Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          LWBpnDl/rNRPXQp4gb5T3NUlXdTSfdBl2SLGjDdGKT0=
Subject key identifier:   83:BF:72:1D:1F:01:70:BE:CC:53:36:BC:DC:00:50:F6:22:61:DE:8C
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       019CACB45B659BC1C3A220CAD4DA48F0CF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          059A
Signing time:             Mon 02 Mar 2026 04:00:26 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:26 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:26 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: 6cni59lGvWgAQvRVN6qoD5k69UJV6kX8a7FfnBhPRGo=)
                          2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:5b:65:9b:c1:c3:a2:20:ca:d4:da:48:f0:cf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Mar  2 04:00:26 2026 GMT
            Not After : Mar  3 04:00:26 2026 GMT
        Subject: CN=83bf721d1f0170becc5336bcdc0050f62261de8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:05:f4:0d:08:25:0f:3c:ce:11:77:f5:d9:
                    6f:c7:d7:db:5c:11:63:56:d1:ca:eb:95:aa:6f:66:
                    51:6d:a6:48:2d:c8:d4:c9:8d:18:42:d5:99:cf:c2:
                    79:cf:5b:7d:f9:16:e2:d0:c6:63:51:e5:0a:e4:59:
                    b1:69:b4:a6:b8:e0:5c:f2:b7:11:42:7b:0a:e5:b0:
                    a2:30:93:58:92:40:8f:c5:5d:20:e7:90:ff:3c:8b:
                    1c:93:89:32:09:5b:e7:8f:21:ea:dc:60:7c:e4:ce:
                    ba:7c:e8:a4:68:4b:0a:a7:fb:a7:89:e3:5a:8c:5b:
                    af:f4:08:16:32:1c:d7:a9:22:e6:6e:af:d5:2d:04:
                    66:27:9f:08:1b:99:e1:8a:52:fe:5f:45:0d:cb:78:
                    3a:c0:f0:bf:a1:e9:99:c7:2e:ca:ee:af:38:24:33:
                    d7:ee:5e:ff:e7:82:9c:b8:ad:c1:88:a2:b9:b2:98:
                    74:7d:d4:92:82:57:62:e8:66:bc:7e:ce:62:ac:c4:
                    b3:9a:85:7c:96:d0:7a:be:d6:7e:da:b2:37:53:26:
                    22:c3:71:b0:56:2d:f8:a4:fd:a3:80:bb:7e:6f:00:
                    11:67:5b:61:96:6e:b6:b2:96:e0:01:b9:7e:25:e9:
                    32:2b:69:4d:6c:65:ea:ff:ec:0b:44:b2:53:8a:60:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:72:1D:1F:01:70:BE:CC:53:36:BC:DC:00:50:F6:22:61:DE:8C
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:50:1b:85:02:b8:e7:12:c6:67:8e:96:43:62:e3:19:31:53:
         99:7d:77:45:47:c1:77:bd:29:33:4f:9d:bc:23:0a:f2:47:92:
         cd:db:de:99:23:43:d3:06:bc:ac:86:54:15:77:32:18:cc:a2:
         0d:4f:15:80:b2:2f:32:ea:01:4d:ab:85:11:a1:13:cc:e2:1a:
         70:49:77:30:12:a0:5b:06:b8:14:c3:d7:ff:32:dc:eb:6e:63:
         7b:80:fe:54:27:f3:8d:11:f5:25:2d:e2:5f:67:5d:0b:42:ab:
         3c:1a:0d:34:97:fc:11:a2:94:ef:33:b8:b4:86:07:47:c1:6f:
         95:d8:b8:f4:52:8f:ff:7b:36:01:2b:09:19:9b:f1:eb:b3:3d:
         08:64:26:fd:4d:19:17:5e:4a:c6:a2:93:91:fa:38:e9:89:22:
         d6:77:57:fb:21:51:f8:f7:eb:f7:0a:d0:9c:07:12:69:c2:13:
         3a:32:67:0b:0c:8b:5d:8e:99:82:54:ba:2a:6c:11:a7:8c:c9:
         d9:c8:2b:9b:4c:38:6d:c8:86:60:2e:93:62:1f:30:bf:fc:c5:
         40:4d:5a:13:a6:14:d7:d5:71:11:e9:65:53:94:7f:19:04:57:
         f9:34:3c:12:cc:46:6c:6a:24:6a:a9:9f:cb:44:24:c2:98:3f:
         aa:5e:9b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystFtlm8HDoiDK1NpI8M+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDM5MWQyNDQxNzNmM2UxYWE4MjFkYjc3NDg0YjFhZGE1
MzU1N2YwHhcNMjYwMzAyMDQwMDI2WhcNMjYwMzAzMDQwMDI2WjAzMTEwLwYDVQQD
Eyg4M2JmNzIxZDFmMDE3MGJlY2M1MzM2YmNkYzAwNTBmNjIyNjFkZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy4F9A0IJQ88zhF39dlvx9fbXBFj
VtHK65Wqb2ZRbaZILcjUyY0YQtWZz8J5z1t9+Rbi0MZjUeUK5FmxabSmuOBc8rcR
QnsK5bCiMJNYkkCPxV0g55D/PIsck4kyCVvnjyHq3GB85M66fOikaEsKp/unieNa
jFuv9AgWMhzXqSLmbq/VLQRmJ58IG5nhilL+X0UNy3g6wPC/oemZxy7K7q84JDPX
7l7/54KcuK3BiKK5sph0fdSSgldi6Ga8fs5irMSzmoV8ltB6vtZ+2rI3UyYiw3Gw
Vi34pP2jgLt+bwARZ1thlm62spbgAbl+JekyK2lNbGXq/+wLRLJTimCdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO/ch0fAXC+zFM2vNwAUPYiYd6MMB8GA1UdIwQY
MBaAFOkDkdJEFz8+Gqgh23dISxraU1V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMt
NDZiZTc5ODcwYmU4LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMtNDZiZTc5ODcwYmU4
LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFAbhQK4
5xLGZ46WQ2LjGTFTmX13RUfBd70pM0+dvCMK8keSzdvemSND0wa8rIZUFXcyGMyi
DU8VgLIvMuoBTauFEaETzOIacEl3MBKgWwa4FMPX/zLc625je4D+VCfzjRH1JS3i
X2ddC0KrPBoNNJf8EaKU7zO4tIYHR8Fvldi49FKP/3s2ASsJGZvx67M9CGQm/U0Z
F15KxqKTkfo46Yki1ndX+yFR+Pfr9wrQnAcSacITOjJnCwyLXY6ZglS6KmwRp4zJ
2cgrm0w4bciGYC6TYh8wv/zFQE1aE6YU19VxEellU5R/GQRX+TQ8EsxGbGokaqmf
y0Qkwpg/ql6bpg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:33 2026 by rpki-client