Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          cJDjOvpGUKiac9PSvpOsxaHAMZuRC5ocjbcA4SY8fvM=
Subject key identifier:   EB:F8:F6:06:17:C8:5B:8B:FF:94:D8:F4:6A:EC:2F:E3:5C:0E:37:FB
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019CDB0DA35E87ACF6AD277F4428639BB6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          1558
Signing time:             Wed 11 Mar 2026 04:00:29 +0000
Manifest this update:     Wed 11 Mar 2026 04:00:29 +0000
Manifest next update:     Thu 12 Mar 2026 04:00:29 +0000
Files and hashes:         1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=)
                          2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: EkLlOtvhOg0F1qexD5AWV2vrTACuqh4XzpVgecqH2Lg=)
                          3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=)
                          4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=)
                          5: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=)
                          6: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=)
                          7: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=)
                          8: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=)
                          9: PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (hash: h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=)
                          10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=)
                          11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=)
                          12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=)
                          13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=)
                          14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=)
                          15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=)
                          16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=)
                          17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=)
                          18: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (hash: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k=)
                          19: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=)
                          20: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=)
                          21: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:db:0d:a3:5e:87:ac:f6:ad:27:7f:44:28:63:9b:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Mar 11 04:00:29 2026 GMT
            Not After : Mar 12 04:00:29 2026 GMT
        Subject: CN=ebf8f60617c85b8bff94d8f46aec2fe35c0e37fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:bf:29:b4:ee:5c:14:ad:90:14:5b:44:b3:
                    55:b1:ed:3a:4e:1c:6b:1f:3e:b5:57:db:8e:9a:08:
                    6f:37:b9:2d:4e:6b:5b:5b:d7:b3:40:98:d8:63:f8:
                    20:c6:bc:66:6a:4e:a1:bc:e2:a1:b4:17:05:8f:d9:
                    92:b8:b4:07:c2:95:ea:68:a0:a1:b0:5c:e4:ae:d5:
                    cc:63:20:fe:c3:76:6a:fc:f8:b9:8a:2e:10:09:5a:
                    6d:ec:27:2f:fb:d4:b1:15:5c:b4:b1:be:2f:70:1d:
                    87:84:f4:05:13:00:43:fc:d2:1b:b0:18:c3:d0:b0:
                    5f:02:d4:8f:41:93:20:ef:ba:15:81:04:60:b4:8a:
                    bd:82:a1:f1:ad:0f:8a:05:ed:87:53:4f:0d:84:0b:
                    1c:92:73:af:5d:05:d6:2d:24:58:83:5b:60:c8:ab:
                    de:f3:ef:3c:14:f1:69:a0:09:10:d9:94:84:11:dc:
                    0a:87:33:e8:00:7a:bf:a6:29:ab:5d:8a:82:e5:63:
                    de:8d:72:83:38:0e:a8:e8:15:9a:57:60:b2:11:99:
                    fc:3f:2b:01:48:fe:4b:58:4c:07:14:e3:a0:3c:a3:
                    92:12:47:b6:f3:d4:17:11:85:39:1e:b4:a7:de:a6:
                    fb:f8:e4:f0:b8:9c:b4:d7:ab:69:03:ed:15:33:3a:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:F6:06:17:C8:5B:8B:FF:94:D8:F4:6A:EC:2F:E3:5C:0E:37:FB
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:76:70:37:9e:c3:a4:a7:13:3c:5d:6a:31:3f:df:28:6d:23:
         33:23:44:80:b4:e7:7d:f6:30:49:9f:48:6e:84:5c:ff:9a:05:
         d4:79:13:0a:2b:9e:b4:82:3a:ee:98:bb:5c:da:f3:08:55:f3:
         b9:17:4f:a8:3c:02:8e:6b:6c:7e:1c:f0:c7:37:30:1f:24:99:
         c0:83:d2:5d:8f:33:42:79:8a:0e:0f:05:bd:6e:59:12:bd:8b:
         75:e5:bd:70:9b:7e:0c:09:39:ed:a2:3c:20:2d:9c:ed:31:c9:
         ad:2a:b8:41:2b:3a:86:04:95:52:6c:71:da:ad:52:92:b5:93:
         d3:0a:39:ed:3b:65:c3:f2:dd:e7:8c:a5:71:21:85:af:3b:28:
         26:3e:f8:bd:de:5d:fb:b8:f3:aa:25:f2:75:4a:00:f4:a4:af:
         a6:78:3f:0e:39:d8:db:b6:81:21:9c:bf:64:b4:28:78:47:dd:
         82:89:ad:1d:75:cd:e3:af:f1:8f:bd:db:cf:3b:70:ff:85:08:
         a5:ab:cf:49:ff:7f:97:c0:1a:c7:55:70:36:84:b2:eb:ca:a2:
         d4:7d:9b:dc:c0:33:87:85:04:36:f3:a9:6c:39:8c:76:8f:ff:
         4e:34:c2:4a:67:d8:92:f1:05:f8:d3:c2:62:49:a0:36:f9:f8:
         00:c6:46:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:37:21 2026 by rpki-client