Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          6DCihPq323aq92A3FGiyhiz04PgPzVNAFpxzz7dSj9g=
Subject key identifier:   7D:0F:18:68:FD:6D:1E:65:5F:D0:20:B5:52:27:0B:24:1B:D2:EB:B4
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019D24DE8BBF30C950E5AAD79731038F238C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          17DB
Signing time:             Wed 25 Mar 2026 12:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 12:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 12:00:57 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: 6Icb+hjNXvpuIczodvxpt9QPAvfygDrNYETpHbsE1Hc=)
                          2: YFM3OR80uMxXBvo7d01mGQqdTak.asa (hash: OUuOkx0VK1NKbygTu3e1bb1UITQTKF8W3QKqUov9Zmk=)
                          3: YzrXnq3vRorLDkTNpUF7ED1XPXE.roa (hash: akkM/3QksJnCzoJ9FHhEn+9ohX+WOVP8QHjLBNNOvGc=)
                          4: aYEe0Wp6s-0vMrsmI0r1Am-aAmE.roa (hash: 0zIQeQUHMUd4XTm26NFK/GYzSa6prZHKRHgzCL5iipE=)
                          5: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (hash: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI=)
                          6: mIcG_kEYZC1jyRE_dH-HaI-yzCY.roa (hash: 7aEUk3f39asrdQDlVo3nL7Bci/VYA+D2BlsnqVXZqDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:de:8b:bf:30:c9:50:e5:aa:d7:97:31:03:8f:23:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Mar 25 12:00:57 2026 GMT
            Not After : Mar 26 12:00:57 2026 GMT
        Subject: CN=7d0f1868fd6d1e655fd020b552270b241bd2ebb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:e7:3f:ca:1e:f8:5c:39:28:c2:aa:30:43:
                    df:47:86:f0:fb:76:dc:8d:ec:ab:1f:c0:bc:aa:ef:
                    3a:bb:a2:91:ad:7a:0b:ec:60:79:dd:66:f5:88:dd:
                    4a:a1:00:0c:07:6d:bf:3a:75:20:a7:4c:93:d9:a4:
                    5d:fe:c8:0d:a6:d8:43:a1:71:1a:e8:3d:1b:8d:03:
                    2e:a1:ce:28:3c:c7:b1:f7:cd:7b:ea:4a:e7:81:f5:
                    54:30:53:c7:63:df:d7:13:b5:99:22:3d:5f:7b:30:
                    cd:26:da:65:02:87:12:23:ae:42:21:a4:be:0e:03:
                    a5:60:11:03:e3:4c:4d:af:40:f6:34:74:09:0e:af:
                    26:fe:67:de:f1:cc:86:e7:38:4b:f2:6c:4d:0a:0f:
                    99:3f:58:b1:9f:93:62:92:d7:a2:aa:48:9d:97:d8:
                    e6:d9:d7:5c:7d:bc:33:3c:1f:e4:e2:68:16:6c:db:
                    9d:1e:a3:a2:79:19:d0:94:3b:17:86:02:24:41:06:
                    86:bb:91:f9:97:d4:6d:7c:67:9d:a8:1a:14:4b:3a:
                    ad:3e:d2:88:37:23:0c:29:52:b0:30:97:e8:02:db:
                    01:d9:a3:9c:41:a7:ed:fc:26:03:04:b1:ce:fc:b8:
                    5f:c7:08:f4:5b:00:63:cc:09:0f:32:d2:b1:a5:cb:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:18:68:FD:6D:1E:65:5F:D0:20:B5:52:27:0B:24:1B:D2:EB:B4
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:15:12:61:b7:38:3e:8b:ab:2a:31:c0:d7:45:b5:3d:ab:
         b3:13:41:6c:3e:d7:e4:24:b0:13:c2:db:dc:f5:aa:66:18:2a:
         5c:ce:9d:cc:37:98:b7:68:b4:44:17:ee:87:dd:ab:2b:ee:01:
         57:0a:39:32:07:db:ee:76:6a:78:a0:61:24:de:d7:ba:98:f4:
         90:3b:0c:66:8c:3d:8b:11:d4:f3:bf:cb:3a:b1:a8:33:ec:b6:
         60:10:09:0b:1a:77:5a:90:2b:95:05:c0:eb:35:2a:04:55:9a:
         db:20:df:2c:3e:32:9d:3d:bc:a8:c6:b6:91:73:0e:09:e4:86:
         66:77:e5:11:50:68:ff:31:18:c4:58:58:8f:24:8e:49:af:12:
         72:04:ff:16:e9:a9:b1:00:5b:53:89:54:da:1a:0d:7f:95:ad:
         e9:24:68:4c:13:d4:48:78:6d:67:bd:ff:ee:f6:67:43:5b:41:
         4c:64:43:cb:9e:91:c0:63:9a:b9:ef:0c:8e:aa:10:7b:88:79:
         5e:da:48:d2:c7:d1:fc:b5:56:08:3f:29:65:89:a6:06:33:86:
         3d:57:7c:d7:3e:5c:10:4c:cc:7d:d3:91:b8:c7:b0:12:c7:d4:
         92:b3:8b:75:c7:74:c3:9f:69:e6:1b:42:09:5b:1b:eb:72:c5:
         1b:c9:57:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3ou/MMlQ5arXlzEDjyOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl
YTk3NGUwHhcNMjYwMzI1MTIwMDU3WhcNMjYwMzI2MTIwMDU3WjAzMTEwLwYDVQQD
Eyg3ZDBmMTg2OGZkNmQxZTY1NWZkMDIwYjU1MjI3MGIyNDFiZDJlYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWXnP8oe+Fw5KMKqMEPfR4bw+3bc
jeyrH8C8qu86u6KRrXoL7GB53Wb1iN1KoQAMB22/OnUgp0yT2aRd/sgNpthDoXEa
6D0bjQMuoc4oPMex98176krngfVUMFPHY9/XE7WZIj1fezDNJtplAocSI65CIaS+
DgOlYBED40xNr0D2NHQJDq8m/mfe8cyG5zhL8mxNCg+ZP1ixn5Nikteiqkidl9jm
2ddcfbwzPB/k4mgWbNudHqOieRnQlDsXhgIkQQaGu5H5l9RtfGedqBoUSzqtPtKI
NyMMKVKwMJfoAtsB2aOcQaft/CYDBLHO/Lhfxwj0WwBjzAkPMtKxpcuSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0PGGj9bR5lX9AgtVInCyQb0uu0MB8GA1UdIwQY
MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt
YmE2NDVmMTk5MTVhLzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh
LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbMVEmG3
OD6LqyoxwNdFtT2rsxNBbD7X5CSwE8Lb3PWqZhgqXM6dzDeYt2i0RBfuh92rK+4B
Vwo5Mgfb7nZqeKBhJN7Xupj0kDsMZow9ixHU87/LOrGoM+y2YBAJCxp3WpArlQXA
6zUqBFWa2yDfLD4ynT28qMa2kXMOCeSGZnflEVBo/zEYxFhYjySOSa8ScgT/Fump
sQBbU4lU2hoNf5Wt6SRoTBPUSHhtZ73/7vZnQ1tBTGRDy56RwGOaue8MjqoQe4h5
XtpI0sfR/LVWCD8pZYmmBjOGPVd81z5cEEzMfdORuMewEsfUkrOLdcd0w59p5htC
CVsb63LFG8lXMw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:22 2026 by rpki-client