Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          a5yPytrGi6fcgRyocL/USmxsrPAesHWYaUhI3lnvYek=
Subject key identifier:   16:09:35:D3:1A:52:80:3C:27:3F:7B:FF:C4:AB:1F:3D:78:28:CC:51
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       019CA9EB41CFB7C914FD109F25E3CCFB4DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0F22
Signing time:             Sun 01 Mar 2026 15:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:33 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: AdDcHMPeLdHghYLbt7wQwn2pzNFHYBsO/o3LW+MC9L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:41:cf:b7:c9:14:fd:10:9f:25:e3:cc:fb:4d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Mar  1 15:01:33 2026 GMT
            Not After : Mar  2 15:01:33 2026 GMT
        Subject: CN=160935d31a52803c273f7bffc4ab1f3d7828cc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:cd:75:22:7b:7b:5e:68:86:61:6f:a6:de:
                    56:08:40:a9:06:26:27:6f:d9:66:92:90:e4:95:ce:
                    d3:ba:e8:e0:d5:a2:5b:36:13:a8:bb:11:45:e7:7a:
                    5a:2f:6f:c4:8e:19:31:6c:a4:0d:fd:44:52:48:00:
                    a9:ed:99:c2:89:87:a5:5d:13:fe:b1:08:8f:89:d5:
                    67:44:1a:91:ba:a7:db:95:60:d9:1f:12:44:bd:fb:
                    0f:54:6c:2d:3b:82:a9:26:b3:95:fa:e3:2e:89:1b:
                    3d:60:a5:9d:1f:37:99:cb:35:37:75:43:cd:0e:b2:
                    dc:68:d0:81:6b:ab:fc:a3:8f:1e:94:b9:cc:a0:4a:
                    71:54:8b:e7:43:71:67:7a:59:7d:ab:e3:d0:74:78:
                    59:c7:2d:d8:63:37:7a:b2:79:79:1c:dc:a7:46:3b:
                    a1:76:a2:30:a6:94:7c:b5:c7:e7:bb:fc:28:cb:f4:
                    8c:e7:e0:b9:8c:b6:d1:cb:55:2f:6d:27:5c:88:e1:
                    1f:da:99:b7:e7:33:2a:e9:75:76:5c:5b:68:10:9c:
                    3d:a2:af:f2:67:4d:f0:67:24:2c:31:32:65:59:b5:
                    d8:e2:f4:39:96:b0:9a:e5:2d:7b:9a:75:d2:fa:74:
                    40:ef:c2:8a:1e:2f:39:01:b7:b7:ec:71:d4:18:60:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:35:D3:1A:52:80:3C:27:3F:7B:FF:C4:AB:1F:3D:78:28:CC:51
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fb:8a:39:73:14:8b:64:3c:73:9d:bc:48:1a:99:34:27:68:
         5f:90:fb:36:c0:69:36:43:89:55:e1:18:4d:e5:4d:71:63:15:
         63:3d:2b:f4:33:4e:d0:0b:eb:e6:58:f5:12:24:41:3c:cc:e7:
         5a:d9:a3:a5:04:58:22:17:40:7f:6d:1a:fa:37:02:7d:c6:22:
         e8:09:4c:f7:d4:6e:e9:4b:77:b5:9d:39:c7:2f:82:1e:2f:3b:
         44:af:35:bc:fb:ae:49:ef:b9:b6:ef:dc:3c:98:a1:99:0c:a1:
         32:03:e6:0c:38:e6:18:86:68:25:cc:e9:54:55:48:9b:6d:63:
         56:10:8f:20:52:58:b8:f0:b8:a4:c1:f9:b6:33:66:13:6f:4c:
         38:5f:da:c6:cc:05:c1:87:9e:fb:35:88:c2:08:c7:5f:d3:13:
         11:03:d2:c1:0d:bd:bb:8e:f4:2e:c0:ad:84:c4:31:c8:ad:70:
         01:7e:d2:f6:ba:86:d8:92:6b:cd:95:b5:1e:0d:6a:e3:91:5a:
         a0:35:0a:94:6d:14:be:10:5b:1b:75:b7:3d:3f:b9:db:81:f0:
         b3:6e:45:1c:22:34:27:19:c5:08:cc:f0:79:4e:46:0f:40:ec:
         63:05:8a:f9:ba:d0:fe:73:d7:1e:ee:90:b9:e2:54:48:80:32:
         e6:2e:73:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp60HPt8kU/RCfJePM+03LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZmI4ZDNiZWUxNTI1Mzc2M2IwNzZhYTMyZTJlMmJhNmY5
ZTA1YzMwHhcNMjYwMzAxMTUwMTMzWhcNMjYwMzAyMTUwMTMzWjAzMTEwLwYDVQQD
EygxNjA5MzVkMzFhNTI4MDNjMjczZjdiZmZjNGFiMWYzZDc4MjhjYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zNdSJ7e15ohmFvpt5WCECpBiYn
b9lmkpDklc7Tuujg1aJbNhOouxFF53paL2/EjhkxbKQN/URSSACp7ZnCiYelXRP+
sQiPidVnRBqRuqfblWDZHxJEvfsPVGwtO4KpJrOV+uMuiRs9YKWdHzeZyzU3dUPN
DrLcaNCBa6v8o48elLnMoEpxVIvnQ3Fnell9q+PQdHhZxy3YYzd6snl5HNynRjuh
dqIwppR8tcfnu/woy/SM5+C5jLbRy1UvbSdciOEf2pm35zMq6XV2XFtoEJw9oq/y
Z03wZyQsMTJlWbXY4vQ5lrCa5S17mnXS+nRA78KKHi85Abe37HHUGGCKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYJNdMaUoA8Jz97/8SrHz14KMxRMB8GA1UdIwQY
MBaAFOv7jTvuFSU3Y7B2qjLi4rpvngXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNzdkMDUtMzk0ZS00ZjNhLTlkYjEt
NDhiZWQzMDI5MWEwLzEvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNzdkMDUtMzk0ZS00ZjNhLTlkYjEtNDhiZWQzMDI5MWEw
LzEvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPuKOXMU
i2Q8c528SBqZNCdoX5D7NsBpNkOJVeEYTeVNcWMVYz0r9DNO0Avr5lj1EiRBPMzn
WtmjpQRYIhdAf20a+jcCfcYi6AlM99Ru6Ut3tZ05xy+CHi87RK81vPuuSe+5tu/c
PJihmQyhMgPmDDjmGIZoJczpVFVIm21jVhCPIFJYuPC4pMH5tjNmE29MOF/axswF
wYee+zWIwgjHX9MTEQPSwQ29u470LsCthMQxyK1wAX7S9rqG2JJrzZW1Hg1q45Fa
oDUKlG0UvhBbG3W3PT+524Hws25FHCI0JxnFCMzweU5GD0DsYwWK+brQ/nPXHu6Q
ueJUSIAy5i5zpg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:35 2026 by rpki-client