Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          hzr6JCUhPt5uz3tayME8oYORy0N2Pg/zAypzLp3Zjc8=
Subject key identifier:   8A:67:80:57:6A:4D:2A:DF:45:63:41:1E:40:C0:AB:E5:0D:D1:98:5F
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019D28BB6CE69D1EC154BAC746951F0BC68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          039A
Signing time:             Thu 26 Mar 2026 06:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:04 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: Lh9pUI01zg4G6LOvTYhwbQJLI3aTdv5fuV3cdn4KZBY=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:6c:e6:9d:1e:c1:54:ba:c7:46:95:1f:0b:c6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Mar 26 06:01:04 2026 GMT
            Not After : Mar 27 06:01:04 2026 GMT
        Subject: CN=8a6780576a4d2adf4563411e40c0abe50dd1985f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:70:7f:b8:0a:96:ba:1a:0c:c7:40:68:b9:
                    58:d0:c7:e8:28:4f:ba:d5:53:4d:06:a0:0b:e9:88:
                    a1:3b:c3:ad:71:a6:54:04:86:71:cf:8f:1b:64:ed:
                    42:0e:5a:18:1f:cd:b6:3c:fc:94:f9:4f:d1:70:2a:
                    1a:a3:17:c4:4a:24:ce:fb:7c:5d:e9:bb:c4:47:ed:
                    57:33:13:f4:3d:04:45:26:68:99:59:df:e6:23:8d:
                    a2:59:98:9c:14:08:81:64:f0:39:d6:f6:6f:28:43:
                    32:09:26:16:62:97:d4:7a:3a:c4:62:ab:e1:03:ef:
                    20:91:3d:d0:56:ec:f9:b2:02:b4:b8:d3:16:29:c7:
                    80:e1:8b:51:1e:5e:86:be:c1:8e:05:a8:25:92:13:
                    89:56:a4:e5:4a:b9:39:85:71:59:f7:ed:29:aa:2d:
                    66:c6:58:a4:3f:c3:2a:64:be:a6:22:78:9c:3a:bf:
                    cd:c6:77:75:eb:98:1f:a8:46:f9:1b:63:65:35:8f:
                    4d:46:7d:19:10:c8:e7:6e:09:12:dc:dd:fc:56:40:
                    e5:c6:32:42:bd:00:38:0f:0d:59:9c:9d:af:fd:ba:
                    3f:23:ea:28:5e:9b:61:4c:67:e9:f1:e8:3c:e0:e8:
                    15:d2:df:48:ed:60:ef:cb:b5:8d:26:c5:a7:1e:e8:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:80:57:6A:4D:2A:DF:45:63:41:1E:40:C0:AB:E5:0D:D1:98:5F
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:20:fa:71:94:c7:b4:b9:62:9d:87:fc:1b:b5:a1:31:fb:c0:
         63:ad:14:fc:dc:ce:a8:b1:df:03:b2:8f:1c:70:33:56:e2:9b:
         f4:58:ee:fa:49:fd:35:c7:89:ba:d7:da:02:5e:6a:c1:3d:a6:
         7d:5d:3b:a0:65:b0:2c:d8:f6:ce:5b:7a:9e:b1:76:c2:16:04:
         26:45:95:d5:d1:26:31:ec:c4:f7:f5:f1:b0:57:05:20:a8:be:
         e5:11:3f:ef:a8:4f:85:ee:04:d4:49:04:34:8f:c4:ec:b1:a2:
         14:54:79:00:8a:ec:0e:a7:40:69:10:1d:ac:f2:ec:7d:50:f7:
         53:bd:0d:71:9a:87:54:e5:88:27:db:77:b5:03:e9:d2:f4:ba:
         6f:17:75:73:d2:73:d3:f8:c5:cf:2c:2b:10:1a:f7:b6:ad:27:
         34:00:7f:a9:f8:ef:38:7c:22:42:b1:c0:89:34:d4:62:48:e2:
         cd:15:00:7d:69:b0:ce:ea:c4:c4:45:28:65:10:c2:fa:14:37:
         04:a5:f4:d9:66:85:e2:af:84:fb:db:30:7c:e5:a1:92:1a:ab:
         91:d9:ad:ed:39:9e:54:0c:d9:4b:42:1e:df:b1:e0:e3:41:16:
         3a:f2:b8:9b:67:17:1f:4c:aa:3c:ac:bb:88:ca:ab:86:27:8c:
         94:f5:80:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2zmnR7BVLrHRpUfC8aPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4
YTZlODAwHhcNMjYwMzI2MDYwMTA0WhcNMjYwMzI3MDYwMTA0WjAzMTEwLwYDVQQD
Eyg4YTY3ODA1NzZhNGQyYWRmNDU2MzQxMWU0MGMwYWJlNTBkZDE5ODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSdwf7gKlroaDMdAaLlY0MfoKE+6
1VNNBqAL6YihO8OtcaZUBIZxz48bZO1CDloYH822PPyU+U/RcCoaoxfESiTO+3xd
6bvER+1XMxP0PQRFJmiZWd/mI42iWZicFAiBZPA51vZvKEMyCSYWYpfUejrEYqvh
A+8gkT3QVuz5sgK0uNMWKceA4YtRHl6GvsGOBaglkhOJVqTlSrk5hXFZ9+0pqi1m
xlikP8MqZL6mInicOr/Nxnd165gfqEb5G2NlNY9NRn0ZEMjnbgkS3N38VkDlxjJC
vQA4Dw1ZnJ2v/bo/I+ooXpthTGfp8eg84OgV0t9I7WDvy7WNJsWnHujd1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpngFdqTSrfRWNBHkDAq+UN0ZhfMB8GA1UdIwQY
MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt
NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk
LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciD6cZTH
tLlinYf8G7WhMfvAY60U/NzOqLHfA7KPHHAzVuKb9Fju+kn9NceJutfaAl5qwT2m
fV07oGWwLNj2zlt6nrF2whYEJkWV1dEmMezE9/XxsFcFIKi+5RE/76hPhe4E1EkE
NI/E7LGiFFR5AIrsDqdAaRAdrPLsfVD3U70NcZqHVOWIJ9t3tQPp0vS6bxd1c9Jz
0/jFzywrEBr3tq0nNAB/qfjvOHwiQrHAiTTUYkjizRUAfWmwzurExEUoZRDC+hQ3
BKX02WaF4q+E+9swfOWhkhqrkdmt7TmeVAzZS0Ie37Hg40EWOvK4m2cXH0yqPKy7
iMqrhieMlPWA+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:59 2026 by rpki-client