Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File:                     4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier:          QL8V5bs42kWbEM/m3JZiGAbRPW2JI5o6evzNsU9dqkA=
Subject key identifier:   E9:DA:99:06:77:23:21:41:2D:91:76:4F:03:BD:FA:33:97:BC:6D:61
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer:       /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial:       019D3A1C97E390277851CB68CECEACBDF938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number:          0C7C
Signing time:             Sun 29 Mar 2026 15:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:45 +0000
Files and hashes:         1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: ni5CFJJ1ndy4cAIOT0/HSRyjxeJM9vaHIZhRHUkiero=)
                          2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:97:e3:90:27:78:51:cb:68:ce:ce:ac:bd:f9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
        Validity
            Not Before: Mar 29 15:00:45 2026 GMT
            Not After : Mar 30 15:00:45 2026 GMT
        Subject: CN=e9da9906772321412d91764f03bdfa3397bc6d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:3e:29:2c:56:f3:5c:a2:91:45:12:51:67:
                    8e:70:12:aa:b5:0d:b5:79:83:3b:6f:b9:12:67:ef:
                    e8:6f:53:41:7a:85:29:6e:6c:ca:84:cd:57:33:36:
                    66:dd:21:ee:43:07:a8:3f:2c:33:76:5b:22:a1:ac:
                    26:15:ad:8c:85:bd:47:af:e1:ee:c0:83:49:25:bb:
                    eb:ea:c8:42:b7:72:27:e7:b7:7c:f9:aa:50:cf:0e:
                    58:dd:e4:f1:a2:f1:b9:3d:93:94:3e:0a:db:7a:c2:
                    ea:7d:2a:ca:33:a1:56:82:af:50:20:34:3e:75:35:
                    a6:76:d9:5f:e0:f0:41:2c:8c:10:7c:00:10:41:b0:
                    e8:10:61:90:c7:d8:88:b1:95:fc:dc:c8:c9:9c:45:
                    b1:87:27:ef:7b:2e:92:06:28:44:15:18:f5:c1:ea:
                    34:a7:ed:0f:85:02:f1:fb:3e:0a:7d:45:a8:a5:6e:
                    47:00:89:0e:99:e0:fc:60:06:f0:18:28:89:c5:02:
                    6b:b2:d0:c4:0f:f4:7f:29:c7:cd:74:9a:45:98:ed:
                    03:50:fc:ad:92:e6:43:54:52:5c:b0:ff:b9:02:fa:
                    d3:d9:ff:b5:64:1c:1d:b0:49:6f:62:c9:e5:56:5e:
                    e9:87:9e:ba:0b:9b:20:4f:a4:e1:bc:b8:6f:9c:94:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:99:06:77:23:21:41:2D:91:76:4F:03:BD:FA:33:97:BC:6D:61
            X509v3 Authority Key Identifier:
                keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:84:c1:35:59:07:0b:a2:e4:4f:91:d9:51:bf:c8:98:0a:
         00:19:a7:5f:a6:f6:64:2b:f0:dc:d9:74:29:9f:6f:f4:d4:43:
         9c:7e:cc:91:99:39:ab:01:85:52:e6:04:2d:7e:cb:07:64:fe:
         ea:ba:e7:04:1b:78:9d:a7:1c:3b:6b:4c:70:d4:6b:96:0b:58:
         3d:31:cf:a1:13:c3:49:46:05:16:7e:fe:a1:0d:3a:2d:1d:d0:
         a2:76:65:14:64:2c:29:ae:85:60:05:45:6c:d9:57:ea:07:d3:
         cc:bd:34:9c:3b:b6:50:70:09:74:24:7b:84:6e:26:38:53:8b:
         cd:e1:dc:9b:9b:fd:5f:bc:3b:27:88:5b:7e:d2:69:fb:af:1f:
         50:1d:05:a3:f9:44:50:f8:cc:ae:d5:50:e7:34:27:4d:43:80:
         38:95:25:5d:d6:69:ee:7d:f2:89:15:d9:41:ce:91:1e:9a:71:
         65:ff:ca:a5:c3:4e:e0:68:22:24:a8:7a:dc:d4:37:41:dc:cc:
         af:18:76:1c:8e:29:a8:61:3b:6d:29:6e:9e:bf:bd:bf:6f:9e:
         71:ce:48:c2:6e:c2:c6:1f:8d:61:66:b0:db:8a:f2:b9:3d:00:
         a0:a5:0e:68:78:3e:a3:4e:16:78:3f:ee:38:6d:7c:72:7a:e7:
         3f:38:e6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HJfjkCd4Uctozs6svfk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjYwMzI5MTUwMDQ1WhcNMjYwMzMwMTUwMDQ1WjAzMTEwLwYDVQQD
EyhlOWRhOTkwNjc3MjMyMTQxMmQ5MTc2NGYwM2JkZmEzMzk3YmM2ZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszM+KSxW81yikUUSUWeOcBKqtQ21
eYM7b7kSZ+/ob1NBeoUpbmzKhM1XMzZm3SHuQweoPywzdlsioawmFa2Mhb1Hr+Hu
wINJJbvr6shCt3In57d8+apQzw5Y3eTxovG5PZOUPgrbesLqfSrKM6FWgq9QIDQ+
dTWmdtlf4PBBLIwQfAAQQbDoEGGQx9iIsZX83MjJnEWxhyfvey6SBihEFRj1weo0
p+0PhQLx+z4KfUWopW5HAIkOmeD8YAbwGCiJxQJrstDED/R/KcfNdJpFmO0DUPyt
kuZDVFJcsP+5AvrT2f+1ZBwdsElvYsnlVl7ph566C5sgT6ThvLhvnJT2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnamQZ3IyFBLZF2TwO9+jOXvG1hMB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoKEwTVZ
Bwui5E+R2VG/yJgKABmnX6b2ZCvw3Nl0KZ9v9NRDnH7MkZk5qwGFUuYELX7LB2T+
6rrnBBt4naccO2tMcNRrlgtYPTHPoRPDSUYFFn7+oQ06LR3QonZlFGQsKa6FYAVF
bNlX6gfTzL00nDu2UHAJdCR7hG4mOFOLzeHcm5v9X7w7J4hbftJp+68fUB0Fo/lE
UPjMrtVQ5zQnTUOAOJUlXdZp7n3yiRXZQc6RHppxZf/KpcNO4GgiJKh63NQ3QdzM
rxh2HI4pqGE7bSlunr+9v2+ecc5Iwm7Cxh+NYWaw24ryuT0AoKUOaHg+o04WeD/u
OG18cnrnPzjmlw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:06 2026 by rpki-client