Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File:                     eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier:          Q0S1pvEPE1bP44RR9yga00w4DDd1EmsuskSKrNMBs64=
Subject key identifier:   73:D2:33:3A:27:64:96:35:F4:B4:67:11:A6:C1:42:F5:14:43:E4:ED
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       019CAA214C7081093C82022B6882EFB0DF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number:          6A
Signing time:             Sun 01 Mar 2026 16:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:34 +0000
Files and hashes:         1: W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa (hash: tgVo7GEFMdcLKeWoqIyQC9dBMhmbDoLL5DmLM5lP/iU=)
                          2: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: Xb6WrFzU5IgBaODRiytyRgQd5HYdAgQW9+zHLtsI1fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:4c:70:81:09:3c:82:02:2b:68:82:ef:b0:df:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Mar  1 16:00:34 2026 GMT
            Not After : Mar  2 16:00:34 2026 GMT
        Subject: CN=73d2333a27649635f4b46711a6c142f51443e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:d8:2d:ad:89:ff:27:26:16:55:dc:0b:43:
                    84:7f:86:8f:0d:d0:bf:24:b4:70:de:ed:60:88:36:
                    1d:45:7f:21:ce:0d:ff:ac:44:f7:a5:ea:41:cc:35:
                    8a:b5:45:df:0a:93:a1:d9:25:83:8f:d1:b7:fa:44:
                    8d:69:3a:34:91:3c:10:01:07:96:57:a2:05:71:7a:
                    eb:ce:54:38:71:55:b6:60:f3:1c:8b:74:c2:8d:d6:
                    49:50:9c:a0:b5:f7:52:1b:e8:cc:0b:0f:c3:49:6e:
                    d8:56:d7:3f:9a:8c:0d:14:0b:83:26:86:1d:3e:8e:
                    9e:4c:f7:7f:a4:f7:6a:9b:21:0b:5c:4e:23:79:78:
                    5b:7b:05:4b:e1:d0:0a:d5:96:65:2e:12:b0:f3:2a:
                    e5:e4:68:37:4f:2a:b4:cf:6b:92:0e:4b:79:23:bb:
                    de:0e:fe:29:f8:e4:3a:11:25:46:af:50:37:5a:2b:
                    a1:76:03:5c:44:a1:55:26:06:20:00:ec:cd:20:a5:
                    a6:eb:81:24:d8:93:89:68:e9:fd:91:cf:60:7e:61:
                    56:43:8f:2a:14:92:74:ff:d2:6b:4d:52:50:ba:b5:
                    73:f1:c2:37:38:e8:60:e9:19:6a:c5:cb:b9:8e:c9:
                    ee:63:07:fc:7f:1f:e5:3c:0e:39:8a:e1:c0:02:90:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:33:3A:27:64:96:35:F4:B4:67:11:A6:C1:42:F5:14:43:E4:ED
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:48:28:07:b2:4a:24:68:10:b5:8a:28:8e:4f:c0:ff:b8:
         22:64:d6:ec:eb:85:d8:2c:65:8d:25:28:99:da:4e:89:3a:dc:
         1f:9a:f4:87:f0:35:cc:57:b0:99:36:e0:64:59:f7:34:de:81:
         a3:0f:67:da:1f:33:92:c5:43:cb:75:69:3d:90:8f:17:a0:19:
         f1:73:88:dc:19:de:ca:a2:39:32:71:83:38:43:77:a8:d7:bb:
         98:63:20:66:4b:f8:44:01:90:a9:47:af:8e:86:18:25:91:34:
         a8:33:a1:a4:c1:0c:ba:ee:9d:e2:3b:bf:2a:e4:19:3f:70:10:
         ef:90:35:85:3c:2c:1d:f0:17:15:58:d7:c9:b2:4b:9a:6c:ef:
         da:af:40:a4:c5:28:09:ac:66:3e:61:22:6b:15:67:e3:3a:f5:
         12:70:e3:63:50:85:4c:33:03:73:dd:5f:74:e7:1b:8e:0c:cc:
         27:94:38:bf:52:e7:8f:02:ee:d3:e8:b3:5c:54:d0:91:00:f3:
         35:0a:e7:d7:b7:fd:46:5b:67:6b:5b:7c:6d:53:5f:f0:82:ae:
         35:81:17:3f:1a:7c:fd:f5:4a:c7:a0:d5:6d:c6:bc:76:98:46:
         10:a8:9e:17:1c:e2:58:93:28:f4:05:63:f8:1a:a7:77:7a:71:
         11:67:b9:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUxwgQk8ggIraILvsN8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODViY2JkZGMwYmU3YjFiZGRhMzZhYzlmMGNlYzQyN2Yx
MzdiMmUwHhcNMjYwMzAxMTYwMDM0WhcNMjYwMzAyMTYwMDM0WjAzMTEwLwYDVQQD
Eyg3M2QyMzMzYTI3NjQ5NjM1ZjRiNDY3MTFhNmMxNDJmNTE0NDNlNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWPYLa2J/ycmFlXcC0OEf4aPDdC/
JLRw3u1giDYdRX8hzg3/rET3pepBzDWKtUXfCpOh2SWDj9G3+kSNaTo0kTwQAQeW
V6IFcXrrzlQ4cVW2YPMci3TCjdZJUJygtfdSG+jMCw/DSW7YVtc/mowNFAuDJoYd
Po6eTPd/pPdqmyELXE4jeXhbewVL4dAK1ZZlLhKw8yrl5Gg3Tyq0z2uSDkt5I7ve
Dv4p+OQ6ESVGr1A3WiuhdgNcRKFVJgYgAOzNIKWm64Ek2JOJaOn9kc9gfmFWQ48q
FJJ0/9JrTVJQurVz8cI3OOhg6Rlqxcu5jsnuYwf8fx/lPA45iuHAApBCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPSMzonZJY19LRnEabBQvUUQ+TtMB8GA1UdIwQY
MBaAFHiFvL3cC+exvdo2rJ8M7EJ/E3suMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2Qt
NGZjN2I2YzdhNGMyLzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2QtNGZjN2I2YzdhNGMy
LzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ5IKAey
SiRoELWKKI5PwP+4ImTW7OuF2CxljSUomdpOiTrcH5r0h/A1zFewmTbgZFn3NN6B
ow9n2h8zksVDy3VpPZCPF6AZ8XOI3BneyqI5MnGDOEN3qNe7mGMgZkv4RAGQqUev
joYYJZE0qDOhpMEMuu6d4ju/KuQZP3AQ75A1hTwsHfAXFVjXybJLmmzv2q9ApMUo
CaxmPmEiaxVn4zr1EnDjY1CFTDMDc91fdOcbjgzMJ5Q4v1LnjwLu0+izXFTQkQDz
NQrn17f9Rltna1t8bVNf8IKuNYEXPxp8/fVKx6DVbca8dphGEKieFxziWJMo9AVj
+Bqnd3pxEWe50g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:49 2026 by rpki-client