Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          9tExKXef4an4+5TjAelWOaGcQlJBjM6e/PVO8AlZtCo=
Subject key identifier:   B8:A4:73:31:BC:0E:32:D6:E2:8D:94:B6:64:C1:0D:04:5D:CD:E4:48
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019CE63695EDEDC491B2FAC17BF581579724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1864
Signing time:             Fri 13 Mar 2026 08:01:02 +0000
Manifest this update:     Fri 13 Mar 2026 08:01:02 +0000
Manifest next update:     Sat 14 Mar 2026 08:01:02 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: vkm4PiHND6znI8kMXq/SKcvMtJvv37bfgfXRjbot8TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:95:ed:ed:c4:91:b2:fa:c1:7b:f5:81:57:97:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Mar 13 08:01:02 2026 GMT
            Not After : Mar 14 08:01:02 2026 GMT
        Subject: CN=b8a47331bc0e32d6e28d94b664c10d045dcde448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:5c:60:08:a7:9a:68:85:7a:d3:e2:39:21:
                    be:63:9e:73:aa:00:83:3e:00:29:04:7f:ad:a8:0f:
                    2d:db:23:1f:95:32:77:e9:d5:ce:c6:c7:86:5d:b6:
                    74:b0:7b:0e:23:90:13:aa:bd:d3:2c:41:15:c3:88:
                    51:1b:62:32:15:13:19:61:dd:8a:26:a1:ac:98:18:
                    ae:69:99:a5:9d:98:c5:ac:26:df:84:81:36:99:55:
                    23:bd:04:58:ed:97:d1:fb:b4:3e:fe:7f:d3:e9:24:
                    af:da:d5:70:73:e2:5c:28:d7:13:ca:a1:13:d9:df:
                    3e:1c:2d:e0:1a:94:dd:8b:03:35:a8:b2:0a:3d:60:
                    8f:47:62:87:ad:7e:87:67:0a:a4:22:2c:b9:91:ad:
                    d5:c7:2b:34:15:fa:bf:26:ef:35:88:94:20:f2:1a:
                    8c:7d:a3:43:a0:bf:3e:37:a5:90:1d:a1:0a:21:d1:
                    5d:e9:fa:d9:66:4e:41:e6:6e:7a:b2:2d:b5:2f:3b:
                    9a:c6:76:b9:6f:e5:90:c3:c7:f0:6b:e9:9e:2e:e0:
                    9c:ab:14:0c:42:8a:65:63:6e:be:d0:3f:ab:7f:ad:
                    98:8b:07:f0:26:65:80:da:75:af:1b:64:91:40:81:
                    45:53:fd:3b:f4:ab:29:57:37:5a:5c:5a:e1:d5:8f:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:73:31:BC:0E:32:D6:E2:8D:94:B6:64:C1:0D:04:5D:CD:E4:48
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:4f:d5:6f:25:de:83:19:e5:8e:02:4c:7e:52:6c:bd:32:
         3a:e0:7d:73:d5:1f:c6:20:bc:04:b8:92:1d:73:a8:f5:31:3a:
         f7:53:c4:db:57:87:32:c9:0d:85:91:b4:a8:93:eb:2a:d3:44:
         51:ad:dc:f0:dc:78:6a:a7:fe:e7:d8:39:42:76:3e:82:f7:6b:
         54:60:07:59:9f:84:70:30:6c:46:7f:1e:7f:ab:50:81:15:58:
         2f:b3:c7:87:f6:6b:60:0c:da:72:40:4c:42:5d:38:af:bc:0a:
         5b:9b:c9:22:e0:76:bd:93:59:87:ef:59:0d:b3:45:17:40:4d:
         4d:2a:56:30:bc:e8:1f:9c:7b:8c:a5:c3:57:3e:c4:53:5c:37:
         fc:15:a0:e1:3f:3f:a2:59:58:eb:1c:91:dd:b4:82:d9:5d:3f:
         68:ad:70:6f:9c:8e:f5:33:ce:3d:e8:34:bc:0c:ab:f1:06:51:
         a2:bb:9d:60:af:e2:50:36:a5:b1:37:4c:68:38:47:93:2c:15:
         fb:6a:cd:d8:40:02:35:b5:fe:a2:36:b3:e1:00:82:5e:06:db:
         2a:62:41:6e:60:4e:13:73:76:7f:91:b9:8a:4a:3a:9c:41:06:
         8d:b0:31:da:46:40:bf:c5:f4:4f:65:2d:0e:c0:db:43:d4:e8:
         38:d3:66:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmNpXt7cSRsvrBe/WBV5ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0
MGI5ZjEwHhcNMjYwMzEzMDgwMTAyWhcNMjYwMzE0MDgwMTAyWjAzMTEwLwYDVQQD
EyhiOGE0NzMzMWJjMGUzMmQ2ZTI4ZDk0YjY2NGMxMGQwNDVkY2RlNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKZcYAinmmiFetPiOSG+Y55zqgCD
PgApBH+tqA8t2yMflTJ36dXOxseGXbZ0sHsOI5ATqr3TLEEVw4hRG2IyFRMZYd2K
JqGsmBiuaZmlnZjFrCbfhIE2mVUjvQRY7ZfR+7Q+/n/T6SSv2tVwc+JcKNcTyqET
2d8+HC3gGpTdiwM1qLIKPWCPR2KHrX6HZwqkIiy5ka3Vxys0Ffq/Ju81iJQg8hqM
faNDoL8+N6WQHaEKIdFd6frZZk5B5m56si21Lzuaxna5b+WQw8fwa+meLuCcqxQM
QoplY26+0D+rf62YiwfwJmWA2nWvG2SRQIFFU/079KspVzdaXFrh1Y8FFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLikczG8DjLW4o2UtmTBDQRdzeRIMB8GA1UdIwQY
MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt
Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw
LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn5P1W8l
3oMZ5Y4CTH5SbL0yOuB9c9UfxiC8BLiSHXOo9TE691PE21eHMskNhZG0qJPrKtNE
Ua3c8Nx4aqf+59g5QnY+gvdrVGAHWZ+EcDBsRn8ef6tQgRVYL7PHh/ZrYAzackBM
Ql04r7wKW5vJIuB2vZNZh+9ZDbNFF0BNTSpWMLzoH5x7jKXDVz7EU1w3/BWg4T8/
ollY6xyR3bSC2V0/aK1wb5yO9TPOPeg0vAyr8QZRorudYK/iUDalsTdMaDhHkywV
+2rN2EACNbX+ojaz4QCCXgbbKmJBbmBOE3N2f5G5iko6nEEGjbAx2kZAv8X0T2Ut
DsDbQ9ToONNmgg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:09:34 2026 by rpki-client