Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
File:                     V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json)
Hash identifier:          QRL6FbM9Olb88pBrY1GKXWeUCnybt/R/6Sm4sYhOSIs=
Subject key identifier:   4F:6F:8F:BB:6E:9F:5E:C4:7E:FD:BC:EA:8F:AB:7A:B3:09:B7:EB:21
Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD
Certificate issuer:       /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
Certificate serial:       019CADC75571A6D4FBEFB975A1542BFF82C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 09:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:47 +0000
Files and hashes:         1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: ilggznWke8917AiUABZmhBJ2ScGN8SSYVmlsLqKvr6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:55:71:a6:d4:fb:ef:b9:75:a1:54:2b:ff:82:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
        Validity
            Not Before: Mar  2 09:00:47 2026 GMT
            Not After : Mar  3 09:00:47 2026 GMT
        Subject: CN=4f6f8fbb6e9f5ec47efdbcea8fab7ab309b7eb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:5d:76:d8:d1:2e:b6:67:1c:f4:8b:f3:bd:
                    ce:79:37:2c:d2:c3:86:2a:a9:2c:f7:3d:8e:fc:82:
                    d4:03:c1:f3:ff:5f:b7:13:49:29:3b:7f:3e:6a:4b:
                    be:4e:e7:7a:bc:62:40:cf:ea:97:f4:1b:48:cd:8b:
                    61:3d:66:e2:17:cc:29:8f:01:99:34:f3:09:54:31:
                    70:96:b5:60:9e:99:2b:72:e6:f6:37:e7:5e:6a:90:
                    81:fe:d4:e6:22:88:c6:f9:95:3d:44:bd:48:26:a0:
                    9e:f2:94:66:b0:d1:4f:c5:ca:61:22:92:e2:fe:d3:
                    65:7f:04:de:ca:f7:7e:8e:58:de:36:51:ee:5a:86:
                    5d:0b:44:2c:1e:16:a3:08:ab:4e:1c:56:c1:7f:2c:
                    9d:92:58:f9:cd:90:1f:3e:57:db:5c:25:86:57:23:
                    97:70:cb:78:a4:03:50:65:8e:0c:2e:d7:36:d4:09:
                    31:f5:b5:93:48:df:f1:8a:df:b4:a2:a4:d3:47:6a:
                    4c:8e:af:e6:12:7f:e7:6f:d1:12:6d:63:37:db:4e:
                    9a:c3:b1:c0:4d:47:69:f8:da:18:88:db:bf:a3:a4:
                    6b:de:39:57:2d:4c:33:be:74:b6:26:5d:5b:53:ac:
                    52:ba:47:a7:db:d7:72:79:ca:b9:7a:6b:f7:7a:30:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:8F:BB:6E:9F:5E:C4:7E:FD:BC:EA:8F:AB:7A:B3:09:B7:EB:21
            X509v3 Authority Key Identifier:
                keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:e9:69:e1:37:2f:59:91:1e:4b:68:b7:41:e1:9c:86:7b:
         c7:40:dc:45:dc:72:81:52:fa:3d:da:47:e6:0a:4b:ca:93:e4:
         b2:cc:8e:2e:fa:10:69:23:69:0c:03:b8:14:a8:74:fa:94:9e:
         ab:07:21:ab:22:19:cb:f4:70:7f:95:e1:23:88:9f:f7:e4:64:
         8a:b3:81:e8:f1:a2:ae:e0:01:b8:89:14:c3:69:40:c7:8b:79:
         eb:57:a1:cb:dc:a0:d7:99:fd:d5:fe:17:7f:81:53:d8:9d:75:
         4c:fd:63:6f:d1:54:40:14:51:77:35:c5:77:16:fd:7f:91:35:
         af:37:57:49:3b:3c:3e:22:21:2f:ba:6e:6c:8c:90:ae:75:a7:
         f2:56:b1:1a:94:29:28:7c:41:19:eb:8c:93:f8:73:92:3c:f8:
         60:dc:ec:3c:cd:58:cb:f9:a8:44:2b:a0:62:18:8b:cd:a1:f6:
         dd:4b:9f:33:ab:61:3c:54:8b:fa:cc:69:10:b1:e4:98:81:60:
         49:8c:34:a7:c6:58:98:51:be:4f:6c:03:bb:24:95:04:2d:4c:
         9c:49:e6:2e:b2:93:dd:e7:6c:16:48:e1:c7:ec:ed:25:bd:b5:
         e0:b5:bf:75:a8:49:cc:00:96:2e:5a:8e:ad:db:48:a3:cf:b8:
         e3:d7:c3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx1VxptT777l1oVQr/4LEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzMzYWZkZWNkMjk4ZTgzZDAxZmY0ZWQyMWM2MmMxYTBh
ZWFiZGQwHhcNMjYwMzAyMDkwMDQ3WhcNMjYwMzAzMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZjZmOGZiYjZlOWY1ZWM0N2VmZGJjZWE4ZmFiN2FiMzA5YjdlYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh9ddtjRLrZnHPSL873OeTcs0sOG
Kqks9z2O/ILUA8Hz/1+3E0kpO38+aku+Tud6vGJAz+qX9BtIzYthPWbiF8wpjwGZ
NPMJVDFwlrVgnpkrcub2N+deapCB/tTmIojG+ZU9RL1IJqCe8pRmsNFPxcphIpLi
/tNlfwTeyvd+jljeNlHuWoZdC0QsHhajCKtOHFbBfyydklj5zZAfPlfbXCWGVyOX
cMt4pANQZY4MLtc21Akx9bWTSN/xit+0oqTTR2pMjq/mEn/nb9ESbWM3206aw7HA
TUdp+NoYiNu/o6Rr3jlXLUwzvnS2Jl1bU6xSuken29dyecq5emv3ejCM7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9vj7tun17Efv286o+rerMJt+shMB8GA1UdIwQY
MBaAFFdzOv3s0pjoPQH/TtIcYsGgrqvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2Yt
MmM0OWUxNWVmNjRiLzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2YtMmM0OWUxNWVmNjRi
LzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvfpaeE3
L1mRHktot0HhnIZ7x0DcRdxygVL6PdpH5gpLypPkssyOLvoQaSNpDAO4FKh0+pSe
qwchqyIZy/Rwf5XhI4if9+RkirOB6PGiruABuIkUw2lAx4t561ehy9yg15n91f4X
f4FT2J11TP1jb9FUQBRRdzXFdxb9f5E1rzdXSTs8PiIhL7pubIyQrnWn8laxGpQp
KHxBGeuMk/hzkjz4YNzsPM1Yy/moRCugYhiLzaH23UufM6thPFSL+sxpELHkmIFg
SYw0p8ZYmFG+T2wDuySVBC1MnEnmLrKT3edsFkjhx+ztJb214LW/dahJzACWLlqO
rdtIo8+449fDSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:09 2026 by rpki-client