Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          H/pbMe1xPWNiEbJICxtuAnqdPVcdOm5DTgHWqQrcWwg=
Subject key identifier:   6B:6D:0F:89:59:82:61:D3:FF:54:89:50:A9:B8:58:06:95:67:0A:39
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       019CAB6B6067932DABED283C70038D2BE184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          0A6C
Signing time:             Sun 01 Mar 2026 22:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:06 +0000
Files and hashes:         1: h0udnEUnZF4CgPhVM04ofBmSvzQ.roa (hash: 86Ue2QRslfOBTNicHKV9wxjZDnUc41ToAUPvqZQH7cs=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: mnZBXNtbESANEOyuhwAlvCpSkltmS3T7MDx2DgDIwQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:60:67:93:2d:ab:ed:28:3c:70:03:8d:2b:e1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Mar  1 22:01:06 2026 GMT
            Not After : Mar  2 22:01:06 2026 GMT
        Subject: CN=6b6d0f89598261d3ff548950a9b8580695670a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:ad:fb:c1:8f:71:2d:e8:37:1e:a9:1f:3b:
                    ea:9e:0d:f6:9f:74:cf:48:81:27:53:6b:49:f0:00:
                    e3:ae:60:ce:4a:82:9d:68:1d:9d:3f:36:c4:b1:b9:
                    7c:b7:76:86:aa:32:0c:f3:d7:67:7f:c8:86:c8:c7:
                    0d:b0:eb:67:cd:2d:1f:d5:d7:51:58:09:c7:ad:08:
                    d6:d0:74:f8:1c:81:f2:a2:6b:3c:38:63:fe:06:db:
                    51:ec:c5:ef:9b:0c:cd:54:22:8a:1c:46:01:69:d0:
                    08:43:c5:25:b6:d0:cb:ec:fa:fe:cd:8e:2d:18:be:
                    c0:50:5a:07:d6:27:95:7b:10:bc:30:cb:08:17:42:
                    e0:be:38:5e:6f:38:a7:02:ea:05:60:c9:b1:d4:5b:
                    86:c0:43:14:65:07:25:ba:fe:51:32:a7:ba:cc:94:
                    ba:6f:e9:38:37:81:b1:ed:70:bb:da:f6:bb:8a:fa:
                    89:1b:66:b7:a3:0f:e1:be:af:95:b7:f8:68:96:09:
                    c7:5e:f9:b6:01:52:03:2d:ae:03:7e:14:86:5b:42:
                    af:56:f8:3a:b1:16:18:e0:f8:f8:02:24:d6:24:6f:
                    fa:e7:c4:ba:c0:31:95:08:07:06:de:53:89:10:b7:
                    7d:cd:2d:8c:48:1f:25:ab:bd:01:66:a3:8a:b7:9f:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:0F:89:59:82:61:D3:FF:54:89:50:A9:B8:58:06:95:67:0A:39
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:f7:37:18:2f:23:da:c4:41:a2:e3:9f:ae:45:b4:f4:71:
         d7:64:1e:e1:27:37:93:63:a4:9c:13:99:dd:f3:fb:88:2d:2b:
         c8:1f:b9:16:51:65:28:1a:e2:05:ba:67:ed:5d:e1:5d:b6:71:
         cc:4d:54:64:30:38:c6:de:61:a9:59:71:b6:82:55:bf:14:51:
         51:38:58:db:20:94:14:b4:b2:8b:46:27:95:42:04:64:61:b1:
         d7:56:b8:3d:bb:86:02:cb:45:79:92:00:f6:fa:5f:0d:be:41:
         e5:69:4c:d4:90:ba:f3:c4:cf:d0:50:e9:f9:7f:cf:69:14:4c:
         34:39:94:d5:33:42:52:65:d3:fd:80:1b:69:92:61:04:bb:3f:
         1d:25:39:d4:bd:cd:b7:45:ab:f8:b0:c9:fe:1a:32:60:b5:5f:
         99:b9:6f:66:39:70:c7:9c:f0:3b:c0:38:e5:40:b0:9a:cf:5a:
         1a:ff:9b:d5:3b:59:bc:3c:a9:fa:f5:99:d1:5a:45:3f:0f:f6:
         bc:fe:29:59:9d:1d:58:12:38:ca:a8:d3:36:55:d4:d2:88:71:
         a3:3b:11:49:9f:7f:43:ea:03:be:c2:e0:85:bb:02:13:69:8b:
         0d:5c:37:2d:35:ae:4a:3e:77:8a:f6:86:1f:52:94:4e:a7:16:
         1c:dc:5e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2Bnky2r7Sg8cAONK+GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGY3ZmM4ODNjOWQ1ZTAyMzFhNTg1YjBhZTEzOWU3ODY1
NDNiYjYwHhcNMjYwMzAxMjIwMTA2WhcNMjYwMzAyMjIwMTA2WjAzMTEwLwYDVQQD
Eyg2YjZkMGY4OTU5ODI2MWQzZmY1NDg5NTBhOWI4NTgwNjk1NjcwYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOOt+8GPcS3oNx6pHzvqng32n3TP
SIEnU2tJ8ADjrmDOSoKdaB2dPzbEsbl8t3aGqjIM89dnf8iGyMcNsOtnzS0f1ddR
WAnHrQjW0HT4HIHyoms8OGP+BttR7MXvmwzNVCKKHEYBadAIQ8UlttDL7Pr+zY4t
GL7AUFoH1ieVexC8MMsIF0LgvjhebzinAuoFYMmx1FuGwEMUZQcluv5RMqe6zJS6
b+k4N4Gx7XC72va7ivqJG2a3ow/hvq+Vt/holgnHXvm2AVIDLa4DfhSGW0KvVvg6
sRYY4Pj4AiTWJG/658S6wDGVCAcG3lOJELd9zS2MSB8lq70BZqOKt5+ZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGttD4lZgmHT/1SJUKm4WAaVZwo5MB8GA1UdIwQY
MBaAFMBPf8iDydXgIxpYWwrhOeeGVDu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAt
OTg0ZTgyZDRiODA2LzEvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAtOTg0ZTgyZDRiODA2
LzEvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIT3Nxgv
I9rEQaLjn65FtPRx12Qe4Sc3k2OknBOZ3fP7iC0ryB+5FlFlKBriBbpn7V3hXbZx
zE1UZDA4xt5hqVlxtoJVvxRRUThY2yCUFLSyi0YnlUIEZGGx11a4PbuGAstFeZIA
9vpfDb5B5WlM1JC688TP0FDp+X/PaRRMNDmU1TNCUmXT/YAbaZJhBLs/HSU51L3N
t0Wr+LDJ/hoyYLVfmblvZjlwx5zwO8A45UCwms9aGv+b1TtZvDyp+vWZ0VpFPw/2
vP4pWZ0dWBI4yqjTNlXU0ohxozsRSZ9/Q+oDvsLghbsCE2mLDVw3LTWuSj53ivaG
H1KUTqcWHNxeGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:03 2026 by rpki-client