Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File:                     b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier:          cztJn06VDudjprFsI6AE0pkNKCZuQf1hu1T+I0oViTY=
Subject key identifier:   57:4E:5F:C5:0B:11:63:30:86:47:2D:1B:9C:56:3B:5A:66:44:9E:64
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer:       /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial:       019CAA593BB2E209FF523949B5F9FA56C482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 17:01:40 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:40 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:40 +0000
Files and hashes:         1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: OHIc30VWc8FTI1U0K2ppVzEr/hTb6svKPpRsBg/oZlw=)
                          2: nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa (hash: 7qt1S1ac2mzquZqXIpN+D95+VEOfMXy8eLXHEbsWSgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:3b:b2:e2:09:ff:52:39:49:b5:f9:fa:56:c4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
        Validity
            Not Before: Mar  1 17:01:40 2026 GMT
            Not After : Mar  2 17:01:40 2026 GMT
        Subject: CN=574e5fc50b11633086472d1b9c563b5a66449e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:d8:76:f0:cb:4a:df:2f:50:9c:4d:8c:a6:
                    dc:5a:22:11:26:d6:9f:af:b8:df:f5:7b:28:91:cc:
                    08:40:5a:48:7c:78:6b:7a:96:44:33:98:5f:d0:fb:
                    7c:ee:4b:de:50:09:b2:10:de:39:fd:62:74:43:8c:
                    94:90:2e:9f:c9:e8:c9:fc:8b:bd:6e:87:23:0a:9d:
                    78:d0:3f:16:37:05:a5:c1:f9:9c:85:af:56:64:3b:
                    1c:d9:0d:67:41:0e:94:53:6b:6a:5c:fb:73:20:f4:
                    74:be:d1:43:61:2a:1f:af:31:ca:2c:7f:c2:18:b8:
                    31:af:05:be:86:fa:e8:c4:d4:88:25:83:cb:18:cc:
                    42:1f:c1:81:c5:4f:ca:49:bb:c4:db:e6:00:c3:5c:
                    fa:96:ae:6b:ea:87:f1:da:5e:1c:16:ea:d0:27:86:
                    49:0f:47:5c:0a:ce:e0:8a:d5:96:e0:ba:4c:02:f2:
                    8f:89:04:ce:9f:f5:39:a1:dd:e3:11:c2:26:5b:2e:
                    6f:04:a6:7f:27:30:77:3c:ca:be:bb:3f:6f:45:0f:
                    6d:e8:3e:a8:26:e8:38:f9:9d:6d:27:04:d8:c0:b5:
                    b4:8a:48:16:40:97:c7:e2:99:d3:db:dd:17:9d:9f:
                    95:3d:55:bf:63:d7:4f:09:68:18:27:ca:94:20:3a:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:5F:C5:0B:11:63:30:86:47:2D:1B:9C:56:3B:5A:66:44:9E:64
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:da:eb:0f:f6:74:4d:62:e4:a9:9c:5f:4c:a4:fe:9b:5a:96:
         34:a5:36:18:87:0f:b5:5d:6d:37:9d:74:82:91:fd:6d:96:44:
         24:14:c7:ae:65:9a:4e:0d:7c:82:69:7f:c5:41:6e:76:46:50:
         1a:2e:34:a9:40:b6:ac:fc:8e:96:0c:de:a8:56:d1:9c:4f:7d:
         8d:20:0e:3a:79:67:27:a3:10:b9:73:cd:c7:75:47:53:a7:05:
         25:5d:a2:2b:93:c1:96:6e:50:58:cd:15:73:91:b0:86:88:2b:
         9a:bb:11:a2:ee:ef:89:1d:db:2c:68:6e:bf:67:fd:11:8f:f3:
         4a:f7:44:67:95:e4:b2:cf:f5:eb:c5:fb:ae:27:24:22:08:e4:
         53:e4:a7:38:70:bf:7e:bc:06:ff:81:ff:1b:ba:72:8e:97:13:
         5d:ab:11:04:b4:13:95:49:26:9b:d3:ee:6d:9b:e4:30:43:d4:
         c7:92:d5:4c:06:6b:f1:2a:14:4f:4b:5c:f7:45:c2:ec:bf:81:
         ec:a9:1d:77:c7:10:f3:d8:6f:45:bd:63:6a:6f:d2:9a:75:43:
         43:a0:37:e0:6c:00:17:d4:1f:5d:80:48:4d:fd:68:11:60:b9:
         3c:ee:41:7d:08:d5:d0:69:8f:47:26:32:5d:8d:d2:c4:f4:33:
         6a:98:e6:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTuy4gn/UjlJtfn6VsSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTEwNGY2YTg5NzhiYjE2Y2QwNTMxNGY5OGE3ODZlMGQw
ZDk1NjQwHhcNMjYwMzAxMTcwMTQwWhcNMjYwMzAyMTcwMTQwWjAzMTEwLwYDVQQD
Eyg1NzRlNWZjNTBiMTE2MzMwODY0NzJkMWI5YzU2M2I1YTY2NDQ5ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMfYdvDLSt8vUJxNjKbcWiIRJtaf
r7jf9XsokcwIQFpIfHhrepZEM5hf0Pt87kveUAmyEN45/WJ0Q4yUkC6fyejJ/Iu9
bocjCp140D8WNwWlwfmcha9WZDsc2Q1nQQ6UU2tqXPtzIPR0vtFDYSofrzHKLH/C
GLgxrwW+hvroxNSIJYPLGMxCH8GBxU/KSbvE2+YAw1z6lq5r6ofx2l4cFurQJ4ZJ
D0dcCs7gitWW4LpMAvKPiQTOn/U5od3jEcImWy5vBKZ/JzB3PMq+uz9vRQ9t6D6o
Jug4+Z1tJwTYwLW0ikgWQJfH4pnT290XnZ+VPVW/Y9dPCWgYJ8qUIDp21wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdOX8ULEWMwhkctG5xWO1pmRJ5kMB8GA1UdIwQY
MBaAFG+hBPaol4uxbNBTFPmKeG4NDZVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt
NjUwOWNiNWYyN2Y4LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4
LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdrrD/Z0
TWLkqZxfTKT+m1qWNKU2GIcPtV1tN510gpH9bZZEJBTHrmWaTg18gml/xUFudkZQ
Gi40qUC2rPyOlgzeqFbRnE99jSAOOnlnJ6MQuXPNx3VHU6cFJV2iK5PBlm5QWM0V
c5GwhogrmrsRou7viR3bLGhuv2f9EY/zSvdEZ5Xkss/168X7rickIgjkU+SnOHC/
frwG/4H/G7pyjpcTXasRBLQTlUkmm9PubZvkMEPUx5LVTAZr8SoUT0tc90XC7L+B
7Kkdd8cQ89hvRb1jam/SmnVDQ6A34GwAF9QfXYBITf1oEWC5PO5BfQjV0GmPRyYy
XY3SxPQzapjmSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:26 2026 by rpki-client