Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          6NcJsGtNOUX9PdOt8LsW6MIlr84jW3oxqzPOepyOU/Q=
Subject key identifier:   D0:E5:79:A3:3A:74:1E:42:F9:72:56:41:85:42:45:7E:BA:A8:A0:0B
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       019D273B37B2DB9C6A266ACFE4F9A271CBFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0EA1
Signing time:             Wed 25 Mar 2026 23:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:25 +0000
Files and hashes:         1: 0_S3LGHLWDp1h8fEUl2LKrXeEIw.roa (hash: EPbNdShM4Uw0lIhiy3D/2WyOBzLdRNaJX6sNcM+CIi4=)
                          2: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (hash: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM=)
                          3: LgD5htJGPPhQqKRT3OXosm95CvA.roa (hash: oCLNTeRXkZO9pSz62dS9ZHRdid9Os6l7QArra7xL/Dg=)
                          4: WM9dDCzCe6gGu2ODAykACZrFrbA.roa (hash: 4IvyYiGqHBx7zs5uBUW79nDrwRTJcNSRaHg9JrlQ3jo=)
                          5: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
                          6: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: MkIuKfhE1MPrJZLj8DYFlFefKgQ03uafz+5+5EfcyKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:37:b2:db:9c:6a:26:6a:cf:e4:f9:a2:71:cb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Mar 25 23:01:25 2026 GMT
            Not After : Mar 26 23:01:25 2026 GMT
        Subject: CN=d0e579a33a741e42f97256418542457ebaa8a00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:d2:28:1a:92:c9:b8:b9:f8:ec:3e:2f:18:
                    22:4c:7c:98:ed:20:1e:e1:1f:57:dd:d3:52:43:8a:
                    05:b8:74:a7:63:be:a4:d3:3f:7f:55:f6:9f:88:f3:
                    f6:2f:4a:a3:48:f8:91:a7:fa:a5:00:3e:25:ca:41:
                    08:d6:b6:eb:16:42:37:83:82:bc:f7:88:5d:99:a6:
                    ee:47:21:7f:fc:88:15:bc:0f:df:92:bd:f1:80:d0:
                    a5:76:26:d1:f2:cb:e7:ff:be:b0:c6:db:cf:7f:9c:
                    18:53:9b:db:eb:cc:f5:86:c0:77:d0:a4:a8:5d:c6:
                    8c:4a:6a:1e:a9:6b:f9:d5:8d:1e:dd:18:f8:36:01:
                    6e:2d:9d:78:c9:a4:6f:9e:04:89:a0:20:71:1b:37:
                    56:02:37:1c:7a:f4:1d:86:64:9d:fe:13:43:c4:04:
                    89:37:b3:a2:c9:8d:1c:47:c1:4c:6f:4e:11:ca:a5:
                    7b:bf:ae:86:78:4c:5c:24:06:08:5a:5b:a2:76:c3:
                    f0:43:ab:8d:bd:c2:88:c8:16:24:54:b8:4c:38:6b:
                    d4:3f:6d:7d:25:54:3a:24:07:7b:0a:2f:ea:7a:e0:
                    b9:ca:c6:2b:dd:51:18:69:e0:e3:aa:2d:29:8b:86:
                    24:2a:eb:f7:5d:40:da:29:8d:ff:09:f4:db:08:57:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E5:79:A3:3A:74:1E:42:F9:72:56:41:85:42:45:7E:BA:A8:A0:0B
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:6c:9a:0b:6e:2c:64:25:51:e0:5e:cf:5c:24:12:76:97:
         bd:c9:cc:89:0b:dd:4b:c0:31:c0:cd:5f:ef:a4:04:7c:96:66:
         0b:a9:9c:39:91:00:59:b9:95:86:a0:2d:82:b2:0e:21:2d:76:
         26:f1:4b:49:0e:56:e6:6b:18:25:ea:c3:7c:7b:82:fb:ff:9e:
         46:a5:bd:49:71:93:2f:78:a0:f8:1f:13:a3:0e:f4:11:7e:20:
         e1:c2:1c:79:7e:ca:fa:9c:44:31:87:9d:98:47:74:cb:2a:70:
         1f:50:36:91:23:72:be:49:9f:dd:d3:ac:e6:67:51:04:f3:d7:
         21:0b:49:0f:18:5d:d0:c5:9b:ff:17:fb:a6:63:8e:bd:9f:ae:
         e7:1f:05:b8:21:13:18:cc:40:af:05:0d:56:15:89:c4:2a:f1:
         f5:6e:45:df:48:2e:30:81:66:6f:a2:91:48:34:71:65:9c:3e:
         fc:63:62:8b:b7:e7:4a:39:c0:18:24:ec:d0:42:15:44:51:1f:
         d6:4d:c7:1a:77:4b:c3:e6:1b:a4:49:dc:7f:d8:25:95:50:be:
         c8:94:98:d1:e3:f7:82:7f:d8:6b:57:95:9d:5c:79:b1:2f:bb:
         11:9c:7f:a4:ba:05:2f:d6:60:3a:40:71:f0:b4:fb:f7:6d:86:
         83:bc:85:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzey25xqJmrP5Pmiccv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1
NzcyMTMwHhcNMjYwMzI1MjMwMTI1WhcNMjYwMzI2MjMwMTI1WjAzMTEwLwYDVQQD
EyhkMGU1NzlhMzNhNzQxZTQyZjk3MjU2NDE4NTQyNDU3ZWJhYThhMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjSKBqSybi5+Ow+LxgiTHyY7SAe
4R9X3dNSQ4oFuHSnY76k0z9/VfafiPP2L0qjSPiRp/qlAD4lykEI1rbrFkI3g4K8
94hdmabuRyF//IgVvA/fkr3xgNCldibR8svn/76wxtvPf5wYU5vb68z1hsB30KSo
XcaMSmoeqWv51Y0e3Rj4NgFuLZ14yaRvngSJoCBxGzdWAjccevQdhmSd/hNDxASJ
N7OiyY0cR8FMb04RyqV7v66GeExcJAYIWluidsPwQ6uNvcKIyBYkVLhMOGvUP219
JVQ6JAd7Ci/qeuC5ysYr3VEYaeDjqi0pi4YkKuv3XUDaKY3/CfTbCFfWwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDleaM6dB5C+XJWQYVCRX66qKALMB8GA1UdIwQY
MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt
YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0
LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNlsmgtu
LGQlUeBez1wkEnaXvcnMiQvdS8AxwM1f76QEfJZmC6mcOZEAWbmVhqAtgrIOIS12
JvFLSQ5W5msYJerDfHuC+/+eRqW9SXGTL3ig+B8Tow70EX4g4cIceX7K+pxEMYed
mEd0yypwH1A2kSNyvkmf3dOs5mdRBPPXIQtJDxhd0MWb/xf7pmOOvZ+u5x8FuCET
GMxArwUNVhWJxCrx9W5F30guMIFmb6KRSDRxZZw+/GNii7fnSjnAGCTs0EIVRFEf
1k3HGndLw+YbpEncf9gllVC+yJSY0eP3gn/Ya1eVnVx5sS+7EZx/pLoFL9ZgOkBx
8LT7922Gg7yFuw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:31 2026 by rpki-client