Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          jDqaiLNrJBTA1TdViV+XLTTbnLbIM/vDYHLMOSpgoDI=
Subject key identifier:   26:B8:8C:F1:66:04:DE:F7:74:F8:98:20:94:35:81:99:C7:E5:43:A8
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019CAD5A2CFC5EF06732E26D3CEBCB12D3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          06D3
Signing time:             Mon 02 Mar 2026 07:01:33 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:33 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:33 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: xBgj72D+8c77JYk9mshg3YvmAnRwp9ODpCtC1uybpkw=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:2c:fc:5e:f0:67:32:e2:6d:3c:eb:cb:12:d3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Mar  2 07:01:33 2026 GMT
            Not After : Mar  3 07:01:33 2026 GMT
        Subject: CN=26b88cf16604def774f8982094358199c7e543a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:19:93:21:9d:16:cc:0a:0a:07:35:06:2f:
                    33:7f:9a:1d:93:04:d6:db:18:05:32:f1:ed:8c:3f:
                    f0:f3:e9:dd:8e:42:43:4a:67:17:d9:5c:a2:30:f4:
                    17:39:45:9f:fa:a9:d0:a2:bb:12:29:cb:89:92:79:
                    66:80:7d:dc:cb:22:2a:10:5c:cd:73:1c:71:61:d7:
                    7f:4a:15:62:20:f2:5b:de:ab:17:60:54:21:d8:f7:
                    b8:26:90:cc:bd:98:11:1c:ec:b3:53:7a:b6:7e:f4:
                    ac:74:f8:31:f6:80:7a:78:b5:d6:71:8c:a1:04:91:
                    44:62:af:c5:3c:b0:bb:3d:a8:42:10:05:4e:d7:45:
                    d8:20:fe:db:df:6d:c8:88:41:7b:b1:d9:ca:00:d5:
                    06:c1:9e:80:3d:51:db:c8:39:99:ad:06:7f:9d:07:
                    86:ca:82:f4:f6:72:d5:c7:e3:ca:6e:9a:38:7f:20:
                    1e:98:cf:85:89:cd:a4:e4:f9:39:78:b2:c7:11:48:
                    c4:f7:ea:e6:7e:eb:bf:13:36:31:78:45:34:f9:66:
                    6e:05:7b:d8:ef:71:3c:d3:0e:b9:4a:b0:22:d4:a1:
                    c5:5a:11:78:45:7d:a1:cd:4c:64:07:a1:aa:38:9e:
                    50:f9:53:63:a4:51:38:ca:47:4f:97:a6:80:13:be:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B8:8C:F1:66:04:DE:F7:74:F8:98:20:94:35:81:99:C7:E5:43:A8
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:67:b3:1e:c3:3e:0a:cd:63:00:44:22:fc:e9:c0:01:50:
         c5:e0:7f:5c:e7:ec:8f:fa:44:fb:2c:eb:57:e6:90:3f:bf:b3:
         06:82:4c:b0:60:08:c0:9d:d4:ba:62:60:c2:77:17:8b:ab:68:
         cb:72:0c:e4:23:14:1b:b6:0d:67:10:29:45:7a:d2:a8:7d:e8:
         25:52:47:21:cb:25:4c:83:1e:71:72:51:8b:47:9f:cc:6f:66:
         09:13:c4:28:88:46:dd:bb:a7:e0:73:38:d1:9a:f4:de:51:7d:
         3f:3f:12:4b:88:7c:2c:62:39:eb:da:9c:02:97:06:e9:23:6e:
         02:90:cc:d6:a5:b2:c6:dd:85:34:6e:29:34:53:97:01:c5:c1:
         64:ff:56:40:26:2c:3b:5a:6a:a1:36:4e:d0:0b:9e:ff:44:6b:
         f5:73:11:16:8b:3f:62:35:72:55:c7:a5:60:14:0b:12:d6:af:
         65:a0:7b:da:f2:b9:fc:a0:04:9e:bb:c4:54:31:f5:c5:0d:c5:
         36:fd:1f:99:ac:56:ba:2b:23:d3:a3:95:61:51:eb:02:a5:ae:
         8a:ad:7c:f4:2b:37:6d:ef:f9:b0:5e:50:37:51:81:df:b7:6c:
         96:b7:60:3b:b5:40:b2:0c:67:90:ba:85:18:7b:22:12:52:aa:
         db:9b:1d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWiz8XvBnMuJtPOvLEtOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx
NGQzN2IwHhcNMjYwMzAyMDcwMTMzWhcNMjYwMzAzMDcwMTMzWjAzMTEwLwYDVQQD
EygyNmI4OGNmMTY2MDRkZWY3NzRmODk4MjA5NDM1ODE5OWM3ZTU0M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQZkyGdFswKCgc1Bi8zf5odkwTW
2xgFMvHtjD/w8+ndjkJDSmcX2VyiMPQXOUWf+qnQorsSKcuJknlmgH3cyyIqEFzN
cxxxYdd/ShViIPJb3qsXYFQh2Pe4JpDMvZgRHOyzU3q2fvSsdPgx9oB6eLXWcYyh
BJFEYq/FPLC7PahCEAVO10XYIP7b323IiEF7sdnKANUGwZ6APVHbyDmZrQZ/nQeG
yoL09nLVx+PKbpo4fyAemM+Fic2k5Pk5eLLHEUjE9+rmfuu/EzYxeEU0+WZuBXvY
73E80w65SrAi1KHFWhF4RX2hzUxkB6GqOJ5Q+VNjpFE4ykdPl6aAE75OxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa4jPFmBN73dPiYIJQ1gZnH5UOoMB8GA1UdIwQY
MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt
MmRkNmUxMTEzZjM0LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0
LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+hnsx7D
PgrNYwBEIvzpwAFQxeB/XOfsj/pE+yzrV+aQP7+zBoJMsGAIwJ3UumJgwncXi6to
y3IM5CMUG7YNZxApRXrSqH3oJVJHIcslTIMecXJRi0efzG9mCRPEKIhG3bun4HM4
0Zr03lF9Pz8SS4h8LGI569qcApcG6SNuApDM1qWyxt2FNG4pNFOXAcXBZP9WQCYs
O1pqoTZO0Aue/0Rr9XMRFos/YjVyVcelYBQLEtavZaB72vK5/KAEnrvEVDH1xQ3F
Nv0fmaxWuisj06OVYVHrAqWuiq189Cs3be/5sF5QN1GB37dslrdgO7VAsgxnkLqF
GHsiElKq25sdcQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:01 2026 by rpki-client