Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          yXbKMpqQlxfcKiZdAIB8cSv6yLa6kSEGMQyiLYPf7Sw=
Subject key identifier:   0E:48:32:F7:C6:70:47:17:C2:D7:59:B8:B3:6B:E0:93:5F:3A:F3:5F
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019CAC7E344087EAB9BCE60216B34C0F5749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          031D
Signing time:             Mon 02 Mar 2026 03:01:17 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:17 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:17 +0000
Files and hashes:         1: 0NDgQCvqhryncNsEQEFvwSr_y0M.roa (hash: LF2EyUV4OIlA7LZWcGa2EYYOsJUgAR1OHjq6qtxDlCo=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: JGbjkpLLN5cDgoN5j1Z8PCvu943j8kSoQy7L2QKErms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:34:40:87:ea:b9:bc:e6:02:16:b3:4c:0f:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Mar  2 03:01:17 2026 GMT
            Not After : Mar  3 03:01:17 2026 GMT
        Subject: CN=0e4832f7c6704717c2d759b8b36be0935f3af35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:42:48:c5:27:66:65:a1:f9:b5:df:fd:83:
                    c4:8f:1f:bd:50:4c:07:09:12:85:58:02:39:f9:36:
                    d3:64:00:a3:f3:9b:46:19:80:b4:84:24:8f:4c:e2:
                    2c:95:24:42:18:fc:37:2e:5f:44:24:95:af:e7:82:
                    3e:5c:91:f3:4b:a7:db:a4:81:44:af:2c:07:e1:02:
                    e5:e8:9a:e9:b4:bd:36:7f:21:df:19:c3:96:b0:d8:
                    2e:da:ef:2a:68:a9:64:26:e5:24:de:eb:81:51:d6:
                    7c:d3:a9:2b:71:a3:2b:8a:5c:93:c5:eb:7b:5d:b2:
                    b2:33:73:ce:b4:d2:dd:d6:9a:e8:83:09:c7:ae:d4:
                    77:25:7d:b3:61:0e:ca:8e:5b:bf:04:e2:a1:81:2a:
                    b1:53:21:00:ef:d9:53:fa:28:59:e5:d5:80:61:39:
                    bd:21:d6:c9:1f:06:d5:dd:f2:85:b0:0a:fc:7d:9e:
                    d6:db:64:8d:33:bf:e0:4b:07:fc:54:89:22:b3:bd:
                    48:e6:0a:23:88:ea:0d:cc:bc:cb:1b:36:54:71:42:
                    3e:b2:9b:96:f2:e1:80:8d:1e:8b:1f:1f:85:d6:17:
                    d9:cf:c9:b6:7d:a7:dc:77:20:66:0f:76:0f:70:32:
                    3d:4b:6a:e6:66:69:15:4f:2c:13:57:17:b2:a6:9e:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:48:32:F7:C6:70:47:17:C2:D7:59:B8:B3:6B:E0:93:5F:3A:F3:5F
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:e0:62:f9:82:4e:32:83:18:61:82:cc:47:d2:36:21:08:
         3f:1b:05:a0:a0:52:9f:da:5d:1d:30:4e:39:f5:ef:cc:e5:aa:
         e7:15:cc:46:b1:64:6a:7b:e1:e8:25:5f:e0:d1:8b:3e:70:ab:
         0b:0c:18:5f:6e:d6:65:e2:d4:1b:5f:9f:5a:36:cc:e0:00:1d:
         60:06:4b:51:4e:dc:35:66:21:20:7c:9e:2f:36:b8:e2:f2:6d:
         27:cb:c2:4e:4f:07:76:30:26:ef:ba:86:bf:44:b5:3d:5b:57:
         3c:35:25:ab:7a:76:2a:53:95:15:0b:62:06:70:09:d3:68:8d:
         18:e5:26:2a:97:60:30:06:21:12:33:ab:7f:bd:cb:b5:56:77:
         17:a7:88:48:7c:f2:81:97:2d:c1:86:8d:93:6c:ec:75:28:d3:
         54:36:df:4c:47:f8:c7:ee:77:a0:c6:80:75:c5:19:a6:b9:14:
         f8:e9:6a:ba:52:71:5a:34:e9:f9:95:f1:f1:2a:1d:c6:35:a4:
         f7:29:7c:e5:2c:77:69:0b:81:fa:8f:15:d6:b7:89:e7:fd:f0:
         d6:a4:4d:77:b3:d8:cd:cc:08:a5:87:b4:0f:f5:87:c1:26:a8:
         f6:eb:e1:9f:7c:09:7d:d0:fa:92:6f:ea:d5:bb:25:86:2f:f3:
         bc:d2:0c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfjRAh+q5vOYCFrNMD1dJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWJmZWUxZDdjOGNjODc2MDczMzMzYzRjYWE4ODFhMzdi
MzZjOTEwHhcNMjYwMzAyMDMwMTE3WhcNMjYwMzAzMDMwMTE3WjAzMTEwLwYDVQQD
EygwZTQ4MzJmN2M2NzA0NzE3YzJkNzU5YjhiMzZiZTA5MzVmM2FmMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg5CSMUnZmWh+bXf/YPEjx+9UEwH
CRKFWAI5+TbTZACj85tGGYC0hCSPTOIslSRCGPw3Ll9EJJWv54I+XJHzS6fbpIFE
rywH4QLl6JrptL02fyHfGcOWsNgu2u8qaKlkJuUk3uuBUdZ806krcaMrilyTxet7
XbKyM3POtNLd1progwnHrtR3JX2zYQ7Kjlu/BOKhgSqxUyEA79lT+ihZ5dWAYTm9
IdbJHwbV3fKFsAr8fZ7W22SNM7/gSwf8VIkis71I5gojiOoNzLzLGzZUcUI+spuW
8uGAjR6LHx+F1hfZz8m2fafcdyBmD3YPcDI9S2rmZmkVTywTVxeypp4ORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5IMvfGcEcXwtdZuLNr4JNfOvNfMB8GA1UdIwQY
MBaAFOqr/uHXyMyHYHMzPEyqiBo3s2yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAt
YjdjZDUyNzAzZThkLzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAtYjdjZDUyNzAzZThk
LzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9bgYvmC
TjKDGGGCzEfSNiEIPxsFoKBSn9pdHTBOOfXvzOWq5xXMRrFkanvh6CVf4NGLPnCr
CwwYX27WZeLUG1+fWjbM4AAdYAZLUU7cNWYhIHyeLza44vJtJ8vCTk8HdjAm77qG
v0S1PVtXPDUlq3p2KlOVFQtiBnAJ02iNGOUmKpdgMAYhEjOrf73LtVZ3F6eISHzy
gZctwYaNk2zsdSjTVDbfTEf4x+53oMaAdcUZprkU+OlqulJxWjTp+ZXx8SodxjWk
9yl85Sx3aQuB+o8V1reJ5/3w1qRNd7PYzcwIpYe0D/WHwSao9uvhn3wJfdD6km/q
1bslhi/zvNIMcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:05 2026 by rpki-client