9b:7c:37:f2:af:a8:18:ee:b1:08:2d:9c:45:05:db:
         6b:9d:94:61:7f:01:04:14:d7:9f:95:95:84:8d:7a:39:b6:7c:
         ab:76:a7:55:65:c9:6c:e0:7a:59:0d:58:0f:d6:c3:23:a8:30:
         18:1e:5c:bc:35:70:d0:43:bc:96:55:bb:94:c7:02:97:e0:b5:
         d7:c2:b6:c7:8b:5a:5a:61:69:82:3f:4c:6e:57:ce:fd:16:c6:
         91:cd:a6:75:b8:23:78:ed:72:21:41:fb:0b:63:c8:ca:9d:9a:
         d2:e4:0b:0e:3b:9e:9a:a5:c7:f6:cf:fb:36:b1:ed:92:cd:18:
         63:84:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:01 2026 by rpki-client