Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File:                     E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier:          srFqDKug+YcGcpNnWFs8aELddJ4fHXZUBE9vctlfwCM=
Subject key identifier:   E1:BA:9F:74:14:28:8B:E4:7B:2C:B1:1D:F5:89:CF:B1:F4:59:2E:A1
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer:       /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial:       019D37891A204675C90ED54C794923FE3BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number:          04B8
Signing time:             Sun 29 Mar 2026 03:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:25 +0000
Files and hashes:         1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: 33EvrTY9pRujqBLM//onr+d5AIay8OqPnGLsRZeo0Uo=)
                          2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:1a:20:46:75:c9:0e:d5:4c:79:49:23:fe:3b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
        Validity
            Not Before: Mar 29 03:00:25 2026 GMT
            Not After : Mar 30 03:00:25 2026 GMT
        Subject: CN=e1ba9f7414288be47b2cb11df589cfb1f4592ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:6b:6a:ac:ee:ba:de:cf:d8:72:84:69:b5:
                    76:3c:49:15:11:e1:e2:d9:5d:8c:e8:81:62:f9:bb:
                    1a:20:73:8c:c1:4e:05:5a:1e:cb:45:50:19:f0:51:
                    a3:82:1f:67:fb:22:45:ac:d9:86:97:12:c4:e7:a7:
                    51:a3:77:5e:4f:21:3d:df:3b:af:bb:bd:5c:d4:a1:
                    af:d3:88:7b:2d:9c:66:18:b5:33:4d:5d:c8:ee:7a:
                    dc:e0:56:73:ce:11:a9:72:4c:fb:47:d3:49:cd:3f:
                    42:b5:d4:df:d0:a1:88:0f:ac:31:f8:b1:71:5c:b0:
                    ef:f8:f5:43:e2:90:e4:9b:62:e1:00:66:21:16:2c:
                    e1:7c:c7:31:65:f6:5a:65:a6:b8:78:4f:a6:9a:23:
                    7f:27:28:09:8d:9e:ad:ac:f1:39:c2:37:0b:e0:7c:
                    98:04:f0:35:2f:1f:7b:ec:05:d2:12:3a:cf:0a:86:
                    ef:b0:c2:d7:57:15:84:93:38:63:a5:a2:d7:05:d5:
                    5f:97:92:1e:09:1d:93:27:89:33:8b:30:d7:64:d7:
                    19:cb:81:78:1b:f4:3f:69:2c:24:4f:54:4d:08:5a:
                    23:69:b5:f5:82:78:10:17:ac:36:d0:53:dd:57:2b:
                    c8:b8:19:ff:2a:65:44:65:17:15:8d:79:45:aa:71:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BA:9F:74:14:28:8B:E4:7B:2C:B1:1D:F5:89:CF:B1:F4:59:2E:A1
            X509v3 Authority Key Identifier:
                keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:17:48:4f:d3:4d:84:87:41:60:95:7d:35:59:15:14:0c:
         72:aa:97:6e:35:55:97:1e:4f:a7:38:22:fd:60:1d:00:2b:19:
         c0:2b:9d:37:dc:3e:ff:45:26:79:f7:12:2e:e0:56:40:f2:a6:
         9b:da:fe:00:40:c0:00:50:4c:8c:52:f0:2e:68:97:fe:b8:da:
         67:83:b0:0e:75:ad:6f:ba:35:a7:01:f4:c3:4b:94:86:94:bf:
         ec:a4:5c:a0:70:1f:f8:1d:eb:08:68:d1:ba:9f:5d:7b:21:f8:
         bc:0e:40:0d:37:50:b2:85:26:be:d5:1a:d2:e9:aa:b0:3b:12:
         57:00:9b:2e:b8:94:91:06:08:d8:1d:a7:9f:18:0f:be:db:57:
         e1:d7:1d:a9:57:47:5a:03:40:49:db:86:08:33:73:ea:38:cb:
         80:0b:f6:92:96:04:bf:6d:52:f0:77:12:8b:26:68:ac:23:1a:
         3c:2b:34:15:f6:ff:28:ce:0f:5c:5c:88:23:09:2e:12:5d:73:
         71:92:d6:60:6f:9d:b7:40:85:64:f2:a9:1a:3b:7e:08:4a:a3:
         89:bc:60:f3:2e:2f:a2:36:7b:4e:fe:38:92:8d:e1:f7:11:73:
         60:7d:09:1a:ba:a6:38:ba:83:5c:1b:24:ee:35:66:fb:83:36:
         87:82:c9:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iRogRnXJDtVMeUkj/juzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm
ZmU3YjUwHhcNMjYwMzI5MDMwMDI1WhcNMjYwMzMwMDMwMDI1WjAzMTEwLwYDVQQD
EyhlMWJhOWY3NDE0Mjg4YmU0N2IyY2IxMWRmNTg5Y2ZiMWY0NTkyZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs39raqzuut7P2HKEabV2PEkVEeHi
2V2M6IFi+bsaIHOMwU4FWh7LRVAZ8FGjgh9n+yJFrNmGlxLE56dRo3deTyE93zuv
u71c1KGv04h7LZxmGLUzTV3I7nrc4FZzzhGpckz7R9NJzT9CtdTf0KGID6wx+LFx
XLDv+PVD4pDkm2LhAGYhFizhfMcxZfZaZaa4eE+mmiN/JygJjZ6trPE5wjcL4HyY
BPA1Lx977AXSEjrPCobvsMLXVxWEkzhjpaLXBdVfl5IeCR2TJ4kzizDXZNcZy4F4
G/Q/aSwkT1RNCFojabX1gngQF6w20FPdVyvIuBn/KmVEZRcVjXlFqnFmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG6n3QUKIvkeyyxHfWJz7H0WS6hMB8GA1UdIwQY
MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt
MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh
LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOccXSE/T
TYSHQWCVfTVZFRQMcqqXbjVVlx5Ppzgi/WAdACsZwCudN9w+/0UmefcSLuBWQPKm
m9r+AEDAAFBMjFLwLmiX/rjaZ4OwDnWtb7o1pwH0w0uUhpS/7KRcoHAf+B3rCGjR
up9deyH4vA5ADTdQsoUmvtUa0umqsDsSVwCbLriUkQYI2B2nnxgPvttX4dcdqVdH
WgNASduGCDNz6jjLgAv2kpYEv21S8HcSiyZorCMaPCs0Ffb/KM4PXFyIIwkuEl1z
cZLWYG+dt0CFZPKpGjt+CEqjibxg8y4vojZ7Tv44ko3h9xFzYH0JGrqmOLqDXBsk
7jVm+4M2h4LJHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:59 2026 by rpki-client