Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          vS6tWDBOjRntQqpcle7lBo3kvVgLvvock3Tzq5veNaI=
Subject key identifier:   C3:8B:F3:32:9E:F1:C2:50:C7:1B:50:72:22:1A:04:F1:1C:9F:D3:B8
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       019CAD599B24F61CE1B49A2E80DA8E0B1DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          0F96
Signing time:             Mon 02 Mar 2026 07:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:56 +0000
Files and hashes:         1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: zBg8OxewctUtZK6xr8mZ6xqInilDhC+yD1SlBuRK8Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:9b:24:f6:1c:e1:b4:9a:2e:80:da:8e:0b:1d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: Mar  2 07:00:56 2026 GMT
            Not After : Mar  3 07:00:56 2026 GMT
        Subject: CN=c38bf3329ef1c250c71b5072221a04f11c9fd3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:fe:15:13:25:66:c0:80:72:7a:2b:f8:dd:
                    aa:cb:74:eb:bf:10:47:77:87:0c:19:0d:e0:34:fe:
                    a1:87:b2:91:84:a6:5f:ee:b5:60:7e:c1:01:b6:32:
                    62:e7:e9:23:83:53:71:4f:61:06:29:e9:cd:16:62:
                    f5:55:b3:d9:50:eb:81:31:7c:4f:23:95:41:01:d5:
                    6f:56:5e:cf:1f:30:e9:87:4d:7e:2c:9e:7b:fb:53:
                    29:32:4b:ed:7c:c9:5d:f3:19:90:d8:77:bc:cd:1a:
                    78:87:b3:91:8d:5c:ea:7d:48:42:76:df:af:ba:3b:
                    b2:57:be:95:dd:61:f4:93:df:7c:f6:40:cf:83:8e:
                    83:19:6e:cb:75:57:41:9c:f3:e6:fa:4d:6c:e7:7f:
                    56:9b:bf:48:ec:2e:c3:e6:ee:3f:e4:25:11:da:c5:
                    dc:68:e8:bf:9c:0f:40:79:9f:2f:75:6d:41:db:11:
                    de:15:bf:ba:bf:12:c5:1e:c4:de:c7:ac:83:9b:47:
                    2f:af:28:f2:0a:f8:cf:80:10:2e:6a:86:73:09:4f:
                    9f:d4:a3:8c:c3:88:6f:c8:25:ed:5c:7c:39:b2:21:
                    c6:02:be:74:9a:ca:be:55:85:ee:94:6a:63:4c:ce:
                    57:ff:6d:bd:09:fa:47:87:53:70:ee:d5:38:a8:f7:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:F3:32:9E:F1:C2:50:C7:1B:50:72:22:1A:04:F1:1C:9F:D3:B8
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:55:4d:70:f2:1d:62:49:b6:47:00:ef:16:eb:ee:a8:b8:
         72:3c:73:55:3c:86:fb:f5:f3:97:4f:a7:eb:ef:d6:8e:ef:b6:
         67:80:9b:7e:0c:3b:70:b2:9b:44:77:98:f0:43:6a:4b:b1:e3:
         12:2e:57:88:62:4c:3c:ab:d6:a5:d2:08:64:c5:c7:ed:85:0e:
         22:92:d0:dd:1d:21:65:8d:a2:a4:06:14:ed:86:d4:1c:bf:d1:
         f4:a6:ed:96:6a:08:34:40:24:3f:2c:d0:93:e8:5b:0d:b4:57:
         f4:2e:b0:e1:14:b5:b3:1b:42:97:4c:4a:90:e4:63:0f:de:3f:
         09:42:95:fa:fa:31:3b:99:cd:ca:d8:2a:60:14:fb:a4:bb:6f:
         d3:b5:77:4b:bd:41:84:f4:d8:6a:99:e2:20:85:d1:06:bb:d8:
         b3:6d:1e:db:dd:47:07:e4:0c:ec:1e:66:ba:ce:59:fc:72:89:
         88:9f:85:64:f9:93:f5:4b:25:e3:35:ff:c4:25:38:25:f5:b8:
         05:74:e2:f9:87:49:0f:ff:a1:ac:b4:a3:2a:0f:01:9d:4b:6a:
         74:84:8f:84:15:48:1f:f9:d2:1f:9a:b6:ee:1d:af:c3:02:13:
         77:0a:a6:46:96:a4:9b:9c:1b:9f:01:16:8b:66:d3:8c:b4:ef:
         7f:a4:21:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZsk9hzhtJougNqOCx3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjYwMzAyMDcwMDU2WhcNMjYwMzAzMDcwMDU2WjAzMTEwLwYDVQQD
EyhjMzhiZjMzMjllZjFjMjUwYzcxYjUwNzIyMjFhMDRmMTFjOWZkM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsn+FRMlZsCAcnor+N2qy3TrvxBH
d4cMGQ3gNP6hh7KRhKZf7rVgfsEBtjJi5+kjg1NxT2EGKenNFmL1VbPZUOuBMXxP
I5VBAdVvVl7PHzDph01+LJ57+1MpMkvtfMld8xmQ2He8zRp4h7ORjVzqfUhCdt+v
ujuyV76V3WH0k9989kDPg46DGW7LdVdBnPPm+k1s539Wm79I7C7D5u4/5CUR2sXc
aOi/nA9AeZ8vdW1B2xHeFb+6vxLFHsTex6yDm0cvryjyCvjPgBAuaoZzCU+f1KOM
w4hvyCXtXHw5siHGAr50msq+VYXulGpjTM5X/229CfpHh1Nw7tU4qPeOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOL8zKe8cJQxxtQciIaBPEcn9O4MB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/xVTXDy
HWJJtkcA7xbr7qi4cjxzVTyG+/Xzl0+n6+/Wju+2Z4Cbfgw7cLKbRHeY8ENqS7Hj
Ei5XiGJMPKvWpdIIZMXH7YUOIpLQ3R0hZY2ipAYU7YbUHL/R9KbtlmoINEAkPyzQ
k+hbDbRX9C6w4RS1sxtCl0xKkORjD94/CUKV+voxO5nNytgqYBT7pLtv07V3S71B
hPTYapniIIXRBrvYs20e291HB+QM7B5mus5Z/HKJiJ+FZPmT9Usl4zX/xCU4JfW4
BXTi+YdJD/+hrLSjKg8BnUtqdISPhBVIH/nSH5q27h2vwwITdwqmRpakm5wbnwEW
i2bTjLTvf6QhbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:54 2026 by rpki-client