Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          YD8150/U7afNcAdh22suSZFEu3hemt9/eEJPxr07oAo=
Subject key identifier:   E6:D4:33:31:1C:3C:E8:38:36:05:2D:B3:45:12:82:43:EB:D0:AA:86
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019CAEA2ED1D35157F86A6E97045A33ACE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0985
Signing time:             Mon 02 Mar 2026 13:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:38 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: xmrzYVA1aL+VHvt8lcJ14ikoaHo6m827lhbNZ2yxQnI=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:ed:1d:35:15:7f:86:a6:e9:70:45:a3:3a:ce:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Mar  2 13:00:38 2026 GMT
            Not After : Mar  3 13:00:38 2026 GMT
        Subject: CN=e6d433311c3ce83836052db345128243ebd0aa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:8b:c5:96:5b:5f:05:0d:62:8f:c6:f3:44:
                    6a:00:92:fe:45:24:2f:dd:58:99:d9:e6:17:81:ae:
                    64:25:b3:1e:8a:ab:db:13:94:1b:b3:2f:69:c1:31:
                    5c:dc:d0:dd:36:0f:5c:ea:98:f0:d1:5a:25:e8:bf:
                    12:7f:b7:d1:63:76:3e:1c:33:e9:5f:a1:e9:34:6a:
                    a3:f0:42:f0:9f:04:e4:19:99:76:24:02:12:bb:72:
                    bf:f2:22:17:72:6e:30:e4:33:bc:6d:e4:7b:50:a4:
                    46:46:f6:d1:5e:75:3d:30:d2:2c:4b:48:47:7b:9a:
                    81:7e:51:e9:60:02:82:c3:ba:9c:ee:6c:09:25:a9:
                    84:67:44:cf:2b:2c:23:1f:54:b8:0e:bc:d4:1f:d5:
                    71:b4:db:02:16:7e:4a:e3:d3:74:70:7d:88:dd:fd:
                    59:63:42:46:8a:22:0c:78:53:0e:bc:57:5e:43:cf:
                    e5:6e:16:f0:76:b5:c7:f0:cd:d5:6a:50:a9:3e:6c:
                    e5:5a:79:6a:e9:81:f9:f1:0b:a2:9b:4c:71:30:82:
                    d2:9e:8b:ea:3c:5a:fc:fb:b1:ac:9e:b4:85:d5:fd:
                    f8:c3:0c:14:96:99:58:cc:63:b1:68:4a:1a:cd:57:
                    b6:32:c1:17:50:65:3d:39:25:fe:4d:1f:39:73:60:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:33:31:1C:3C:E8:38:36:05:2D:B3:45:12:82:43:EB:D0:AA:86
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:ea:30:e0:b5:b4:22:1e:2c:29:9f:e8:27:2d:2b:4a:49:
         7e:1c:ec:95:81:bc:33:8f:bb:1c:8e:c8:54:31:d5:7a:93:ae:
         42:36:2b:ee:75:39:37:c5:0f:0a:cd:25:47:1c:61:bb:cc:12:
         2e:bc:f9:3c:ec:fc:38:f1:b3:e3:38:49:a8:63:d9:61:1c:c6:
         98:87:da:a9:86:15:e8:18:c3:72:5c:91:6a:51:ca:8e:72:79:
         f7:ee:38:73:38:e3:08:8c:d8:b0:c5:4a:14:c5:1f:ca:8c:e0:
         c6:df:c1:f3:a7:57:fd:cc:a4:19:8c:b8:61:a7:6a:55:7c:d2:
         86:97:16:dd:8d:77:18:86:c3:ca:76:78:46:12:19:a4:51:69:
         c5:f8:19:f7:b1:33:49:a5:8e:95:3f:76:80:1a:31:f5:7c:90:
         41:64:b4:a6:53:93:57:b3:97:0b:e4:9c:ac:a3:fb:4b:45:ff:
         3d:a2:13:51:69:6a:b8:7a:c3:7f:d0:d9:7c:60:2e:67:8e:8c:
         85:60:29:66:3b:c6:1d:d5:cb:60:89:5c:65:3a:52:a1:d1:d2:
         2a:51:62:e5:6a:dd:8d:9f:20:a6:c4:e2:4d:f5:3b:9a:18:06:
         08:20:d8:3e:9a:d7:5b:c3:9a:8b:e4:bb:a5:8a:5d:b4:fc:1c:
         a6:37:8a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuou0dNRV/hqbpcEWjOs4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwMzAyMTMwMDM4WhcNMjYwMzAzMTMwMDM4WjAzMTEwLwYDVQQD
EyhlNmQ0MzMzMTFjM2NlODM4MzYwNTJkYjM0NTEyODI0M2ViZDBhYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+LxZZbXwUNYo/G80RqAJL+RSQv
3ViZ2eYXga5kJbMeiqvbE5Qbsy9pwTFc3NDdNg9c6pjw0Vol6L8Sf7fRY3Y+HDPp
X6HpNGqj8ELwnwTkGZl2JAISu3K/8iIXcm4w5DO8beR7UKRGRvbRXnU9MNIsS0hH
e5qBflHpYAKCw7qc7mwJJamEZ0TPKywjH1S4DrzUH9VxtNsCFn5K49N0cH2I3f1Z
Y0JGiiIMeFMOvFdeQ8/lbhbwdrXH8M3ValCpPmzlWnlq6YH58Quim0xxMILSnovq
PFr8+7GsnrSF1f34wwwUlplYzGOxaEoazVe2MsEXUGU9OSX+TR85c2AzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObUMzEcPOg4NgUts0USgkPr0KqGMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthDqMOC1
tCIeLCmf6CctK0pJfhzslYG8M4+7HI7IVDHVepOuQjYr7nU5N8UPCs0lRxxhu8wS
Lrz5POz8OPGz4zhJqGPZYRzGmIfaqYYV6BjDclyRalHKjnJ59+44czjjCIzYsMVK
FMUfyozgxt/B86dX/cykGYy4YadqVXzShpcW3Y13GIbDynZ4RhIZpFFpxfgZ97Ez
SaWOlT92gBox9XyQQWS0plOTV7OXC+ScrKP7S0X/PaITUWlquHrDf9DZfGAuZ46M
hWApZjvGHdXLYIlcZTpSodHSKlFi5WrdjZ8gpsTiTfU7mhgGCCDYPprXW8Oai+S7
pYpdtPwcpjeKlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:00 2026 by rpki-client