Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          9OKOfhEtq89DwwxnFnVMQAo/cvyy4VvIgLZjCcnpgMc=
Subject key identifier:   81:67:1A:32:85:36:EE:DE:D7:16:DD:43:66:EF:41:29:2D:9C:5A:33
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019D26CCB69A064267C18018F020BD93804C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          17DC
Signing time:             Wed 25 Mar 2026 21:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:43 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: /dsCh9v/MG8WKOYLN92ePd/JB7uY0XxuMs4916oF50g=)
                          2: YFM3OR80uMxXBvo7d01mGQqdTak.asa (hash: OUuOkx0VK1NKbygTu3e1bb1UITQTKF8W3QKqUov9Zmk=)
                          3: YzrXnq3vRorLDkTNpUF7ED1XPXE.roa (hash: akkM/3QksJnCzoJ9FHhEn+9ohX+WOVP8QHjLBNNOvGc=)
                          4: aYEe0Wp6s-0vMrsmI0r1Am-aAmE.roa (hash: 0zIQeQUHMUd4XTm26NFK/GYzSa6prZHKRHgzCL5iipE=)
                          5: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (hash: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI=)
                          6: mIcG_kEYZC1jyRE_dH-HaI-yzCY.roa (hash: 7aEUk3f39asrdQDlVo3nL7Bci/VYA+D2BlsnqVXZqDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:b6:9a:06:42:67:c1:80:18:f0:20:bd:93:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Mar 25 21:00:43 2026 GMT
            Not After : Mar 26 21:00:43 2026 GMT
        Subject: CN=81671a328536eeded716dd4366ef41292d9c5a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:5b:35:e3:f8:ff:7c:15:5d:34:ec:68:9b:
                    b0:56:aa:af:e7:ff:8e:d6:b6:25:b4:6b:3c:b7:40:
                    60:9b:e2:d0:a2:e6:be:6d:1d:66:31:7c:18:22:c4:
                    43:86:f4:4d:83:1c:66:65:d8:e0:ca:67:74:cf:7c:
                    c7:88:3b:04:02:b7:ac:90:63:4f:37:d3:75:1c:91:
                    a4:33:d4:ca:e1:65:82:08:1e:a2:78:c0:f3:8a:37:
                    90:94:40:a9:42:96:c2:c2:ac:4e:c5:ea:6f:49:10:
                    4f:52:92:9d:cd:9f:ec:7e:36:b1:a3:62:03:d7:da:
                    a0:0c:bb:44:76:d7:75:43:e0:ca:74:37:41:96:90:
                    82:bc:b0:b0:9c:c3:71:d3:83:c9:4a:72:61:e0:ac:
                    47:2a:36:bd:cb:e8:39:6b:ad:bd:f9:10:fc:13:a7:
                    4e:5c:85:1b:7f:ab:d5:b1:3b:7a:ff:13:3c:1f:72:
                    a8:29:c4:68:6c:7b:5e:c7:84:32:5b:1f:c1:bb:f0:
                    8d:33:73:74:54:16:cd:df:8d:f5:a1:79:10:c4:12:
                    2d:0e:e4:09:f1:9c:79:34:52:6a:70:db:3f:25:3e:
                    4a:61:8a:3e:6b:5a:be:cc:b1:87:c0:a9:9b:52:dd:
                    29:e6:d9:3c:a8:e8:d8:f6:2a:19:02:94:1a:3b:0a:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:1A:32:85:36:EE:DE:D7:16:DD:43:66:EF:41:29:2D:9C:5A:33
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:9b:56:b8:31:3f:9d:ca:42:2a:71:77:07:d0:61:86:86:
         9d:2f:8e:2f:5d:59:6b:88:e1:6f:4e:5e:1c:f6:e6:cf:ce:8b:
         dd:85:29:27:58:87:6d:32:ff:7e:e0:9c:1f:5e:3f:0c:0a:f7:
         39:bb:35:7d:d5:e1:19:89:2a:03:6c:3c:10:3f:bc:2e:da:72:
         45:08:b4:c5:30:9f:58:0b:c5:29:44:8f:14:87:b2:4d:8a:e3:
         56:99:2e:24:a3:8a:68:81:4a:43:6f:d4:45:3c:5e:08:52:fd:
         b6:c8:a5:0d:03:59:39:76:ca:bb:0c:04:81:ce:e7:4b:1b:f2:
         44:83:7d:39:9b:dd:a0:5a:89:bf:29:43:5f:34:48:a0:23:41:
         ea:2d:fb:37:4c:46:18:1c:5f:12:a6:21:52:66:e9:fe:26:f2:
         12:1f:ab:14:db:b2:53:7a:29:5a:83:99:7f:d6:0d:b2:a8:b6:
         70:17:e7:ad:26:2e:a7:6d:37:51:04:c7:10:1e:cc:be:9d:38:
         2a:1f:8a:3a:9a:00:5e:87:de:91:34:6a:9c:42:c8:dc:43:6a:
         1c:3c:93:ef:20:32:0a:6c:f1:41:a4:10:96:70:c1:f5:ce:0f:
         6f:50:e4:55:24:ce:09:6d:4f:9c:5e:ee:8b:3a:49:fd:92:a8:
         3a:56:e5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzLaaBkJnwYAY8CC9k4BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl
YTk3NGUwHhcNMjYwMzI1MjEwMDQzWhcNMjYwMzI2MjEwMDQzWjAzMTEwLwYDVQQD
Eyg4MTY3MWEzMjg1MzZlZWRlZDcxNmRkNDM2NmVmNDEyOTJkOWM1YTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sNbNeP4/3wVXTTsaJuwVqqv5/+O
1rYltGs8t0Bgm+LQoua+bR1mMXwYIsRDhvRNgxxmZdjgymd0z3zHiDsEAreskGNP
N9N1HJGkM9TK4WWCCB6ieMDzijeQlECpQpbCwqxOxepvSRBPUpKdzZ/sfjaxo2ID
19qgDLtEdtd1Q+DKdDdBlpCCvLCwnMNx04PJSnJh4KxHKja9y+g5a629+RD8E6dO
XIUbf6vVsTt6/xM8H3KoKcRobHtex4QyWx/Bu/CNM3N0VBbN3431oXkQxBItDuQJ
8Zx5NFJqcNs/JT5KYYo+a1q+zLGHwKmbUt0p5tk8qOjY9ioZApQaOwq+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFnGjKFNu7e1xbdQ2bvQSktnFozMB8GA1UdIwQY
MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt
YmE2NDVmMTk5MTVhLzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh
LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy92bVrgx
P53KQipxdwfQYYaGnS+OL11Za4jhb05eHPbmz86L3YUpJ1iHbTL/fuCcH14/DAr3
Obs1fdXhGYkqA2w8ED+8LtpyRQi0xTCfWAvFKUSPFIeyTYrjVpkuJKOKaIFKQ2/U
RTxeCFL9tsilDQNZOXbKuwwEgc7nSxvyRIN9OZvdoFqJvylDXzRIoCNB6i37N0xG
GBxfEqYhUmbp/ibyEh+rFNuyU3opWoOZf9YNsqi2cBfnrSYup203UQTHEB7Mvp04
Kh+KOpoAXofekTRqnELI3ENqHDyT7yAyCmzxQaQQlnDB9c4Pb1DkVSTOCW1PnF7u
izpJ/ZKoOlblhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:10 2026 by rpki-client