Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          6g/qvFfwfPT6U86Ich5izD9qBPbpbImGpH8X+B7Fqo4=
Subject key identifier:   F0:9D:E6:3C:E9:C3:13:56:53:FE:A2:71:EC:24:4E:48:9B:0F:C4:B7
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       019D27041FA6340CBA3C7B9C5FF715DA9639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          16D1
Signing time:             Wed 25 Mar 2026 22:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:14 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: m1c1FODaJeigVhru3upbFktoYrWEnybrKS9zBRo7MNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:1f:a6:34:0c:ba:3c:7b:9c:5f:f7:15:da:96:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Mar 25 22:01:14 2026 GMT
            Not After : Mar 26 22:01:14 2026 GMT
        Subject: CN=f09de63ce9c3135653fea271ec244e489b0fc4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:86:c2:86:a3:30:a7:59:fa:1c:9c:99:53:
                    87:a6:da:c7:d4:08:da:2e:a5:90:fb:da:13:f9:10:
                    7f:d4:49:36:26:36:c1:fb:22:ec:e1:76:6d:10:eb:
                    e7:97:cc:af:02:ea:7c:8c:5f:a0:ac:b5:27:7d:3d:
                    b0:5d:04:79:51:1d:7e:75:01:41:37:ee:19:75:44:
                    12:04:1a:90:49:71:ab:39:f1:57:0d:b4:d5:98:36:
                    fe:7d:0a:2b:0d:9b:c5:3d:78:cc:a3:7a:30:f8:20:
                    d7:cb:3f:52:20:1d:1a:60:10:80:4a:49:c9:5b:35:
                    cf:f1:a3:87:8b:8d:5d:85:2d:fc:03:b5:f7:57:ae:
                    37:2e:f1:8f:55:f7:c5:78:25:b1:b0:07:9e:48:da:
                    1d:02:27:b1:1f:f8:9c:af:71:de:e9:f7:43:3a:37:
                    0d:5d:e8:9a:4c:a0:8e:0f:64:81:36:29:ac:0d:eb:
                    8f:6e:6e:e9:69:06:b4:e6:f0:f4:02:f0:d9:7b:66:
                    63:df:67:9a:3a:b6:56:6b:9e:2d:bf:67:d5:ee:ff:
                    b9:e2:c5:d1:35:aa:fa:24:65:7c:ff:bd:f0:1c:d0:
                    e9:04:c6:99:44:52:26:ed:52:e9:fc:74:2d:fb:e3:
                    8b:aa:8f:83:1d:46:23:67:24:b9:5d:54:81:f4:22:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:E6:3C:E9:C3:13:56:53:FE:A2:71:EC:24:4E:48:9B:0F:C4:B7
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:8f:f0:da:25:65:cf:79:dc:d9:90:ac:c0:05:f9:32:55:
         a4:a3:aa:22:38:7f:e1:01:31:f6:6f:ee:f6:b3:ce:98:52:ab:
         42:48:2e:56:a1:ab:07:9a:d3:27:fe:62:d0:4d:2e:f9:96:46:
         06:71:02:d1:2b:25:67:12:00:81:3a:a2:94:95:8e:ad:6e:9f:
         9c:cd:9b:47:b2:6f:c1:19:dc:42:39:44:63:be:d1:f0:54:e5:
         78:5f:6c:5e:08:e0:f7:ca:88:88:7c:3e:41:54:c0:c0:f4:49:
         bd:50:7b:a8:7e:43:36:5b:04:23:2a:28:c4:b0:b9:dc:88:9c:
         11:de:48:f1:7b:fc:fa:ff:14:f5:17:55:48:9f:5f:d5:8c:3d:
         7b:b0:88:6d:b7:b0:52:17:53:28:6d:63:f6:e5:24:be:d1:e4:
         e4:2f:1c:b2:c6:43:53:6f:f7:f6:27:b2:85:d8:73:c5:57:ee:
         75:97:54:41:1b:11:3e:a0:3c:2c:2e:63:88:eb:e3:49:49:2e:
         ec:73:93:52:41:02:36:dc:b9:f8:e5:16:7f:c0:31:74:65:98:
         d1:78:56:e9:4e:6f:aa:48:79:0b:97:03:6c:ec:e0:58:b7:2c:
         ff:fd:11:05:5c:80:b8:36:01:69:62:79:bd:bf:19:d6:87:5d:
         e7:17:67:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBB+mNAy6PHucX/cV2pY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMDYyMWE0YTcyYzcyNWFmYzc1NDE1ZThmOGFjZjc1MzNk
NDIwN2QwHhcNMjYwMzI1MjIwMTE0WhcNMjYwMzI2MjIwMTE0WjAzMTEwLwYDVQQD
EyhmMDlkZTYzY2U5YzMxMzU2NTNmZWEyNzFlYzI0NGU0ODliMGZjNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLWGwoajMKdZ+hycmVOHptrH1Aja
LqWQ+9oT+RB/1Ek2JjbB+yLs4XZtEOvnl8yvAup8jF+grLUnfT2wXQR5UR1+dQFB
N+4ZdUQSBBqQSXGrOfFXDbTVmDb+fQorDZvFPXjMo3ow+CDXyz9SIB0aYBCASknJ
WzXP8aOHi41dhS38A7X3V643LvGPVffFeCWxsAeeSNodAiexH/icr3He6fdDOjcN
XeiaTKCOD2SBNimsDeuPbm7paQa05vD0AvDZe2Zj32eaOrZWa54tv2fV7v+54sXR
Nar6JGV8/73wHNDpBMaZRFIm7VLp/HQt++OLqo+DHUYjZyS5XVSB9CLtQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCd5jzpwxNWU/6icewkTkibD8S3MB8GA1UdIwQY
MBaAFOoGIaSnLHJa/HVBXo+Kz3Uz1CB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMt
YzM4NGQ4YmMzYmVmLzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMtYzM4NGQ4YmMzYmVm
LzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApL6P8Nol
Zc953NmQrMAF+TJVpKOqIjh/4QEx9m/u9rPOmFKrQkguVqGrB5rTJ/5i0E0u+ZZG
BnEC0SslZxIAgTqilJWOrW6fnM2bR7JvwRncQjlEY77R8FTleF9sXgjg98qIiHw+
QVTAwPRJvVB7qH5DNlsEIyooxLC53IicEd5I8Xv8+v8U9RdVSJ9f1Yw9e7CIbbew
UhdTKG1j9uUkvtHk5C8cssZDU2/39ieyhdhzxVfudZdUQRsRPqA8LC5jiOvjSUku
7HOTUkECNty5+OUWf8AxdGWY0XhW6U5vqkh5C5cDbOzgWLcs//0RBVyAuDYBaWJ5
vb8Z1odd5xdn9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:11 2026 by rpki-client