Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          G71gh5G9ZqG64RJJF5gtbNtSFFtGCjYx9xaBq7FwAAk=
Subject key identifier:   F6:E2:F2:68:56:1F:C4:3F:00:D0:38:81:4B:32:2E:CC:C4:7D:4F:C0
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       019DA37936A48BC0903AAEADF0EFB9D7740D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          0FFE
Signing time:             Sun 19 Apr 2026 02:02:03 +0000
Manifest this update:     Sun 19 Apr 2026 02:02:03 +0000
Manifest next update:     Mon 20 Apr 2026 02:02:03 +0000
Files and hashes:         1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
                          2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: GjgVhhme3+xw660ItWKjhgefCiigue5+qRz7EscPFsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:79:36:a4:8b:c0:90:3a:ae:ad:f0:ef:b9:d7:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Apr 19 02:02:03 2026 GMT
            Not After : Apr 20 02:02:03 2026 GMT
        Subject: CN=f6e2f268561fc43f00d038814b322eccc47d4fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:3e:65:3c:a1:bf:bc:b0:7a:51:72:cc:dd:
                    47:ef:f1:1f:82:b1:60:f6:d3:0d:dd:89:45:84:3d:
                    9b:28:d6:24:7d:96:4c:18:e4:84:b2:67:5e:cd:0a:
                    42:10:12:b5:e3:5a:86:04:a2:b3:14:3a:c7:de:7b:
                    52:46:47:03:71:b8:15:c5:93:ed:19:5b:c4:ec:29:
                    7f:01:76:1d:50:e8:2d:1d:96:d5:46:13:65:3f:81:
                    86:42:63:cd:f8:ae:0f:4f:9f:67:bb:8f:af:ee:05:
                    c7:c7:37:2d:64:0b:06:b9:cc:3f:2b:85:85:9e:a7:
                    5e:b5:c0:c5:17:fa:69:af:26:20:64:12:e8:e5:d7:
                    1b:76:06:d2:8b:6f:ae:23:6a:68:ca:58:d9:ea:42:
                    fb:0d:19:37:28:bb:38:c7:da:e8:d2:b9:db:b4:40:
                    36:47:14:2f:28:18:22:4c:68:d4:db:9b:37:cf:e3:
                    87:c3:ac:72:82:1d:f2:7f:7c:b9:a6:2f:50:a6:87:
                    1c:69:6f:f7:e7:33:d3:dc:81:f8:20:ba:81:fe:ee:
                    b8:1f:e6:66:20:bf:8d:e1:09:65:76:90:6c:ed:93:
                    d7:68:41:2b:cf:07:2b:6c:91:95:57:e2:a9:99:25:
                    5f:08:5c:77:2c:b6:64:aa:03:34:44:50:e0:03:88:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:F2:68:56:1F:C4:3F:00:D0:38:81:4B:32:2E:CC:C4:7D:4F:C0
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:08:a5:2c:6c:b7:1e:a0:7e:f3:dc:34:01:e7:61:76:f1:bd:
         ae:86:71:1e:6f:87:37:76:c8:fb:7b:44:06:73:42:fe:dd:c0:
         a6:60:c0:e3:d2:b7:7b:3b:7e:0c:33:69:4a:1a:fe:dd:2e:9a:
         46:6a:51:c1:8a:c7:0e:2c:ae:f4:c5:68:d6:fb:75:ff:1e:a9:
         7e:5a:be:1c:69:95:f2:2b:11:ab:51:48:22:f6:4f:fd:af:12:
         e5:57:c0:5b:14:46:93:47:f9:ec:b3:a7:65:f8:1b:d8:96:91:
         1f:38:6d:7a:55:cc:29:20:e0:97:55:a5:ac:e4:9d:e4:6f:b2:
         51:31:64:58:a0:d9:f8:ba:7c:ee:23:41:db:a2:c0:66:a5:3a:
         59:f4:b2:ad:45:94:f4:4b:bb:52:ae:63:76:9c:6f:45:59:b9:
         e7:8e:f1:88:20:e0:dd:72:82:af:4a:7c:ba:82:ae:35:94:2c:
         54:ec:fe:eb:3a:ca:c0:de:b9:b9:aa:4e:b5:22:5b:87:53:73:
         aa:36:12:32:37:98:83:78:58:9e:2c:da:c8:83:4a:01:69:82:
         a5:4b:eb:48:41:38:20:3d:b4:bf:bb:cb:d9:40:cf:13:9a:22:
         f5:c1:57:79:8b:bf:d4:e2:64:b9:44:30:30:83:5a:7d:3d:bb:
         40:fd:37:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeTaki8CQOq6t8O+513QNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5
MDJmOTgwHhcNMjYwNDE5MDIwMjAzWhcNMjYwNDIwMDIwMjAzWjAzMTEwLwYDVQQD
EyhmNmUyZjI2ODU2MWZjNDNmMDBkMDM4ODE0YjMyMmVjY2M0N2Q0ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfc+ZTyhv7ywelFyzN1H7/EfgrFg
9tMN3YlFhD2bKNYkfZZMGOSEsmdezQpCEBK141qGBKKzFDrH3ntSRkcDcbgVxZPt
GVvE7Cl/AXYdUOgtHZbVRhNlP4GGQmPN+K4PT59nu4+v7gXHxzctZAsGucw/K4WF
nqdetcDFF/ppryYgZBLo5dcbdgbSi2+uI2poyljZ6kL7DRk3KLs4x9ro0rnbtEA2
RxQvKBgiTGjU25s3z+OHw6xygh3yf3y5pi9QpoccaW/35zPT3IH4ILqB/u64H+Zm
IL+N4QlldpBs7ZPXaEErzwcrbJGVV+KpmSVfCFx3LLZkqgM0RFDgA4hM1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbi8mhWH8Q/ANA4gUsyLszEfU/AMB8GA1UdIwQY
MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt
OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj
LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwilLGy3
HqB+89w0AedhdvG9roZxHm+HN3bI+3tEBnNC/t3ApmDA49K3ezt+DDNpShr+3S6a
RmpRwYrHDiyu9MVo1vt1/x6pflq+HGmV8isRq1FIIvZP/a8S5VfAWxRGk0f57LOn
Zfgb2JaRHzhtelXMKSDgl1WlrOSd5G+yUTFkWKDZ+Lp87iNB26LAZqU6WfSyrUWU
9Eu7Uq5jdpxvRVm5547xiCDg3XKCr0p8uoKuNZQsVOz+6zrKwN65uapOtSJbh1Nz
qjYSMjeYg3hYnizayINKAWmCpUvrSEE4ID20v7vL2UDPE5oi9cFXeYu/1OJkuUQw
MINafT27QP03Jg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:20 2026 by rpki-client