Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          bRNMxXt941hPZZwT752e5LiiRSyIOb4sdaYHjBkb2jc=
Subject key identifier:   4F:A9:7C:8C:BE:74:61:8A:D8:DD:04:25:19:7A:FD:9B:F3:FE:F5:18
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       019CC7F55C57972ABC5825795B365332E399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          1956
Signing time:             Sat 07 Mar 2026 11:01:11 +0000
Manifest this update:     Sat 07 Mar 2026 11:01:11 +0000
Manifest next update:     Sun 08 Mar 2026 11:01:11 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: 91QZ2l+R2NQKV3vhFa+WaczAPtGPIGwi0g9uXnE5sJE=)
                          2: NY6Ok0dfnOmCyxsnLgfAqiMr3Ds.roa (hash: q98kPVGsSgebzUsBANtOwCfH6a2G28dI/IdaQaF9Il0=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:f5:5c:57:97:2a:bc:58:25:79:5b:36:53:32:e3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Mar  7 11:01:11 2026 GMT
            Not After : Mar  8 11:01:11 2026 GMT
        Subject: CN=4fa97c8cbe74618ad8dd0425197afd9bf3fef518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:26:ee:cc:de:48:04:d0:7c:07:e6:b5:44:
                    8d:03:9e:22:45:60:93:a6:7c:9f:20:74:c3:79:b7:
                    0c:e4:a6:d4:10:16:b8:e4:fd:31:75:1d:82:c2:9d:
                    71:57:56:96:64:c5:cd:56:30:23:22:26:5c:97:2c:
                    0d:0d:e9:67:6c:8f:c4:5d:41:fb:88:50:6a:ed:bd:
                    57:63:30:1f:23:cf:37:cd:f0:25:d3:20:b3:c9:72:
                    88:26:07:0a:47:ab:71:de:ab:c3:b7:cd:90:31:74:
                    b8:d7:56:2c:32:cb:f9:07:a5:69:e9:0d:f1:e4:49:
                    94:6a:d1:7a:69:d0:44:09:38:14:4a:19:f7:69:41:
                    1c:ea:e4:b4:85:e3:2e:00:92:bb:1e:45:54:78:b8:
                    ad:42:04:16:a0:ba:52:96:06:a7:cc:45:92:df:b6:
                    1f:40:6d:88:91:5c:5b:0f:46:7e:79:98:2e:a0:28:
                    e2:5a:cd:0c:d2:7c:ad:9d:ad:09:34:d3:ca:8c:38:
                    bc:7f:d9:78:38:31:86:a6:8c:9c:b4:6a:76:0f:8c:
                    ba:13:6b:6f:bb:e5:af:57:7d:b3:39:d7:44:5c:46:
                    f6:ff:49:0f:72:04:b1:2d:6c:4a:02:d1:48:71:26:
                    63:7f:0f:82:ce:3c:06:cc:74:80:f4:df:ed:33:a2:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:7C:8C:BE:74:61:8A:D8:DD:04:25:19:7A:FD:9B:F3:FE:F5:18
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:b1:48:bc:b9:86:4f:82:09:1c:7f:84:99:58:ac:65:d1:
         44:7b:b4:a6:3d:19:c8:1e:94:d5:ea:1c:73:c8:5d:83:2d:8a:
         e1:aa:4d:b2:1c:35:85:3a:ba:12:42:62:c5:07:2c:3f:2c:3a:
         ba:0b:ec:ba:bf:1c:03:0b:01:ec:0c:18:f2:87:78:8c:36:4e:
         e5:02:da:07:d9:85:28:f4:57:f4:b8:8b:1c:dc:46:d4:64:4e:
         8d:52:fb:d5:77:2d:eb:2c:aa:8d:e1:7d:08:67:84:6f:ef:54:
         26:d6:86:7f:d6:02:1c:53:c3:ec:f1:5e:c4:ee:51:5d:40:9a:
         20:f6:ac:bc:99:79:f9:17:b1:35:d0:1e:55:1d:83:00:68:ad:
         cc:3f:c0:d4:7a:a3:f6:c1:81:06:1b:09:03:3f:03:5f:0b:6e:
         0b:1a:d2:ee:2d:a8:b7:0f:af:c5:71:62:9f:db:da:6b:cb:de:
         82:48:bd:1f:1c:e6:f5:e5:e0:63:eb:0d:8c:6e:3d:29:d4:51:
         dd:09:41:77:49:42:89:10:38:d9:e0:92:18:c4:75:48:5f:30:
         79:ff:f7:df:da:30:70:52:10:6e:6e:46:1f:fb:a5:4d:63:ae:
         1c:27:22:6c:2e:03:38:84:26:e9:55:61:3a:f0:09:25:1f:00:
         04:93:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:19:32 2026 by rpki-client