Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
File:                     6Ey_buD7yr9563S8Ykjzls8K6uQ.mft (raw, json)
Hash identifier:          YXvvItvNN1y+kjoUjatSFrIq16Ql/cZ5Dvlrn8Zel8c=
Subject key identifier:   EF:65:18:E5:9E:5E:F9:37:02:7D:FD:19:2D:34:AF:F1:CB:63:80:DE
Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4
Certificate issuer:       /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
Certificate serial:       019D27A8F50BED46DA19C58389B5FAD0DD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
Manifest number:          0B94
Signing time:             Thu 26 Mar 2026 01:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:17 +0000
Files and hashes:         1: 6Ey_buD7yr9563S8Ykjzls8K6uQ.crl (hash: rXAuqjYEicgfVqp4IBfjhhBa0h3P4CdsNXkiF6fefN0=)
                          2: f3D8udSu3dtjbrLKnmWOz8XvfiA.roa (hash: YroX+SuNccqs1wKABD1fzKE71I0H5UXZNMrp81qcCCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f5:0b:ed:46:da:19:c5:83:89:b5:fa:d0:dd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
        Validity
            Not Before: Mar 26 01:01:17 2026 GMT
            Not After : Mar 27 01:01:17 2026 GMT
        Subject: CN=ef6518e59e5ef937027dfd192d34aff1cb6380de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:50:05:54:76:ac:d5:d6:5e:5b:f3:42:ae:
                    e4:86:eb:7e:1a:ce:a1:2e:c5:74:55:48:9a:0b:3c:
                    b8:52:43:96:76:fd:d5:7e:06:82:bc:f3:04:b2:3b:
                    9d:c7:27:cc:1d:79:65:ba:7f:40:03:16:21:90:b8:
                    e6:e2:7f:43:5d:59:6d:4e:e9:4c:4c:28:0f:b6:b2:
                    8c:95:e3:7b:4c:d5:d6:9d:e7:33:9d:cb:f5:85:27:
                    dd:c6:8c:8e:23:d5:0b:ac:f8:4f:b8:69:de:f8:97:
                    46:99:1f:a9:55:1e:33:d5:a4:60:d2:77:52:ae:1c:
                    e1:36:5b:3f:03:51:4a:64:75:e8:d7:a7:ec:d7:61:
                    c2:3b:6c:97:79:33:74:d5:3a:5e:52:c5:f6:ec:bc:
                    41:2c:e7:0f:e6:f9:08:e4:31:19:97:05:8f:e2:6d:
                    c0:22:a8:70:cb:7b:2e:ea:e8:aa:22:3e:77:b7:f5:
                    66:34:9d:55:f6:5e:0f:62:24:a7:55:b4:40:fa:cf:
                    cf:06:eb:b8:0f:82:27:cb:00:ba:7a:19:a2:f0:91:
                    96:79:77:b8:3c:69:2d:c0:34:0b:45:91:59:9a:78:
                    a3:c2:f0:a7:61:47:df:99:56:26:b8:6f:e7:be:d0:
                    b7:05:5c:d1:95:b4:bc:51:ad:f7:99:0f:2d:34:65:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:18:E5:9E:5E:F9:37:02:7D:FD:19:2D:34:AF:F1:CB:63:80:DE
            X509v3 Authority Key Identifier:
                keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:0e:3c:15:1d:7d:f9:25:cf:92:10:82:4b:22:5c:86:2e:
         1d:b8:6a:bf:e4:2e:e4:0c:ac:4d:da:6b:16:b2:9f:94:f4:ba:
         4b:84:57:6d:1b:3b:a7:2d:39:b7:72:03:e5:21:c7:5f:c2:1d:
         fe:1a:fc:98:70:3f:9c:13:f4:a6:7d:b7:3e:07:7a:50:da:a0:
         e7:5e:c0:fc:9f:e6:24:14:49:59:65:15:1f:b4:48:8c:2e:48:
         fe:9f:9e:10:cc:85:0b:04:2a:3a:d3:39:c9:83:29:8c:ce:34:
         89:58:75:e6:b8:45:cd:aa:75:ae:f0:56:44:f5:75:f0:20:d8:
         6f:71:42:0a:5e:c8:75:07:0b:59:ea:06:e6:83:e3:c1:ef:41:
         c9:07:74:2b:58:3c:02:bb:d5:9c:0e:ad:ac:6e:5b:b6:d4:34:
         fb:74:f0:cb:62:ed:a1:d3:d3:3b:29:a9:aa:6d:69:c9:21:f6:
         b9:73:86:c4:aa:92:6a:73:8a:40:48:97:01:8e:44:a9:20:65:
         db:41:cb:29:22:3f:bb:07:a6:05:c8:8a:c2:e3:fb:64:c1:5d:
         63:9b:32:fd:f2:e2:91:25:fe:d5:86:56:6f:c7:1d:1f:a7:46:
         bd:db:58:0a:8a:ef:37:d6:f1:6b:ab:68:7c:f8:08:e7:cd:e2:
         91:db:12:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPUL7UbaGcWDibX60N0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGNiZjZlZTBmYmNhYmY3OWViNzRiYzYyNDhmMzk2Y2Yw
YWVhZTQwHhcNMjYwMzI2MDEwMTE3WhcNMjYwMzI3MDEwMTE3WjAzMTEwLwYDVQQD
EyhlZjY1MThlNTllNWVmOTM3MDI3ZGZkMTkyZDM0YWZmMWNiNjM4MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNRQBVR2rNXWXlvzQq7khut+Gs6h
LsV0VUiaCzy4UkOWdv3VfgaCvPMEsjudxyfMHXllun9AAxYhkLjm4n9DXVltTulM
TCgPtrKMleN7TNXWneczncv1hSfdxoyOI9ULrPhPuGne+JdGmR+pVR4z1aRg0ndS
rhzhNls/A1FKZHXo16fs12HCO2yXeTN01TpeUsX27LxBLOcP5vkI5DEZlwWP4m3A
Iqhwy3su6uiqIj53t/VmNJ1V9l4PYiSnVbRA+s/PBuu4D4InywC6ehmi8JGWeXe4
PGktwDQLRZFZmnijwvCnYUffmVYmuG/nvtC3BVzRlbS8Ua33mQ8tNGUsJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9lGOWeXvk3An39GS00r/HLY4DeMB8GA1UdIwQY
MBaAFOhMv27g+8q/eet0vGJI85bPCurkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgt
ZDNhMzhjNzZhZDRkLzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgtZDNhMzhjNzZhZDRk
LzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK4OPBUd
ffklz5IQgksiXIYuHbhqv+Qu5AysTdprFrKflPS6S4RXbRs7py05t3ID5SHHX8Id
/hr8mHA/nBP0pn23Pgd6UNqg517A/J/mJBRJWWUVH7RIjC5I/p+eEMyFCwQqOtM5
yYMpjM40iVh15rhFzap1rvBWRPV18CDYb3FCCl7IdQcLWeoG5oPjwe9ByQd0K1g8
ArvVnA6trG5bttQ0+3Twy2LtodPTOympqm1pySH2uXOGxKqSanOKQEiXAY5EqSBl
20HLKSI/uwemBciKwuP7ZMFdY5sy/fLikSX+1YZWb8cdH6dGvdtYCorvN9bxa6to
fPgI583ikdsSxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:07 2026 by rpki-client