Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
File:                     E-p4so8FT3L1Imrj7EVJgO0qEMk.mft (raw, json)
Hash identifier:          KQWDOikv3SVBAHnDzbZghtQoL/IVe1xj/mafTE/COzc=
Subject key identifier:   12:CA:7C:25:A3:72:98:CC:1B:97:3B:3A:CA:AA:3A:04:BB:D5:B2:50
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Certificate issuer:       /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial:       019D33E38705FE6D98EE50212C4B84B70DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
Manifest number:          15B5
Signing time:             Sat 28 Mar 2026 10:00:42 +0000
Manifest this update:     Sat 28 Mar 2026 10:00:42 +0000
Manifest next update:     Sun 29 Mar 2026 10:00:42 +0000
Files and hashes:         1: E-p4so8FT3L1Imrj7EVJgO0qEMk.crl (hash: bdgZxrUHrhlC0bfE8ej6Z898+uFJ+BxzRDBD6cmbP1U=)
                          2: Ix_qVuS5vPiiPF93gvMNbq2J73k.roa (hash: LJd1ZKlLcuXv6QgRvZXhodlipF4k/ei6rSQJhFNJAKI=)
                          3: JAtV8bztGX0ExPtNFrk1YsKTrBY.roa (hash: W9JObnRBv+K7U9E9rf4+QNejUyfBhpkxidGEL9jxuE4=)
                          4: LSR72QEmUADG4ewqs1cGB5O6L5A.roa (hash: jGbD2MiJo2PP+98Uc63/6UUJ8vLeSjWRc3U57w38K80=)
                          5: QuyUt55UAebExyg0PWaYXgzIoJI.roa (hash: nlOvHosn2r+hDQfrsoWTrGhtp9GLnbqvIhH+Wg7q0o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:e3:87:05:fe:6d:98:ee:50:21:2c:4b:84:b7:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
        Validity
            Not Before: Mar 28 10:00:42 2026 GMT
            Not After : Mar 29 10:00:42 2026 GMT
        Subject: CN=12ca7c25a37298cc1b973b3acaaa3a04bbd5b250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:04:74:d3:dd:21:d5:10:2e:9a:6e:b7:91:
                    85:df:ba:70:b9:bd:de:46:bd:47:f8:10:95:f2:74:
                    1f:1b:8b:a9:a8:c8:e2:a9:0d:69:2a:e8:19:1b:76:
                    98:b7:52:0f:d8:19:30:c2:34:8e:a2:65:43:2a:05:
                    37:68:30:ff:d1:7d:4b:05:3e:9d:7e:85:6d:89:98:
                    e7:80:38:c5:4f:32:43:7d:fa:7f:ca:90:ac:a4:55:
                    7c:91:63:28:fc:4e:8b:d4:07:67:72:86:a1:f3:be:
                    2d:9a:7b:55:fd:29:7b:2c:27:f7:e3:93:de:7c:b2:
                    2b:d1:84:42:c1:c6:85:74:8f:d9:fc:85:5f:b3:c0:
                    da:c5:57:2f:25:89:4a:31:49:a7:70:c5:2b:14:9e:
                    ed:0a:7c:94:e9:81:28:49:ab:e6:62:c3:eb:ae:4c:
                    03:fc:75:d3:88:26:f8:36:d4:85:82:2e:42:7e:4c:
                    69:cf:f5:b3:26:1a:75:6d:a8:c1:4b:f4:a8:dd:9d:
                    f4:2b:a6:f0:78:1b:ce:eb:c8:75:95:10:02:4b:66:
                    60:c1:0f:e5:d1:86:ad:33:cc:a9:0b:cf:22:18:23:
                    0c:1c:b3:ec:0d:f2:cf:f0:c4:0f:5d:59:43:74:b3:
                    bf:d5:77:51:b1:7d:d0:3d:f8:20:2c:a8:81:dc:ed:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:7C:25:A3:72:98:CC:1B:97:3B:3A:CA:AA:3A:04:BB:D5:B2:50
            X509v3 Authority Key Identifier:
                keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:07:4d:e7:5b:33:bc:61:7c:91:c6:a6:d9:55:46:31:28:06:
         67:48:8c:30:54:69:d5:35:02:0f:35:a3:b2:76:8b:87:cd:27:
         bd:c5:b6:47:14:3a:5f:1a:f1:13:78:e8:e5:d6:d3:80:6a:0a:
         52:e2:e7:a9:5b:f9:15:ed:a5:4f:ed:5a:28:e7:b8:d4:06:f1:
         54:0d:ac:16:eb:4c:a4:12:4b:26:23:17:a9:73:32:f9:84:2a:
         25:24:25:6a:8e:7e:7d:9b:18:b8:03:4d:8d:a5:4d:cb:0d:ab:
         cb:44:45:df:97:5a:00:04:20:20:9b:bd:e3:4f:c7:dc:b7:f2:
         b8:18:4d:5b:e8:01:b2:a1:6c:cc:f4:75:4d:d9:01:c1:cd:10:
         53:40:8b:c6:93:06:ac:73:e4:a2:ed:60:28:4c:ff:50:ca:d8:
         55:c8:86:fa:3b:eb:f9:97:c4:0c:b0:dd:45:ba:50:6c:ac:fb:
         8e:6c:5b:83:7f:91:0e:b3:1a:c6:d8:cd:5b:ba:9d:8a:d6:99:
         16:11:c5:21:7f:2d:95:70:26:03:d5:50:9e:10:e0:c7:3c:36:
         09:73:74:5a:2a:76:12:53:9b:27:69:b8:a3:a8:67:6d:6e:17:
         7f:51:cf:82:a7:89:aa:54:ac:a7:8c:cc:96:97:2c:bf:45:0f:
         6c:12:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:50:22 2026 by rpki-client