Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          zDLOSCXSsIKJYZcyzOkpwYPuIE49rp1g+U7sWO6q7B4=
Subject key identifier:   F1:90:DE:F4:37:74:2E:DD:1A:8E:D9:94:63:CB:B4:50:A8:7D:06:40
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019CDEEA6404CC78C26644FFB84BBC1194C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          099E
Signing time:             Wed 11 Mar 2026 22:00:28 +0000
Manifest this update:     Wed 11 Mar 2026 22:00:28 +0000
Manifest next update:     Thu 12 Mar 2026 22:00:28 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: W/tFxDINsjos2/ETPAdNxDbLNZWf8SDjQLgTCmGJla8=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:de:ea:64:04:cc:78:c2:66:44:ff:b8:4b:bc:11:94:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Mar 11 22:00:28 2026 GMT
            Not After : Mar 12 22:00:28 2026 GMT
        Subject: CN=f190def437742edd1a8ed99463cbb450a87d0640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:3b:17:6c:a8:7d:77:9d:0a:b8:55:d7:c7:
                    4b:6a:b1:0e:85:38:a1:df:be:10:1c:0e:ba:c8:dd:
                    e7:ba:9a:6d:75:56:5a:25:58:d2:33:d2:fd:f1:45:
                    b9:39:67:d5:00:74:fd:63:b3:25:17:4e:8b:03:ad:
                    36:63:f4:11:09:b7:d8:30:77:20:0e:d1:c1:af:f9:
                    ae:fe:db:cd:d6:7f:73:e9:12:1c:01:c1:a0:35:25:
                    ab:5f:f8:a7:7f:0f:30:c3:00:2c:a9:ce:d0:35:34:
                    ad:9a:37:01:66:4d:62:f0:ce:f5:2c:dc:3c:a1:db:
                    fe:eb:56:93:76:9e:fe:0c:5b:c7:8f:8d:92:cf:14:
                    34:f5:ed:0a:6d:92:4b:db:ed:2e:5e:37:25:6d:f2:
                    22:d2:c2:27:17:4d:49:12:d2:26:f8:ee:f2:23:a2:
                    26:94:95:96:25:92:a4:ad:19:f6:46:cf:ae:ad:fa:
                    fb:e5:15:19:15:4f:aa:e8:62:96:ed:07:e0:fa:cd:
                    d6:fd:65:8f:a2:bb:de:ba:63:59:c9:36:32:3a:69:
                    31:5c:83:bf:1f:f0:95:0c:6f:c9:6d:b4:80:74:9b:
                    29:54:ab:73:7a:ec:6e:a6:11:67:73:e8:1d:39:86:
                    cc:cd:f1:0f:36:e9:43:79:a2:79:ed:08:fa:f5:00:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:DE:F4:37:74:2E:DD:1A:8E:D9:94:63:CB:B4:50:A8:7D:06:40
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:2e:cc:1d:9b:df:c3:39:28:8b:14:74:97:de:29:b6:1c:
         e9:db:cf:a5:42:43:61:59:58:fd:c0:78:55:33:b8:d8:5a:07:
         6c:77:40:ae:8c:1a:b9:4b:a1:73:50:26:89:2e:b9:e1:a6:6b:
         60:af:80:f0:20:25:58:da:da:7a:a5:f7:0d:86:37:cf:29:ec:
         fd:ef:5e:12:8c:46:31:8b:3c:1a:95:33:5e:22:47:33:0a:f5:
         2b:69:47:ce:89:12:e4:6c:9f:d5:38:0d:2f:b6:dd:ab:6d:91:
         72:5b:8c:bf:8a:a5:5a:18:10:41:4a:f2:46:27:7d:f8:0a:26:
         9a:94:4e:96:50:34:f8:bb:a2:97:cf:1e:5c:08:f1:03:92:aa:
         a9:03:57:a7:30:76:1f:7f:13:90:e0:62:1a:df:d4:ba:58:ba:
         63:41:f5:3e:df:d0:0a:cb:c4:a5:56:bc:28:9e:b4:17:14:87:
         10:bf:f1:d8:17:b2:06:4c:ad:7d:ce:ad:14:39:46:22:29:7e:
         cf:83:80:50:ae:79:2a:ac:cd:77:6d:4b:7e:b8:8b:ba:6e:38:
         ac:89:ce:0f:7b:a3:c6:1c:34:e6:1b:25:9a:06:73:39:d5:a6:
         57:c1:66:39:bc:d5:4f:05:0d:82:c4:b5:a1:e8:48:03:5a:3b:
         c3:e1:5f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZze6mQEzHjCZkT/uEu8EZTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwMzExMjIwMDI4WhcNMjYwMzEyMjIwMDI4WjAzMTEwLwYDVQQD
EyhmMTkwZGVmNDM3NzQyZWRkMWE4ZWQ5OTQ2M2NiYjQ1MGE4N2QwNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxg7F2yofXedCrhV18dLarEOhTih
374QHA66yN3nupptdVZaJVjSM9L98UW5OWfVAHT9Y7MlF06LA602Y/QRCbfYMHcg
DtHBr/mu/tvN1n9z6RIcAcGgNSWrX/infw8wwwAsqc7QNTStmjcBZk1i8M71LNw8
odv+61aTdp7+DFvHj42SzxQ09e0KbZJL2+0uXjclbfIi0sInF01JEtIm+O7yI6Im
lJWWJZKkrRn2Rs+urfr75RUZFU+q6GKW7Qfg+s3W/WWPorveumNZyTYyOmkxXIO/
H/CVDG/JbbSAdJspVKtzeuxuphFnc+gdOYbMzfEPNulDeaJ57Qj69QCsFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGQ3vQ3dC7dGo7ZlGPLtFCofQZAMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+4uzB2b
38M5KIsUdJfeKbYc6dvPpUJDYVlY/cB4VTO42FoHbHdArowauUuhc1AmiS654aZr
YK+A8CAlWNraeqX3DYY3zyns/e9eEoxGMYs8GpUzXiJHMwr1K2lHzokS5Gyf1TgN
L7bdq22RcluMv4qlWhgQQUryRid9+AommpROllA0+Luil88eXAjxA5KqqQNXpzB2
H38TkOBiGt/Uuli6Y0H1Pt/QCsvEpVa8KJ60FxSHEL/x2BeyBkytfc6tFDlGIil+
z4OAUK55KqzNd21LfriLum44rInOD3ujxhw05hslmgZzOdWmV8FmObzVTwUNgsS1
oehIA1o7w+Ffdg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 04:50:53 2026 by rpki-client