Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
File:                     6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json)
Hash identifier:          das2gp83N8OpdR8Gs9eSNewDTtoS0RWdT3DY6nqZpd4=
Subject key identifier:   A4:C9:30:31:23:45:5C:E9:F9:E5:25:86:59:7A:B7:9E:B4:8C:F1:DA
Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22
Certificate issuer:       /CN=eab05011722d25c1249e658b2caecc118c29e822
Certificate serial:       019CAB34769F2F578A7C6BF4C21F3E055B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
Manifest number:          05C4
Signing time:             Sun 01 Mar 2026 21:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:08 +0000
Files and hashes:         1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: IBFiKgIuXTUYMl0S16s4jTSUy/FSJqYkIHKpYa/d+xc=)
                          2: _qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa (hash: V/uLoxzhE1hWseFAoWyuM6fnZrTDKbUDkcDJrITCvlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:76:9f:2f:57:8a:7c:6b:f4:c2:1f:3e:05:5b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822
        Validity
            Not Before: Mar  1 21:01:08 2026 GMT
            Not After : Mar  2 21:01:08 2026 GMT
        Subject: CN=a4c9303123455ce9f9e52586597ab79eb48cf1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:a8:e7:b2:71:5c:ff:37:91:63:19:29:f6:
                    c9:34:3d:69:10:ed:e9:b2:fa:67:12:2f:40:6e:47:
                    3b:8e:55:0f:51:25:e8:e8:a4:5b:d3:bc:4b:c5:a4:
                    c8:e9:f3:f2:a3:b8:b6:1a:88:e3:5d:ea:94:d3:de:
                    df:2b:0f:97:cf:e5:5e:31:d6:14:53:c0:93:50:1f:
                    aa:cb:71:db:a7:26:1a:16:1d:73:28:89:c1:7f:e4:
                    88:14:d9:fd:57:73:40:8a:27:bf:2a:0a:06:b6:15:
                    11:03:de:4b:d9:5a:93:d6:00:5c:31:13:a5:0a:a9:
                    bd:e6:a5:7e:cd:36:00:26:ef:37:b0:13:ec:45:40:
                    1a:de:55:6b:0c:b3:dd:50:e6:62:33:bd:ca:6f:ca:
                    c1:bd:4c:9a:6a:72:1c:08:23:fb:a9:a4:1d:c9:82:
                    fe:3a:a4:65:46:45:13:96:2f:d7:86:74:4f:db:b3:
                    e4:37:fa:ff:ec:29:0e:92:b6:df:9c:09:4a:57:86:
                    8b:7c:ca:78:09:ac:95:a0:04:27:35:04:f9:80:d8:
                    e8:e0:4f:9b:60:6a:e4:86:26:56:b6:97:62:64:7f:
                    22:ba:69:e4:e8:b8:1d:0b:7e:d4:27:cc:2d:91:9e:
                    b6:43:0c:fe:62:83:fb:6d:a5:60:a2:06:d6:3f:cd:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:30:31:23:45:5C:E9:F9:E5:25:86:59:7A:B7:9E:B4:8C:F1:DA
            X509v3 Authority Key Identifier:
                keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:78:1a:5e:3c:2b:bd:07:dd:08:9b:d7:ca:f2:98:b3:63:a6:
         e0:f9:5a:52:19:58:b5:7e:72:03:e7:f7:69:1e:40:8f:66:76:
         a3:87:24:34:55:0f:56:b5:ed:5d:91:33:bf:c6:73:07:f9:ff:
         f4:66:80:3d:a1:a3:05:cf:6e:e0:da:c7:b4:67:7e:bb:df:e1:
         1d:09:14:60:7d:74:9c:88:0c:9c:a2:d7:6a:cc:f8:c1:69:13:
         f4:c4:9c:8b:e0:bc:c6:a3:56:19:0d:b2:6e:9b:61:9a:49:c4:
         3c:b3:0c:76:dc:99:a5:23:68:89:60:31:db:eb:79:c4:bf:a8:
         05:ba:a6:40:46:97:20:3a:9d:40:9a:80:08:7e:fd:57:6d:1e:
         7f:36:c0:6a:d9:2d:a1:ab:53:e2:d7:9a:92:bd:86:1e:5d:05:
         43:53:b7:39:4d:e5:0a:d5:d3:52:3f:fd:90:11:c8:31:5e:dc:
         c2:67:7a:ad:6e:26:1b:3c:fc:7c:f1:e8:65:3f:e5:3b:5e:bd:
         62:06:a4:de:02:29:9d:25:af:92:7f:c6:c2:d4:5b:a2:1f:e8:
         a7:32:2b:08:96:b8:34:1a:61:ad:14:71:44:a4:93:4f:a5:49:
         be:85:96:89:70:cf:51:d4:86:c3:dc:01:d1:fb:2a:54:db:cf:
         87:13:25:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNHafL1eKfGv0wh8+BVtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjA1MDExNzIyZDI1YzEyNDllNjU4YjJjYWVjYzExOGMy
OWU4MjIwHhcNMjYwMzAxMjEwMTA4WhcNMjYwMzAyMjEwMTA4WjAzMTEwLwYDVQQD
EyhhNGM5MzAzMTIzNDU1Y2U5ZjllNTI1ODY1OTdhYjc5ZWI0OGNmMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNeo57JxXP83kWMZKfbJND1pEO3p
svpnEi9Abkc7jlUPUSXo6KRb07xLxaTI6fPyo7i2GojjXeqU097fKw+Xz+VeMdYU
U8CTUB+qy3HbpyYaFh1zKInBf+SIFNn9V3NAiie/KgoGthURA95L2VqT1gBcMROl
Cqm95qV+zTYAJu83sBPsRUAa3lVrDLPdUOZiM73Kb8rBvUyaanIcCCP7qaQdyYL+
OqRlRkUTli/XhnRP27PkN/r/7CkOkrbfnAlKV4aLfMp4CayVoAQnNQT5gNjo4E+b
YGrkhiZWtpdiZH8iumnk6LgdC37UJ8wtkZ62Qwz+YoP7baVgogbWP82efwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTJMDEjRVzp+eUlhll6t560jPHaMB8GA1UdIwQY
MBaAFOqwUBFyLSXBJJ5liyyuzBGMKegiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDct
N2RiOGY4MTZkMDc3LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDctN2RiOGY4MTZkMDc3
LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHgaXjwr
vQfdCJvXyvKYs2Om4PlaUhlYtX5yA+f3aR5Aj2Z2o4ckNFUPVrXtXZEzv8ZzB/n/
9GaAPaGjBc9u4NrHtGd+u9/hHQkUYH10nIgMnKLXasz4wWkT9MSci+C8xqNWGQ2y
bpthmknEPLMMdtyZpSNoiWAx2+t5xL+oBbqmQEaXIDqdQJqACH79V20efzbAatkt
oatT4teakr2GHl0FQ1O3OU3lCtXTUj/9kBHIMV7cwmd6rW4mGzz8fPHoZT/lO169
Ygak3gIpnSWvkn/GwtRboh/opzIrCJa4NBphrRRxRKSTT6VJvoWWiXDPUdSGw9wB
0fsqVNvPhxMlSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:57 2026 by rpki-client