Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File:                     mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier:          CyRUFE+qrYsFCxBUJKdPn6zk9RtksJE0REmyOkwCqhI=
Subject key identifier:   9A:29:22:B5:08:0E:9A:29:9E:15:24:5A:9D:52:9A:9F:77:AE:E1:B6
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       019D389C26AFF5FB4F78A59CF67954B4217E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number:          12EB
Signing time:             Sun 29 Mar 2026 08:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:50 +0000
Files and hashes:         1: GbzVHVPV7fqmfNx03Nok7Xwc57w.roa (hash: zeJi6kvcTN0CQfz2lKYhPJQbiGipkfJNH0B8vGsiI7o=)
                          2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: pXMPi4Ta8CSBBhI4NN237CtpBdkHiVC4TNu9b6Cz1Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:26:af:f5:fb:4f:78:a5:9c:f6:79:54:b4:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: Mar 29 08:00:50 2026 GMT
            Not After : Mar 30 08:00:50 2026 GMT
        Subject: CN=9a2922b5080e9a299e15245a9d529a9f77aee1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:59:60:e8:f6:cf:2f:75:1e:d7:dd:28:d8:
                    09:52:e9:18:34:fa:c9:7e:b0:dc:82:40:b7:1f:72:
                    bd:ea:77:65:02:07:c9:d6:a2:f0:fa:0b:58:e7:72:
                    5d:d1:11:3c:63:ab:c1:7e:ac:ac:13:ca:c9:96:73:
                    25:b4:5e:0d:7e:55:35:19:c6:c0:02:c6:82:9c:c9:
                    2d:ec:0d:32:fd:77:f7:05:f5:16:08:08:76:7c:a8:
                    a2:2f:14:f1:71:78:3b:fe:e9:32:2d:37:6a:63:d0:
                    8c:08:0b:c5:30:cf:0b:19:34:43:9c:68:ef:98:7d:
                    a3:de:5e:d0:3e:5c:19:5e:47:13:aa:f2:21:e7:1a:
                    4a:7d:a7:3c:60:38:d7:e2:2b:45:63:7f:0c:c1:1b:
                    86:0b:2a:cc:5a:e9:8a:68:9b:2e:89:70:6b:c7:04:
                    7b:31:5c:39:90:0e:19:ac:2f:d9:ee:7f:e9:45:e2:
                    55:53:cc:fb:c0:3c:d5:c1:ff:ed:d8:ef:b8:a3:a8:
                    c5:c5:92:75:52:fc:42:5f:f3:1a:86:cd:a7:ad:7c:
                    3b:3c:b1:97:d1:ac:1c:ba:53:25:f3:41:74:10:73:
                    c2:e8:43:61:a4:ff:f5:3d:08:d8:8d:a1:5d:99:80:
                    fd:20:5b:4c:e4:88:3b:62:bb:7c:44:29:2e:fa:4f:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:29:22:B5:08:0E:9A:29:9E:15:24:5A:9D:52:9A:9F:77:AE:E1:B6
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:89:f4:7d:12:c2:c4:1c:dc:f2:cf:25:28:3d:34:87:23:ae:
         4a:83:62:cd:4b:b7:a2:d7:43:10:aa:3e:e5:8e:79:43:ce:f2:
         58:2a:c8:cc:e6:8f:2f:78:57:24:11:05:9e:e8:90:87:0a:d1:
         bc:09:2f:eb:93:ea:9c:8f:25:1e:79:f3:a0:38:2c:ad:29:63:
         dd:f3:ea:03:bc:b1:31:16:22:91:d2:7e:93:73:05:ac:08:b6:
         a3:b7:00:e8:49:ee:49:05:fd:04:4c:4c:ac:f1:cc:d3:e4:f4:
         28:b0:4d:b4:10:4b:9a:44:19:aa:b4:f1:2a:52:11:23:67:5a:
         0b:37:aa:06:e0:39:f8:62:47:24:2d:59:32:c5:bd:5f:14:64:
         3b:cf:13:86:01:17:52:11:3f:03:75:a0:63:d6:83:bc:da:04:
         4b:0e:a2:55:d2:d5:a1:1e:41:4d:1f:79:d4:91:8b:8d:d8:8b:
         84:0d:63:f3:96:c1:b3:0b:7d:39:60:1e:91:d4:15:fd:4d:30:
         98:59:39:65:da:6d:81:4d:78:74:f4:b4:52:a1:fc:ca:71:45:
         61:e6:e7:8c:55:92:3c:4d:cf:0e:20:1d:99:98:48:e2:55:82:
         69:9c:6a:91:c9:ed:7b:21:95:3e:c8:d3:61:8c:20:b6:d4:4a:
         fc:bd:c3:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCav9ftPeKWc9nlUtCF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDUwM2Q0ZDE4MTQwYjkyYWE4OTIzMTkzMTAxZDBmM2Vh
ZmUyYzMwHhcNMjYwMzI5MDgwMDUwWhcNMjYwMzMwMDgwMDUwWjAzMTEwLwYDVQQD
Eyg5YTI5MjJiNTA4MGU5YTI5OWUxNTI0NWE5ZDUyOWE5Zjc3YWVlMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznpZYOj2zy91HtfdKNgJUukYNPrJ
frDcgkC3H3K96ndlAgfJ1qLw+gtY53Jd0RE8Y6vBfqysE8rJlnMltF4NflU1GcbA
AsaCnMkt7A0y/Xf3BfUWCAh2fKiiLxTxcXg7/ukyLTdqY9CMCAvFMM8LGTRDnGjv
mH2j3l7QPlwZXkcTqvIh5xpKfac8YDjX4itFY38MwRuGCyrMWumKaJsuiXBrxwR7
MVw5kA4ZrC/Z7n/pReJVU8z7wDzVwf/t2O+4o6jFxZJ1UvxCX/Mahs2nrXw7PLGX
0awculMl80F0EHPC6ENhpP/1PQjYjaFdmYD9IFtM5Ig7Yrt8RCku+k8kTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJopIrUIDpopnhUkWp1Smp93ruG2MB8GA1UdIwQY
MBaAFJhFA9TRgUC5KqiSMZMQHQ8+r+LDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzIt
NjBmZWVjZWE5YWE0LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzItNjBmZWVjZWE5YWE0
LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIn0fRLC
xBzc8s8lKD00hyOuSoNizUu3otdDEKo+5Y55Q87yWCrIzOaPL3hXJBEFnuiQhwrR
vAkv65PqnI8lHnnzoDgsrSlj3fPqA7yxMRYikdJ+k3MFrAi2o7cA6EnuSQX9BExM
rPHM0+T0KLBNtBBLmkQZqrTxKlIRI2daCzeqBuA5+GJHJC1ZMsW9XxRkO88ThgEX
UhE/A3WgY9aDvNoESw6iVdLVoR5BTR951JGLjdiLhA1j85bBswt9OWAekdQV/U0w
mFk5ZdptgU14dPS0UqH8ynFFYebnjFWSPE3PDiAdmZhI4lWCaZxqkcnteyGVPsjT
YYwgttRK/L3DDg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:28 2026 by rpki-client