Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          V+lJ+PCyMMOXaTNB4oFiRIhxN558UIMVcSV3Bz/LMQ8=
Subject key identifier:   38:E2:CF:2F:E9:9B:2D:7F:F2:C0:AC:B7:F7:A2:25:64:97:82:2F:EE
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       019CA97C7A049409C37F7E9DAB1658011F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          11EB
Signing time:             Sun 01 Mar 2026 13:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:33 +0000
Files and hashes:         1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: xyIoXqz3NEHHAeg3VLt4cOPFj8q17uA16e0tgwjDlBk=)
                          2: FCkS32niDqTieJEg273lZaADBO4.asa (hash: X7OKZkohiCA52OimXwo3Rcigub3BUOIbW9Q5dXYSznI=)
                          3: q0LlzmM8E8pM2I1fVThdkBbhcsc.asa (hash: KUK6/Ec9nAX5NcTnuxJ3vbPAN4QtO/b7t3p4IVGMuRU=)
                          4: upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa (hash: 2Rk/P9oSpdtf8edjp9QJY+dBNX8kPTP7ILwi67bXY+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:7a:04:94:09:c3:7f:7e:9d:ab:16:58:01:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Mar  1 13:00:33 2026 GMT
            Not After : Mar  2 13:00:33 2026 GMT
        Subject: CN=38e2cf2fe99b2d7ff2c0acb7f7a2256497822fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:2a:91:5f:a2:43:4f:99:c0:80:95:48:dd:
                    7e:06:7f:65:6a:7f:d8:ff:59:fb:d6:ce:f1:29:be:
                    57:9f:51:84:52:80:41:46:c6:3b:71:8b:01:d5:56:
                    c5:e6:8b:8c:85:04:60:be:b8:60:aa:79:5b:d2:cb:
                    58:f0:df:41:d0:1b:8c:25:76:e8:dd:96:58:68:d2:
                    de:07:5b:4b:c0:33:c6:41:5f:ec:d1:c7:b8:b3:ff:
                    33:70:c5:cc:96:c4:22:02:81:7e:2b:24:c3:1e:f1:
                    d1:31:b7:3a:66:51:31:53:0d:3c:be:d1:30:83:b8:
                    39:00:46:d8:60:8e:04:8e:cf:44:ed:15:0e:43:f4:
                    c1:20:18:fd:77:af:81:52:f8:9d:d6:4a:14:9a:e6:
                    03:46:a1:72:78:27:f7:45:58:c7:aa:eb:a2:7b:a0:
                    75:6b:0b:95:9e:64:ae:86:5b:ca:e5:6a:c2:5c:c8:
                    88:4b:93:77:99:fc:8f:4e:4e:44:b2:17:28:47:27:
                    22:ba:c4:83:4c:df:17:2a:87:55:68:f3:ae:02:43:
                    21:50:fa:2a:2c:e1:fe:aa:7b:90:f3:08:5e:98:0f:
                    d6:40:7a:46:24:8f:98:be:ab:30:a6:d9:16:30:bc:
                    58:35:94:99:27:3e:99:4f:6b:a7:4a:67:f9:15:15:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E2:CF:2F:E9:9B:2D:7F:F2:C0:AC:B7:F7:A2:25:64:97:82:2F:EE
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:b3:27:79:9e:f0:73:51:8e:59:03:99:2c:27:97:9e:ea:
         f8:e4:37:bf:f9:eb:65:6a:8b:33:88:bd:ec:35:c4:0a:44:36:
         e1:c0:df:c3:3d:5c:46:b0:27:fc:78:0f:1c:00:c1:f6:74:9c:
         6b:ff:47:08:c8:85:20:c0:82:c5:6a:0f:8b:60:08:51:6e:0c:
         53:93:9a:af:8e:10:d9:6a:dc:39:c0:03:a8:be:d1:f0:4f:71:
         84:c2:a6:59:2d:04:43:74:f7:94:ce:43:ba:b4:6d:65:b0:fa:
         01:37:bd:83:c5:d6:04:33:c4:8b:f6:84:46:c0:da:66:23:73:
         7c:ec:4b:be:8a:b3:b1:45:61:fa:84:5b:a4:39:0e:84:51:a8:
         a0:41:be:a4:66:b3:38:09:31:48:b2:78:02:cf:f1:d2:44:1e:
         4c:df:a4:12:ef:4e:f5:e6:a4:7f:1f:7f:ec:5f:63:9b:3c:29:
         34:59:b9:c9:d0:62:78:2e:95:46:81:b9:1e:fc:3e:b6:29:e0:
         e7:98:74:65:8c:33:d0:25:be:25:b3:7f:f5:1a:f0:93:7b:0d:
         dc:77:12:4b:20:5f:0a:96:be:b1:48:b0:0a:81:5e:ef:83:dc:
         2d:46:21:47:f6:c0:fb:0d:b4:8d:c6:f7:76:0a:ab:8f:b0:db:
         fb:d3:b3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfHoElAnDf36dqxZYAR8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk
ZWEyOGIwHhcNMjYwMzAxMTMwMDMzWhcNMjYwMzAyMTMwMDMzWjAzMTEwLwYDVQQD
EygzOGUyY2YyZmU5OWIyZDdmZjJjMGFjYjdmN2EyMjU2NDk3ODIyZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIqkV+iQ0+ZwICVSN1+Bn9lan/Y
/1n71s7xKb5Xn1GEUoBBRsY7cYsB1VbF5ouMhQRgvrhgqnlb0stY8N9B0BuMJXbo
3ZZYaNLeB1tLwDPGQV/s0ce4s/8zcMXMlsQiAoF+KyTDHvHRMbc6ZlExUw08vtEw
g7g5AEbYYI4Ejs9E7RUOQ/TBIBj9d6+BUvid1koUmuYDRqFyeCf3RVjHquuie6B1
awuVnmSuhlvK5WrCXMiIS5N3mfyPTk5EshcoRyciusSDTN8XKodVaPOuAkMhUPoq
LOH+qnuQ8whemA/WQHpGJI+YvqswptkWMLxYNZSZJz6ZT2unSmf5FRWqjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjizy/pmy1/8sCst/eiJWSXgi/uMB8GA1UdIwQY
MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt
MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk
LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr42zJ3me
8HNRjlkDmSwnl57q+OQ3v/nrZWqLM4i97DXECkQ24cDfwz1cRrAn/HgPHADB9nSc
a/9HCMiFIMCCxWoPi2AIUW4MU5Oar44Q2WrcOcADqL7R8E9xhMKmWS0EQ3T3lM5D
urRtZbD6ATe9g8XWBDPEi/aERsDaZiNzfOxLvoqzsUVh+oRbpDkOhFGooEG+pGaz
OAkxSLJ4As/x0kQeTN+kEu9O9eakfx9/7F9jmzwpNFm5ydBieC6VRoG5Hvw+ting
55h0ZYwz0CW+JbN/9Rrwk3sN3HcSSyBfCpa+sUiwCoFe74PcLUYhR/bA+w20jcb3
dgqrj7Db+9OzWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:03 2026 by rpki-client