Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          zs0kkcjZxmuBt+4d6GHnOKTOHsngOTHuLzc7dvRA1xI=
Subject key identifier:   0B:C8:4C:28:D8:0D:21:75:2D:D8:DF:2D:F9:F1:8A:56:E6:A0:E3:56
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       019D26CD1964347EC3FAE03747877215D70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          12EA
Signing time:             Wed 25 Mar 2026 21:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:08 +0000
Files and hashes:         1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: An+6jXpYPXBgZXy4XAt0XqpkJ7DCP8OLpwHS76cvbMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:19:64:34:7e:c3:fa:e0:37:47:87:72:15:d7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Mar 25 21:01:08 2026 GMT
            Not After : Mar 26 21:01:08 2026 GMT
        Subject: CN=0bc84c28d80d21752dd8df2df9f18a56e6a0e356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:c5:ea:bb:5f:41:37:cd:7c:c3:50:78:a2:
                    15:af:44:11:dc:b2:43:5a:ff:48:71:aa:f2:a1:87:
                    a5:94:e4:bd:ed:cd:f1:43:11:17:89:a7:32:9e:f9:
                    63:61:2a:56:25:ce:75:cc:09:b2:df:78:cc:0a:e9:
                    94:72:24:cd:11:47:cf:48:9a:e2:e5:c6:67:9d:10:
                    c6:3f:59:74:96:4a:0c:28:05:29:39:72:56:6e:e2:
                    42:fc:8c:92:fd:10:bb:60:0b:50:e7:3d:2b:5a:8c:
                    bf:76:ff:34:c7:9b:f5:78:69:41:8d:8e:04:24:ca:
                    dc:5c:cf:62:59:60:07:86:36:8f:54:85:0b:4a:3a:
                    77:d8:f0:07:e4:0f:7b:c2:16:ab:ad:13:d9:86:92:
                    a3:72:e9:9c:9b:33:20:ee:7b:5d:b9:13:32:ea:c9:
                    79:d2:6b:cc:b5:75:5d:bb:35:ba:ea:be:b8:3d:12:
                    a8:56:9b:ec:61:c6:07:85:14:f5:12:d3:82:1d:ff:
                    80:be:7c:53:88:9b:e9:3e:22:46:64:ba:c6:5c:1e:
                    d6:85:a5:d5:39:9f:85:04:c9:c2:ad:d8:a9:11:d7:
                    1f:f2:c3:e3:e9:e4:d7:b4:be:a4:ab:19:a7:ee:36:
                    02:45:7c:ad:a9:fb:35:61:1d:0f:a5:09:73:1d:9a:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:4C:28:D8:0D:21:75:2D:D8:DF:2D:F9:F1:8A:56:E6:A0:E3:56
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:25:2d:fc:bc:75:79:6d:d2:8a:d1:c2:dd:c6:09:d4:39:
         1a:00:ac:39:40:73:49:a3:a5:a2:82:e3:3b:59:f9:6a:b8:d1:
         46:50:a7:be:f4:2e:a5:b7:61:95:86:7a:e0:3a:58:90:08:70:
         74:41:57:11:04:b8:fa:41:d8:5b:50:b8:91:91:ff:3e:9d:3f:
         57:0d:f3:92:3f:f4:89:f1:e1:d9:ae:5e:d6:81:bd:4b:d0:eb:
         d1:23:aa:26:51:7a:64:02:f3:d7:b1:a8:0d:c2:f0:54:20:bb:
         49:99:e2:47:60:b1:4f:c9:1e:4a:05:be:22:da:99:f6:8c:df:
         45:ea:32:16:35:b7:6b:a7:0b:57:d6:5d:9d:33:ad:41:92:03:
         ef:e0:c3:8b:de:c7:ab:36:eb:45:ee:e9:f2:71:ad:ac:ba:c1:
         55:ee:6b:a0:d2:7b:e4:25:20:9e:9b:6d:20:f3:05:3c:1d:be:
         09:61:dc:8c:ed:bc:50:89:51:be:56:68:9e:cd:1f:31:6b:a8:
         1a:c4:87:55:e7:e3:48:44:27:c5:82:c7:79:33:3c:b4:0e:93:
         bb:2b:b2:21:6a:a9:93:17:cb:2e:56:77:74:f4:8b:49:2b:49:
         37:08:50:f0:1a:40:0b:6f:ba:0e:49:48:f4:85:43:8c:1e:00:
         d0:62:42:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzRlkNH7D+uA3R4dyFdcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTIzMDMxNmIzZTI1OGU5MjU1ZjQ2YjIwODAyYWUyZjNj
YjQ2YTAwHhcNMjYwMzI1MjEwMTA4WhcNMjYwMzI2MjEwMTA4WjAzMTEwLwYDVQQD
EygwYmM4NGMyOGQ4MGQyMTc1MmRkOGRmMmRmOWYxOGE1NmU2YTBlMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9DF6rtfQTfNfMNQeKIVr0QR3LJD
Wv9IcaryoYellOS97c3xQxEXiacynvljYSpWJc51zAmy33jMCumUciTNEUfPSJri
5cZnnRDGP1l0lkoMKAUpOXJWbuJC/IyS/RC7YAtQ5z0rWoy/dv80x5v1eGlBjY4E
JMrcXM9iWWAHhjaPVIULSjp32PAH5A97wharrRPZhpKjcumcmzMg7ntduRMy6sl5
0mvMtXVduzW66r64PRKoVpvsYcYHhRT1EtOCHf+AvnxTiJvpPiJGZLrGXB7WhaXV
OZ+FBMnCrdipEdcf8sPj6eTXtL6kqxmn7jYCRXytqfs1YR0PpQlzHZqyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvITCjYDSF1LdjfLfnxilbmoONWMB8GA1UdIwQY
MBaAFLeiMDFrPiWOklX0ayCAKuLzy0agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYt
ZWY5MTM1YTJjODJmLzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYtZWY5MTM1YTJjODJm
LzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6glLfy8
dXlt0orRwt3GCdQ5GgCsOUBzSaOlooLjO1n5arjRRlCnvvQupbdhlYZ64DpYkAhw
dEFXEQS4+kHYW1C4kZH/Pp0/Vw3zkj/0ifHh2a5e1oG9S9Dr0SOqJlF6ZALz17Go
DcLwVCC7SZniR2CxT8keSgW+ItqZ9ozfReoyFjW3a6cLV9ZdnTOtQZID7+DDi97H
qzbrRe7p8nGtrLrBVe5roNJ75CUgnpttIPMFPB2+CWHcjO28UIlRvlZons0fMWuo
GsSHVefjSEQnxYLHeTM8tA6TuyuyIWqpkxfLLlZ3dPSLSStJNwhQ8BpAC2+6DklI
9IVDjB4A0GJCRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:13 2026 by rpki-client