Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File:                     TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier:          e5ixM+l2kAWGXtdU9nUGd/t8gbCXB2r9CZz/5LEarm8=
Subject key identifier:   6D:85:7D:9C:C5:A0:C7:F2:54:F5:D0:A5:E0:23:AF:A7:ED:0C:3E:26
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer:       /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial:       019D258354E54C249AA0A63634013DAC778F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number:          1084
Signing time:             Wed 25 Mar 2026 15:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:57 +0000
Files and hashes:         1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: aeILBRB7YnkDi88Zu9cD2+cqJ1K7ofHxas0xt8fU9Ow=)
                          2: tRFRkel64fON7_xKepvLPUo1-fI.asa (hash: ameUugDeJAnqZ6Zq6VkX4ZE573/4XY7yNwwbS3zZLqM=)
                          3: u5FQBjQ8TGAOw1PdBvvxn8Cybhw.roa (hash: x/E32nuicoTl8vPe5LNlzciN/23Qza2+g16y+2v27pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:54:e5:4c:24:9a:a0:a6:36:34:01:3d:ac:77:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
        Validity
            Not Before: Mar 25 15:00:57 2026 GMT
            Not After : Mar 26 15:00:57 2026 GMT
        Subject: CN=6d857d9cc5a0c7f254f5d0a5e023afa7ed0c3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:58:80:09:58:54:6e:b9:f9:e2:9a:86:cb:
                    a5:1a:79:7c:f2:30:24:cb:03:ed:f4:7e:c1:72:08:
                    84:59:2f:91:9b:52:87:1b:67:72:13:bc:c3:4a:b8:
                    b5:d6:cf:c9:e9:40:92:b4:de:71:d5:6d:ba:75:9d:
                    d0:f2:35:3c:7e:9c:df:d5:bf:f6:39:61:0e:f5:c7:
                    c4:0a:8c:3e:18:6e:eb:63:30:28:a1:4f:8b:70:e9:
                    a8:ef:0a:99:25:18:44:59:c7:29:18:e7:3f:eb:b1:
                    de:e3:42:c6:cc:ec:a7:e1:2c:f6:53:28:e3:ac:3d:
                    4d:87:6d:90:e2:9e:8f:18:aa:3f:d0:40:10:30:75:
                    9e:14:d6:fb:7f:b5:12:06:c8:b2:a3:bb:13:09:92:
                    14:a9:1f:c0:98:50:20:69:75:72:5e:05:de:bd:b8:
                    04:f2:f9:e8:c4:68:4d:b1:eb:4a:33:c8:7d:40:cf:
                    b7:46:57:78:a5:bd:2a:63:34:b4:06:7f:04:f2:55:
                    d1:97:10:18:3f:6c:d6:62:05:e8:32:32:82:54:8f:
                    53:ff:10:72:97:74:7f:ca:be:97:20:0f:17:61:a9:
                    ac:30:de:37:27:36:d7:43:ea:e6:85:cf:e9:94:5e:
                    dd:7a:82:a0:29:0a:bc:78:67:4f:6b:6a:c3:d8:00:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:85:7D:9C:C5:A0:C7:F2:54:F5:D0:A5:E0:23:AF:A7:ED:0C:3E:26
            X509v3 Authority Key Identifier:
                keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:c2:43:a4:df:fc:9f:99:a2:4f:54:fa:e0:b3:7f:fd:5c:
         ea:8a:8f:ec:cc:0a:e3:dc:4f:bc:0a:0a:5b:b5:76:0d:ee:5d:
         07:3e:8b:b4:d9:29:5a:eb:49:6c:41:6b:b5:83:4b:55:a3:1d:
         5b:b5:c9:aa:ce:01:5f:b1:a0:c6:60:44:c8:2f:7c:1a:cc:fb:
         49:89:1f:e8:21:a4:d5:45:17:d7:39:0c:27:2c:73:76:c3:6f:
         53:e0:67:bb:de:fa:33:f2:d4:03:24:10:bc:e4:3b:8b:20:10:
         27:0f:42:c9:47:6a:ae:1f:a2:79:96:43:68:20:44:22:35:a5:
         67:1c:56:da:8f:57:55:ab:b9:40:a5:e0:fe:3a:25:61:77:17:
         c5:9a:c8:e0:dc:2d:a5:5a:09:03:09:94:37:dd:f0:2f:fa:39:
         50:57:93:a7:45:ea:31:07:f4:ae:94:a0:23:5d:72:a1:ee:a8:
         cb:50:77:20:97:3c:b5:ba:c7:e9:14:e1:de:9f:df:81:3c:9e:
         03:1f:15:53:4b:42:b8:b9:79:d9:20:67:8b:73:8b:98:90:ca:
         c6:04:c8:d9:65:ec:de:90:73:f5:c0:e6:bc:37:ec:20:6d:98:
         4d:c8:44:2b:3f:cd:b6:83:72:52:3d:6f:1d:ba:6f:9e:62:56:
         fc:c5:b5:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg1TlTCSaoKY2NAE9rHePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjYwMzI1MTUwMDU3WhcNMjYwMzI2MTUwMDU3WjAzMTEwLwYDVQQD
Eyg2ZDg1N2Q5Y2M1YTBjN2YyNTRmNWQwYTVlMDIzYWZhN2VkMGMzZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJYgAlYVG65+eKahsulGnl88jAk
ywPt9H7BcgiEWS+Rm1KHG2dyE7zDSri11s/J6UCStN5x1W26dZ3Q8jU8fpzf1b/2
OWEO9cfECow+GG7rYzAooU+LcOmo7wqZJRhEWccpGOc/67He40LGzOyn4Sz2Uyjj
rD1Nh22Q4p6PGKo/0EAQMHWeFNb7f7USBsiyo7sTCZIUqR/AmFAgaXVyXgXevbgE
8vnoxGhNsetKM8h9QM+3Rld4pb0qYzS0Bn8E8lXRlxAYP2zWYgXoMjKCVI9T/xBy
l3R/yr6XIA8XYamsMN43JzbXQ+rmhc/plF7deoKgKQq8eGdPa2rD2ABtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2FfZzFoMfyVPXQpeAjr6ftDD4mMB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1rCQ6Tf
/J+Zok9U+uCzf/1c6oqP7MwK49xPvAoKW7V2De5dBz6LtNkpWutJbEFrtYNLVaMd
W7XJqs4BX7GgxmBEyC98Gsz7SYkf6CGk1UUX1zkMJyxzdsNvU+Bnu976M/LUAyQQ
vOQ7iyAQJw9CyUdqrh+ieZZDaCBEIjWlZxxW2o9XVau5QKXg/jolYXcXxZrI4Nwt
pVoJAwmUN93wL/o5UFeTp0XqMQf0rpSgI11yoe6oy1B3IJc8tbrH6RTh3p/fgTye
Ax8VU0tCuLl52SBni3OLmJDKxgTI2WXs3pBz9cDmvDfsIG2YTchEKz/NtoNyUj1v
HbpvnmJW/MW1PQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:46 2026 by rpki-client