Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
File:                     6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json)
Hash identifier:          jqWnAs+7PdUF1HTD3bqiBI09K+6inAg8dc87n3un5+Q=
Subject key identifier:   BC:52:4B:1C:FF:A4:4F:48:42:33:A3:14:1A:92:D8:69:B8:8D:B5:89
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Certificate issuer:       /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial:       019D29CEADAAFE30EFB6BB0CBF6C7918AC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
Manifest number:          1894
Signing time:             Thu 26 Mar 2026 11:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:43 +0000
Files and hashes:         1: 0OaaKkS63755SpYhx6kJMGc7jsk.roa (hash: yp83fzMHWtdzvYdJOYBhZdlBYbmjJSMrdOBnbSCBBV0=)
                          2: 0gfBZ2nkA_aLudP3O3P5s-KdgXU.roa (hash: gvj32J95khO6lKXoLY+MtPbkkgmfJusWvgloAUZdcEw=)
                          3: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: kMVy6Gsrup9tGjwZbFZFUB8T50+uWnkjmlBXodgqBq8=)
                          4: 861nedPN3phwQWTx-Y3YBAxRMVE.roa (hash: ERm1FnDrwh1xZ/A8rPaxVuHVGwJdfsBJ3Ujj0zNys+4=)
                          5: 96i-W8uHQfELumiyoD8KgUwjEqk.roa (hash: okWOkWFs1Dluipq3KfyuSGfnv1ZB6ULtQt87WU+u/6M=)
                          6: PEdeolhoIkzE4SikXyvr00NuL-M.roa (hash: xgoG+6pl+LCeGvwW7fq5QtfJTv5CaqjKKcOaYnCKPqA=)
                          7: T0iqjs9CkRPBgC6oTuTASwwLQBA.roa (hash: Q90Lq0syuhBK1/bm/BJJncCiwqmrsvZhqk9lxUir/3I=)
                          8: V_N2zZpFUh_jU5hVB-9KfNEepdA.roa (hash: F0gzOL4EyLJL5B+JsRxqs5zs7pl4bKpVfJSp9poZP8g=)
                          9: Z_CiSK55gizRlmUBAQqWDkAsjSA.roa (hash: ZtijwttgCm0QiPAlfL22m300Zqs50WEunsAW/5Jt8Fg=)
                          10: ZrDJgLArZHytatC5Ncvg5XZJ0L0.roa (hash: ulXA8t+3AsLSNeVGGGbJLh38H9YpiJMgj/n7hk5vfj0=)
                          11: _-6JSjmUimh08CjqKCxWw4-rHNE.roa (hash: +nCDi9UjpJd+hQvMDC1IUEgJRdQMfkefNt0DA5Y2kVs=)
                          12: aVOKvpwocFPOybKu2HArVNos6VE.roa (hash: 0a73eKWIb1Dki0lByBB+mR2gYiKoEVUop3iszyB1pNk=)
                          13: cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa (hash: C49PgeT/JLVMAXMoZTAwnDLdQC/24IQFKGkMPm9+JDM=)
                          14: qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa (hash: vLVUscpAnWQjrZiBQs7cgVM6cDYZNsv2RGlwep1lIic=)
                          15: t5g9JJgTeTxlzlS2-l4KatgQqhI.roa (hash: i6WKydZbQwmwygFZkL0wGJ79C8EFlVc8aiS0Dhfq4Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:ad:aa:fe:30:ef:b6:bb:0c:bf:6c:79:18:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
        Validity
            Not Before: Mar 26 11:01:43 2026 GMT
            Not After : Mar 27 11:01:43 2026 GMT
        Subject: CN=bc524b1cffa44f484233a3141a92d869b88db589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:21:7c:d5:7a:11:ae:6a:76:52:ab:f6:0e:
                    ea:5e:6d:b7:88:21:a0:d9:a1:fa:ec:5e:90:f4:85:
                    5e:65:64:61:05:34:c1:c4:38:b6:5a:90:9a:0c:2c:
                    5d:6e:4f:c8:e6:b7:40:1c:1b:aa:f9:7b:8d:13:60:
                    5d:aa:0e:b7:ab:27:96:00:31:a1:90:6a:e7:9f:b2:
                    64:d6:87:4f:25:31:10:dc:00:8b:d6:a5:d3:83:98:
                    26:4a:41:02:1e:45:97:b5:67:0d:3e:60:ff:d3:b7:
                    97:f1:66:8f:3e:7f:61:42:9e:e7:cb:c1:37:8b:01:
                    63:68:75:75:b2:a7:9b:ad:26:f1:87:85:8f:48:0a:
                    fe:9d:2c:98:94:c7:1b:16:91:2d:60:12:e9:78:33:
                    8b:bf:b5:87:f8:d1:cf:e7:6f:bb:24:55:8d:dc:8a:
                    e4:73:1c:1e:63:1b:c6:ce:8b:7d:ea:2c:af:fe:59:
                    2f:e5:60:f5:e7:69:a2:93:36:ff:d6:28:ac:27:f3:
                    0d:49:ac:c4:8c:77:77:e3:7f:0a:25:d8:32:da:7d:
                    25:57:d6:f8:01:39:ce:c2:c0:ef:3c:4b:86:3d:cf:
                    5f:82:3f:20:5b:ec:a2:c6:c3:b0:5b:7c:7d:6f:bb:
                    75:1e:80:dd:12:37:d3:cb:99:0b:00:d0:7c:f9:65:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:4B:1C:FF:A4:4F:48:42:33:A3:14:1A:92:D8:69:B8:8D:B5:89
            X509v3 Authority Key Identifier:
                keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:74:2e:94:8f:68:5b:1c:c3:8a:cd:54:2a:81:a5:3e:4d:8d:
         1f:3c:88:a9:c1:12:67:7c:91:6c:f7:6f:aa:42:ac:8d:93:65:
         c9:90:dc:32:d5:32:64:60:ea:8f:f1:8f:82:51:06:54:a2:13:
         1b:6d:da:a2:a5:5b:2f:88:6e:d1:73:98:27:01:c5:5f:1c:2f:
         66:b5:ed:9e:d6:ad:d7:b3:e5:d0:80:4e:33:5a:e1:44:2c:b1:
         49:0e:60:0e:2f:38:1e:f5:8b:9d:c7:04:2e:25:29:6a:da:aa:
         8d:f9:0c:3b:27:13:2d:45:6d:45:96:25:5c:e5:78:3b:4b:38:
         f4:3a:e2:53:73:65:c5:e2:26:04:18:18:bf:c1:6a:f5:4e:01:
         97:fc:e5:74:02:22:e9:5d:c3:7e:da:b0:6a:a5:2b:1c:fa:e9:
         6d:c1:93:22:60:a3:3b:b5:64:1e:45:03:c8:65:9d:e9:73:66:
         3a:40:0e:34:fa:d9:1b:21:4a:92:c7:c3:32:9d:ad:b2:02:c0:
         99:c9:f3:e4:07:09:ce:d5:b2:e2:c8:88:0b:b6:8e:52:d7:0e:
         ea:3b:b3:38:ec:bb:3c:c1:c7:9c:46:13:6d:8d:fe:72:a3:09:
         b1:5d:1e:08:da:b6:73:de:02:42:9d:69:a5:b3:a3:da:a9:ae:
         07:7e:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:12 2026 by rpki-client