Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          qwY+p0cW5SJbmabedM4XRZYy8MU1yHICxU8tPh0fGqA=
Subject key identifier:   C6:0E:E1:D7:6F:F1:EB:14:F3:B7:6F:E9:DF:68:1D:28:A2:52:B8:51
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       019D27A9437CF067AB9AF3A5A0B20022A1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          13C2
Signing time:             Thu 26 Mar 2026 01:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:37 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: r+zNcCy1KtU5VNLnRaMneLj7p3cM3HOFTJnC1iUf3fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:43:7c:f0:67:ab:9a:f3:a5:a0:b2:00:22:a1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Mar 26 01:01:37 2026 GMT
            Not After : Mar 27 01:01:37 2026 GMT
        Subject: CN=c60ee1d76ff1eb14f3b76fe9df681d28a252b851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:c5:68:d8:c5:93:b3:ea:91:60:19:3c:f1:
                    83:ec:67:9b:cb:92:bf:38:bb:fc:8c:58:e8:0c:8e:
                    a0:a5:23:2f:7e:31:91:37:71:cc:ac:e3:58:81:bd:
                    46:aa:64:26:00:7f:16:cb:e0:6b:ee:83:18:31:ee:
                    e0:76:d3:4f:56:60:67:1d:90:8b:09:84:f3:35:1c:
                    0b:8b:11:e0:1c:5f:59:70:5f:cc:a3:8b:25:3d:6f:
                    81:34:22:51:e0:c5:4e:96:b7:0c:fa:1b:56:b6:a7:
                    b5:0a:94:d6:25:06:d2:63:70:22:10:72:1b:d1:05:
                    d8:8e:a0:1b:29:cd:f4:47:bd:03:dd:17:9a:48:d9:
                    e2:6e:03:09:23:e2:55:ab:a7:5a:f5:be:d0:59:d7:
                    3f:ad:bc:59:35:58:e9:75:ab:54:ee:92:42:ab:2d:
                    c2:77:44:67:bd:5d:21:bf:30:51:06:19:4e:52:75:
                    1d:07:45:fb:e4:46:74:ac:b0:bf:ce:76:a4:3d:24:
                    88:84:ab:86:ab:6f:c8:4f:75:9c:47:c1:f8:b2:18:
                    89:98:20:52:8c:85:bf:82:9d:3f:9b:0c:a8:e4:3b:
                    bb:e3:39:8d:2a:05:25:6d:80:46:72:fc:79:2a:7f:
                    d3:c5:44:84:ae:3a:fa:65:9f:5b:cb:3a:c7:21:49:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:E1:D7:6F:F1:EB:14:F3:B7:6F:E9:DF:68:1D:28:A2:52:B8:51
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:03:64:b5:bb:3f:89:2c:12:a7:e2:9a:82:aa:83:45:ef:
         1e:97:0f:a3:a0:e3:41:be:45:40:51:7b:3f:8e:87:02:28:95:
         57:19:6a:00:2a:39:4f:60:0f:98:a9:15:2a:0e:f7:ef:c4:04:
         e4:02:7a:0b:e9:7c:d7:f0:2b:e2:61:11:a3:14:fb:d4:0e:a8:
         c4:62:9b:9e:96:e8:a9:a6:b5:16:ae:d6:9e:28:8b:4d:7c:3f:
         42:cd:12:70:a7:8b:02:4d:03:6c:27:a1:ec:cb:ae:0b:34:b9:
         0d:72:84:fd:c5:81:30:80:7c:00:d0:00:7c:b0:5f:97:e9:e8:
         55:f9:14:22:15:c8:e0:ff:c3:03:b9:37:c2:4f:a9:e6:a7:53:
         a1:7d:da:76:17:0d:d3:15:e7:67:f9:26:74:6c:1a:1a:20:9c:
         5d:6f:87:3f:cf:f3:c7:a2:66:0b:8f:82:c0:e9:6f:b9:e8:c8:
         da:20:bf:9d:00:0f:20:bb:5d:34:00:58:49:41:d8:d8:a9:a4:
         b1:76:18:80:63:14:a4:64:9d:ea:f3:98:b0:57:77:12:46:46:
         7f:97:23:bb:f4:a5:79:59:58:c6:ba:3f:41:4b:42:dd:97:1e:
         fa:d8:97:02:a9:be:ec:3a:29:cb:71:26:0a:eb:26:b5:cc:02:
         07:17:a8:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqUN88GermvOloLIAIqG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw
MDBmMDAwHhcNMjYwMzI2MDEwMTM3WhcNMjYwMzI3MDEwMTM3WjAzMTEwLwYDVQQD
EyhjNjBlZTFkNzZmZjFlYjE0ZjNiNzZmZTlkZjY4MWQyOGEyNTJiODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3HFaNjFk7PqkWAZPPGD7Geby5K/
OLv8jFjoDI6gpSMvfjGRN3HMrONYgb1GqmQmAH8Wy+Br7oMYMe7gdtNPVmBnHZCL
CYTzNRwLixHgHF9ZcF/Mo4slPW+BNCJR4MVOlrcM+htWtqe1CpTWJQbSY3AiEHIb
0QXYjqAbKc30R70D3ReaSNnibgMJI+JVq6da9b7QWdc/rbxZNVjpdatU7pJCqy3C
d0RnvV0hvzBRBhlOUnUdB0X75EZ0rLC/znakPSSIhKuGq2/IT3WcR8H4shiJmCBS
jIW/gp0/mwyo5Du74zmNKgUlbYBGcvx5Kn/TxUSErjr6ZZ9byzrHIUn5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYO4ddv8esU87dv6d9oHSiiUrhRMB8GA1UdIwQY
MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt
ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk
LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8UDZLW7
P4ksEqfimoKqg0XvHpcPo6DjQb5FQFF7P46HAiiVVxlqACo5T2APmKkVKg7378QE
5AJ6C+l81/Ar4mERoxT71A6oxGKbnpboqaa1Fq7WniiLTXw/Qs0ScKeLAk0DbCeh
7MuuCzS5DXKE/cWBMIB8ANAAfLBfl+noVfkUIhXI4P/DA7k3wk+p5qdToX3adhcN
0xXnZ/kmdGwaGiCcXW+HP8/zx6JmC4+CwOlvuejI2iC/nQAPILtdNABYSUHY2Kmk
sXYYgGMUpGSd6vOYsFd3EkZGf5cju/SleVlYxro/QUtC3Zce+tiXAqm+7Dopy3Em
CusmtcwCBxeotA==
-----END CERTIFICATE-----