Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          rxg6WS9tlJu2Ac4Lijim1Dbrh/K2WoC+ilDsXdenhUk=
Subject key identifier:   EB:83:0F:6D:9A:C9:94:65:A0:E4:01:C7:E3:94:E4:F4:3A:59:B4:01
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019D69F6FFF7B7CDCBD53AC7C4D13BFB0902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          09E6
Signing time:             Tue 07 Apr 2026 22:01:27 +0000
Manifest this update:     Tue 07 Apr 2026 22:01:27 +0000
Manifest next update:     Wed 08 Apr 2026 22:01:27 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 5DXKqCpzeqOkJZK9aSRV528xPtCX366xA/jey+8ju4Q=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:69:f6:ff:f7:b7:cd:cb:d5:3a:c7:c4:d1:3b:fb:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr  7 22:01:27 2026 GMT
            Not After : Apr  8 22:01:27 2026 GMT
        Subject: CN=eb830f6d9ac99465a0e401c7e394e4f43a59b401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:3f:98:95:4b:0b:8b:da:8f:76:54:9d:43:
                    66:24:2c:90:d3:f2:91:35:d5:46:27:16:00:c8:ae:
                    ae:52:6a:c8:a4:f9:c7:73:21:14:26:c9:c3:13:62:
                    ba:2a:55:b9:a2:d3:f2:3b:1a:7f:f5:f4:a1:d2:dd:
                    8e:fb:43:63:6e:30:79:ac:2a:ac:35:75:8f:c2:03:
                    53:02:73:4b:41:84:15:c8:c0:f9:df:6f:fb:3c:af:
                    d0:e8:e2:a6:54:65:8a:ed:7f:16:41:88:22:8a:a1:
                    e6:39:8f:90:0c:e9:b8:69:19:3c:60:fa:22:44:7e:
                    3c:78:e6:7d:b5:5c:14:31:76:61:4f:51:c4:8d:26:
                    3b:9b:1b:89:6f:d3:7f:6c:f0:e5:75:71:07:ae:46:
                    89:ed:ff:12:88:92:20:4e:1b:78:01:ff:3f:c7:7b:
                    e8:25:42:ff:a4:22:c1:8d:a6:5b:15:12:47:bd:10:
                    e3:71:52:dd:cd:65:ce:5c:7e:12:fa:9d:e6:9c:bd:
                    25:c8:db:fd:12:22:d9:a7:1d:29:ea:3a:04:04:a1:
                    ff:bd:e3:3e:ff:e4:1d:5f:fb:ca:4c:c4:4f:5e:cd:
                    48:d3:89:e0:f5:25:93:e7:23:70:33:c3:39:c3:b6:
                    6a:15:05:e0:c6:07:31:9e:1b:5c:08:ce:9a:b1:c4:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:83:0F:6D:9A:C9:94:65:A0:E4:01:C7:E3:94:E4:F4:3A:59:B4:01
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:b2:21:81:78:ff:f4:e8:3e:05:0c:3d:8f:dc:40:c2:6b:
         a3:3d:03:f8:44:dd:69:77:0c:0d:6f:7f:88:5a:d7:8d:1f:35:
         1e:a9:cf:d6:93:11:8b:0e:ac:e9:5e:9d:61:c1:00:59:70:90:
         66:a6:3a:19:19:17:c7:b3:61:8e:f0:f5:61:cc:2b:26:33:6b:
         9c:0d:6b:5e:69:2a:5a:49:86:14:b1:59:5d:ee:42:68:3f:e6:
         c8:90:12:8c:7e:c2:64:a6:8d:9f:b4:13:97:a9:fd:6f:a5:22:
         f1:20:87:18:cf:f6:8d:a3:a7:f5:ef:c5:62:ac:8f:cc:9f:50:
         45:58:3b:77:cf:84:7a:a7:f0:00:56:a3:7b:ff:b9:36:05:b9:
         fc:c9:e5:3a:4f:f5:de:66:5c:87:80:8a:28:31:70:72:fb:3e:
         67:13:62:3b:71:48:18:fa:24:bf:b6:29:4e:31:ba:ca:a3:72:
         5b:3f:1d:9d:75:a3:82:93:48:10:de:53:d7:da:98:30:34:e2:
         3e:e6:a2:aa:e4:e3:43:e6:61:9a:1e:6b:c6:3f:e3:67:46:b6:
         02:69:27:12:66:8f:ca:de:d8:86:3f:8c:1c:f0:f7:f6:65:03:
         da:bc:08:83:61:83:3d:ff:87:a6:99:fd:57:5c:3e:d6:ee:74:
         77:2c:1e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1p9v/3t83L1TrHxNE7+wkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwNDA3MjIwMTI3WhcNMjYwNDA4MjIwMTI3WjAzMTEwLwYDVQQD
EyhlYjgzMGY2ZDlhYzk5NDY1YTBlNDAxYzdlMzk0ZTRmNDNhNTliNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdw/mJVLC4vaj3ZUnUNmJCyQ0/KR
NdVGJxYAyK6uUmrIpPnHcyEUJsnDE2K6KlW5otPyOxp/9fSh0t2O+0NjbjB5rCqs
NXWPwgNTAnNLQYQVyMD532/7PK/Q6OKmVGWK7X8WQYgiiqHmOY+QDOm4aRk8YPoi
RH48eOZ9tVwUMXZhT1HEjSY7mxuJb9N/bPDldXEHrkaJ7f8SiJIgTht4Af8/x3vo
JUL/pCLBjaZbFRJHvRDjcVLdzWXOXH4S+p3mnL0lyNv9EiLZpx0p6joEBKH/veM+
/+QdX/vKTMRPXs1I04ng9SWT5yNwM8M5w7ZqFQXgxgcxnhtcCM6ascSuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuDD22ayZRloOQBx+OU5PQ6WbQBMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh2yIYF4
//ToPgUMPY/cQMJroz0D+ETdaXcMDW9/iFrXjR81HqnP1pMRiw6s6V6dYcEAWXCQ
ZqY6GRkXx7NhjvD1YcwrJjNrnA1rXmkqWkmGFLFZXe5CaD/myJASjH7CZKaNn7QT
l6n9b6Ui8SCHGM/2jaOn9e/FYqyPzJ9QRVg7d8+EeqfwAFaje/+5NgW5/MnlOk/1
3mZch4CKKDFwcvs+ZxNiO3FIGPokv7YpTjG6yqNyWz8dnXWjgpNIEN5T19qYMDTi
PuaiquTjQ+Zhmh5rxj/jZ0a2AmknEmaPyt7Yhj+MHPD39mUD2rwIg2GDPf+Hppn9
V1w+1u50dywegg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 05:33:18 2026 by rpki-client