Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File:                     6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier:          SqL8gv/enKY0ECwcgq1CdmBkT0VZn2gMYJqS2cXlO3c=
Subject key identifier:   94:83:3F:D6:3C:9C:5F:06:F0:9A:B2:98:C2:CC:E5:98:B5:6C:52:0C
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer:       /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial:       019CAC7E431493226C58936C075CE578C2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number:          110A
Signing time:             Mon 02 Mar 2026 03:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:21 +0000
Files and hashes:         1: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: r9CQNYzvyZV6/VbNzlADJYHbFKG/OCb07RiduJXb2f8=)
                          2: zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa (hash: IrlQd0d+Fguubk4wbis1+hKRc8zFTkF2CICSp+JnthA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:43:14:93:22:6c:58:93:6c:07:5c:e5:78:c2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
        Validity
            Not Before: Mar  2 03:01:21 2026 GMT
            Not After : Mar  3 03:01:21 2026 GMT
        Subject: CN=94833fd63c9c5f06f09ab298c2cce598b56c520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:58:8c:16:b5:d0:bd:aa:46:4e:d5:73:35:
                    e8:df:2a:3c:bd:9f:e3:24:3f:fe:8e:b5:97:88:09:
                    f0:bd:60:8b:de:77:56:97:28:f4:4d:25:e4:6e:81:
                    70:e2:5d:19:63:01:58:78:72:ec:f9:00:3f:71:e9:
                    2d:c8:9c:3c:55:24:4b:f7:35:1c:ee:6b:4c:73:82:
                    cd:ea:0a:36:73:20:80:5c:e9:43:fb:12:07:7a:be:
                    2e:9f:68:91:b0:2d:a7:f1:12:54:5a:5f:55:4f:92:
                    f0:ae:31:09:29:13:ef:16:8e:ae:aa:2a:e6:c4:3b:
                    41:24:d7:9e:ea:7e:c5:91:95:83:78:63:9e:68:c8:
                    28:29:3a:19:43:33:16:f2:75:af:b4:45:e1:c5:3a:
                    2d:6e:66:99:81:7d:98:14:00:37:bf:9e:42:08:55:
                    b8:77:4d:e2:b0:bf:98:0c:9a:7d:d3:0f:8b:80:c8:
                    2a:f4:40:4d:93:e6:e8:c3:9b:8e:2f:2e:1f:2b:e1:
                    07:75:71:f5:88:d8:93:2f:e9:28:85:a4:6b:f9:5a:
                    4d:7c:06:25:0f:f7:63:a7:a6:73:55:54:eb:59:16:
                    8c:d1:37:0b:3b:7d:80:05:12:61:2d:a1:c1:bc:63:
                    33:43:24:94:95:3d:62:65:67:b1:c2:91:24:f4:43:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:3F:D6:3C:9C:5F:06:F0:9A:B2:98:C2:CC:E5:98:B5:6C:52:0C
            X509v3 Authority Key Identifier:
                keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:28:0a:ce:dc:cd:25:6d:a7:f7:e9:ec:da:5a:17:44:db:
         9a:27:ff:7d:b1:21:7c:1e:31:cb:74:d5:13:4c:88:57:e5:63:
         0b:54:9b:01:bd:e1:c5:a8:04:04:06:8f:82:fa:22:1d:67:c1:
         bc:f9:f4:4f:b1:de:50:0e:ec:32:9d:4f:7a:67:06:3f:47:bf:
         b1:d4:81:23:31:43:cf:ab:6a:2b:31:50:98:50:2c:3b:c9:2b:
         7a:00:d3:90:8a:97:5b:a0:6b:0b:f5:25:60:11:81:b1:a1:59:
         8e:90:55:33:59:7a:b0:a4:d4:6a:90:be:88:0c:25:ba:18:14:
         70:a0:f6:74:e0:40:a0:7f:33:b1:cd:03:5b:31:81:d8:c5:20:
         0f:f1:cf:c9:bd:ee:9b:3b:92:3b:73:fe:7a:5f:ca:2d:ed:16:
         82:d2:59:0c:33:04:67:26:b9:c5:54:65:6b:f5:09:7f:fc:ad:
         af:d0:be:ba:c9:c1:0e:67:87:0b:b9:44:1a:d5:f0:a5:6a:f5:
         40:52:c6:ed:fa:31:6a:e6:87:37:b7:2c:bf:b3:61:99:2d:11:
         8c:e8:15:bb:f4:f6:43:72:d6:e6:c3:f6:e2:d2:31:6d:c3:6f:
         8d:f1:c9:47:45:18:2c:c3:81:14:03:72:cc:ec:2e:c3:8d:8e:
         22:c7:8b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfkMUkyJsWJNsB1zleMLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4
NGNmZWEwHhcNMjYwMzAyMDMwMTIxWhcNMjYwMzAzMDMwMTIxWjAzMTEwLwYDVQQD
Eyg5NDgzM2ZkNjNjOWM1ZjA2ZjA5YWIyOThjMmNjZTU5OGI1NmM1MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvxYjBa10L2qRk7VczXo3yo8vZ/j
JD/+jrWXiAnwvWCL3ndWlyj0TSXkboFw4l0ZYwFYeHLs+QA/cektyJw8VSRL9zUc
7mtMc4LN6go2cyCAXOlD+xIHer4un2iRsC2n8RJUWl9VT5LwrjEJKRPvFo6uqirm
xDtBJNee6n7FkZWDeGOeaMgoKToZQzMW8nWvtEXhxTotbmaZgX2YFAA3v55CCFW4
d03isL+YDJp90w+LgMgq9EBNk+bow5uOLy4fK+EHdXH1iNiTL+kohaRr+VpNfAYl
D/djp6ZzVVTrWRaM0TcLO32ABRJhLaHBvGMzQySUlT1iZWexwpEk9EMuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSDP9Y8nF8G8JqymMLM5Zi1bFIMMB8GA1UdIwQY
MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt
NTExMGY2YjU3OWJmLzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm
LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq0oCs7c
zSVtp/fp7NpaF0Tbmif/fbEhfB4xy3TVE0yIV+VjC1SbAb3hxagEBAaPgvoiHWfB
vPn0T7HeUA7sMp1PemcGP0e/sdSBIzFDz6tqKzFQmFAsO8kregDTkIqXW6BrC/Ul
YBGBsaFZjpBVM1l6sKTUapC+iAwluhgUcKD2dOBAoH8zsc0DWzGB2MUgD/HPyb3u
mzuSO3P+el/KLe0WgtJZDDMEZya5xVRla/UJf/ytr9C+usnBDmeHC7lEGtXwpWr1
QFLG7foxauaHN7csv7NhmS0RjOgVu/T2Q3LW5sP24tIxbcNvjfHJR0UYLMOBFANy
zOwuw42OIseLew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:10 2026 by rpki-client