Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          mudJsxnYIhQa1ugvbch+yA0LvsbP1sjX0YqG84ErjHY=
Subject key identifier:   0E:EB:07:51:7B:AC:DD:16:16:62:1E:C5:F4:F1:01:69:CD:F5:81:C4
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       019CACEB8F9FEB0D9EC338141F66F332F3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0DA2
Signing time:             Mon 02 Mar 2026 05:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:44 +0000
Files and hashes:         1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
                          2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: afNg/S2hXK9uzLA/8Z43qTRtUSdQ/uoA+S8VGprs1uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:8f:9f:eb:0d:9e:c3:38:14:1f:66:f3:32:f3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Mar  2 05:00:44 2026 GMT
            Not After : Mar  3 05:00:44 2026 GMT
        Subject: CN=0eeb07517bacdd1616621ec5f4f10169cdf581c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:d5:01:6d:bb:8b:5e:e9:69:ff:7a:3c:62:
                    58:c0:db:01:cc:35:b0:9a:ec:d1:a4:1c:88:65:5c:
                    d2:6c:12:0a:49:c1:7f:b4:5b:95:fa:d6:86:e0:2e:
                    08:9f:4c:e8:d1:c4:fc:b3:d5:3a:1e:8d:8b:1f:d9:
                    23:14:55:38:de:3c:0e:b1:b3:39:bd:b7:44:0b:cc:
                    21:91:64:db:38:86:7e:5c:9a:5d:ff:8f:1b:5a:0b:
                    b8:59:38:79:a2:d9:49:b9:84:bd:17:27:ae:09:28:
                    c8:26:95:6e:79:0a:e3:26:9d:0b:a1:b1:f8:97:5e:
                    10:98:a2:39:ce:9e:b9:be:38:b9:bd:4a:2d:a5:d1:
                    46:c7:90:66:b6:1f:7a:d7:1a:e8:10:cf:c9:b6:42:
                    d6:a8:dd:ec:d6:91:d8:f9:1c:7d:a2:a1:ca:8e:55:
                    e9:49:71:54:36:48:66:88:17:bd:ed:f2:8f:01:f8:
                    0a:1b:ff:fc:2a:5f:15:c8:a2:e3:52:d7:da:cf:b5:
                    4c:45:cc:02:5f:79:db:94:26:eb:eb:be:9b:0f:64:
                    7c:53:99:71:85:3e:bb:7a:23:66:cc:a9:a1:f1:01:
                    f1:82:74:a7:93:40:33:83:cb:b8:38:3d:56:c5:22:
                    72:36:ee:51:e5:49:30:bc:93:6e:e9:04:c9:45:b8:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EB:07:51:7B:AC:DD:16:16:62:1E:C5:F4:F1:01:69:CD:F5:81:C4
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:89:01:a0:9f:b5:52:4f:fd:05:f3:c7:86:ed:c1:68:3b:67:
         cb:1d:fb:82:a1:97:8d:ea:5f:84:77:74:22:b9:2b:ef:e2:54:
         54:16:cb:d1:cc:fb:8e:fb:7c:ef:68:0a:9f:5d:5c:91:1d:f9:
         3f:e7:1d:ca:f3:71:c3:65:5e:9f:28:fa:c6:8b:5a:16:2f:ff:
         ec:e0:d4:63:bf:ff:29:0f:3c:5a:d1:56:10:e0:b1:57:16:e5:
         97:53:c2:42:b3:7b:22:cc:12:51:02:88:e9:12:f4:ca:08:e0:
         97:dd:f9:73:0d:39:e2:bd:cb:b7:a7:75:3b:4f:d8:2c:26:46:
         af:1c:06:68:5e:8c:1e:eb:9f:12:b1:d8:88:32:22:d1:55:b0:
         59:d2:43:b1:6a:43:41:9a:34:de:15:64:f0:14:f3:47:4d:25:
         fd:3b:5f:99:00:9c:81:06:49:a5:e6:92:43:c9:af:c1:95:1f:
         bd:06:4b:dc:1d:b1:bb:0c:e9:f0:64:4d:2e:50:66:92:fd:f2:
         33:af:d1:e6:56:77:47:11:91:c6:bb:44:85:dc:f4:ba:cd:cd:
         5c:c7:8e:2d:61:ac:88:a1:3f:fd:28:20:5c:0b:7e:d9:7e:ee:
         9b:4e:da:bf:a0:e5:94:a6:66:9c:1d:22:90:e1:18:87:7d:8b:
         61:4a:6c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys64+f6w2ewzgUH2bzMvOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm
MmI1MjUwHhcNMjYwMzAyMDUwMDQ0WhcNMjYwMzAzMDUwMDQ0WjAzMTEwLwYDVQQD
EygwZWViMDc1MTdiYWNkZDE2MTY2MjFlYzVmNGYxMDE2OWNkZjU4MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHTVAW27i17paf96PGJYwNsBzDWw
muzRpByIZVzSbBIKScF/tFuV+taG4C4In0zo0cT8s9U6Ho2LH9kjFFU43jwOsbM5
vbdEC8whkWTbOIZ+XJpd/48bWgu4WTh5otlJuYS9FyeuCSjIJpVueQrjJp0LobH4
l14QmKI5zp65vji5vUotpdFGx5Bmth961xroEM/JtkLWqN3s1pHY+Rx9oqHKjlXp
SXFUNkhmiBe97fKPAfgKG//8Kl8VyKLjUtfaz7VMRcwCX3nblCbr676bD2R8U5lx
hT67eiNmzKmh8QHxgnSnk0Azg8u4OD1WxSJyNu5R5UkwvJNu6QTJRbipLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7rB1F7rN0WFmIexfTxAWnN9YHEMB8GA1UdIwQY
MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt
NzgyM2JjY2E1OTcwLzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw
LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4kBoJ+1
Uk/9BfPHhu3BaDtnyx37gqGXjepfhHd0Irkr7+JUVBbL0cz7jvt872gKn11ckR35
P+cdyvNxw2Venyj6xotaFi//7ODUY7//KQ88WtFWEOCxVxbll1PCQrN7IswSUQKI
6RL0ygjgl935cw054r3Lt6d1O0/YLCZGrxwGaF6MHuufErHYiDIi0VWwWdJDsWpD
QZo03hVk8BTzR00l/TtfmQCcgQZJpeaSQ8mvwZUfvQZL3B2xuwzp8GRNLlBmkv3y
M6/R5lZ3RxGRxrtEhdz0us3NXMeOLWGsiKE//SggXAt+2X7um07av6DllKZmnB0i
kOEYh32LYUps3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:36 2026 by rpki-client