Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
File:                     6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json)
Hash identifier:          NSCoO8BxzxkaBwIDJhpMyGGMpghOu+ez8B4P0cw7Wo0=
Subject key identifier:   A4:E3:CE:E1:25:CD:BF:9A:D7:BE:00:62:F2:F4:C3:12:9D:AF:A5:54
Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
Certificate issuer:       /CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Certificate serial:       019CA9B3D09E1CC9AC09A0F68C7BA9480762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
Manifest number:          05F9
Signing time:             Sun 01 Mar 2026 14:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:59 +0000
Files and hashes:         1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: QOcz8YK1uUpa3wjZLbVDjqt871JTKM4oNIPiMgglxyo=)
                          2: s2oUDikarF4p5RcVnQBbs8zbW58.roa (hash: 8QtOVw2pgyTfdU38vBG8N/ErULSzXVOyB/Uh34rHkzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:d0:9e:1c:c9:ac:09:a0:f6:8c:7b:a9:48:07:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d
        Validity
            Not Before: Mar  1 14:00:59 2026 GMT
            Not After : Mar  2 14:00:59 2026 GMT
        Subject: CN=a4e3cee125cdbf9ad7be0062f2f4c3129dafa554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:70:72:73:97:22:11:52:8d:ff:96:92:1a:
                    4e:9d:03:a9:e5:12:36:5f:4a:c4:42:eb:3b:af:bb:
                    12:55:2d:30:80:19:59:a8:c6:16:1b:18:9d:e2:00:
                    00:a7:32:c3:0c:df:93:7f:11:da:01:a4:fe:7a:9a:
                    f4:13:4a:96:7d:17:7f:a8:78:0e:a6:e8:bb:85:cd:
                    b5:92:72:78:f8:dd:ae:23:84:d9:7d:69:cf:25:5c:
                    af:91:fe:10:51:c2:55:78:4a:96:e4:11:41:af:02:
                    9b:3d:c0:c0:0a:40:3c:2f:c1:a0:b5:51:75:06:4a:
                    16:35:41:1d:7c:9e:98:51:b0:fb:2a:40:c5:cd:8e:
                    a1:62:5d:d6:29:34:83:47:93:c2:7f:09:ee:bb:10:
                    7f:53:bd:54:e0:d8:b9:8d:cb:dd:4f:f9:9a:7c:4b:
                    07:3a:35:a4:11:52:5d:82:41:6d:06:eb:aa:bf:54:
                    27:df:f3:a8:08:5b:e0:3c:dc:31:50:82:04:3f:a7:
                    60:1c:f2:87:df:de:5b:34:57:42:86:07:fa:4f:85:
                    78:4a:4c:32:f0:58:6c:8e:2f:de:8b:68:ab:8e:77:
                    cb:3f:9a:8e:8f:e1:db:6c:8a:c1:fb:01:b5:c1:11:
                    d6:36:1c:40:5f:a3:a6:66:ed:f5:43:d9:60:59:42:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:CE:E1:25:CD:BF:9A:D7:BE:00:62:F2:F4:C3:12:9D:AF:A5:54
            X509v3 Authority Key Identifier:
                keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:c5:d7:d6:d9:e9:73:ec:c7:34:e1:5c:98:15:df:44:cc:
         ff:b5:3e:c9:3f:72:9c:a8:aa:d6:f3:2a:0f:68:a9:11:ab:9a:
         89:25:c8:aa:1d:3f:c3:9b:14:e8:ea:55:b1:85:88:3c:e1:54:
         06:07:be:13:46:32:22:cb:b0:99:c7:e5:ec:eb:67:ec:7b:01:
         e4:39:da:02:06:cd:e8:9e:c3:3c:5d:5f:e6:7d:be:95:02:19:
         04:f2:9c:c8:ba:6e:fa:ae:44:51:98:42:6b:33:4b:81:7f:bc:
         c2:d6:b3:a8:0c:85:af:ac:09:48:74:f8:54:8f:d8:6e:2e:71:
         1e:3e:c5:57:46:ac:e3:3d:87:5d:aa:5a:71:7c:24:e7:3e:4f:
         18:4a:76:24:d5:ce:d1:6a:bf:b1:42:3b:00:64:eb:fa:45:98:
         b2:41:e7:fe:1d:f5:26:f2:9e:8b:b1:46:f7:f9:db:b5:ef:f9:
         20:b5:48:5a:92:ca:d6:50:a1:af:6c:14:ff:eb:b8:75:18:ef:
         7d:43:e3:9f:40:63:30:ff:1d:22:81:65:0b:1d:3f:d2:26:07:
         30:d3:f9:47:7a:6a:e1:52:d1:bd:fa:aa:1b:40:6b:db:85:2f:
         55:25:34:95:e6:64:b3:c2:bc:aa:fa:15:a8:b5:7e:ac:bb:fe:
         a5:23:df:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps9CeHMmsCaD2jHupSAdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NjQ3NzZjZWM2MmVmMTNhODJhMjE2NWU2ZjhkNDc4OTBk
NzczNGQwHhcNMjYwMzAxMTQwMDU5WhcNMjYwMzAyMTQwMDU5WjAzMTEwLwYDVQQD
EyhhNGUzY2VlMTI1Y2RiZjlhZDdiZTAwNjJmMmY0YzMxMjlkYWZhNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBwcnOXIhFSjf+WkhpOnQOp5RI2
X0rEQus7r7sSVS0wgBlZqMYWGxid4gAApzLDDN+TfxHaAaT+epr0E0qWfRd/qHgO
pui7hc21knJ4+N2uI4TZfWnPJVyvkf4QUcJVeEqW5BFBrwKbPcDACkA8L8GgtVF1
BkoWNUEdfJ6YUbD7KkDFzY6hYl3WKTSDR5PCfwnuuxB/U71U4Ni5jcvdT/mafEsH
OjWkEVJdgkFtBuuqv1Qn3/OoCFvgPNwxUIIEP6dgHPKH395bNFdChgf6T4V4Skwy
8Fhsji/ei2irjnfLP5qOj+HbbIrB+wG1wRHWNhxAX6OmZu31Q9lgWUKhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTjzuElzb+a174AYvL0wxKdr6VUMB8GA1UdIwQY
MBaAFOlkd2zsYu8TqCohZeb41HiQ13NNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEt
MTFhOWU5OTIyNTM3LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEtMTFhOWU5OTIyNTM3
LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWc/F19bZ
6XPsxzThXJgV30TM/7U+yT9ynKiq1vMqD2ipEauaiSXIqh0/w5sU6OpVsYWIPOFU
Bge+E0YyIsuwmcfl7Otn7HsB5DnaAgbN6J7DPF1f5n2+lQIZBPKcyLpu+q5EUZhC
azNLgX+8wtazqAyFr6wJSHT4VI/Ybi5xHj7FV0as4z2HXapacXwk5z5PGEp2JNXO
0Wq/sUI7AGTr+kWYskHn/h31JvKei7FG9/nbte/5ILVIWpLK1lChr2wU/+u4dRjv
fUPjn0BjMP8dIoFlCx0/0iYHMNP5R3pq4VLRvfqqG0Br24UvVSU0leZks8K8qvoV
qLV+rLv+pSPfVA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:29 2026 by rpki-client