Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File:                     1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier:          Pn5+yto+VPhRgG6PeHoTPC0euvk2dmNo2DCeNimU3xQ=
Subject key identifier:   9A:9B:4E:59:66:76:ED:37:43:BF:8F:08:D1:02:B5:77:C6:59:48:0E
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer:       /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial:       019D26CD83F03034B2D202699BDD3296B7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number:          1815
Signing time:             Wed 25 Mar 2026 21:01:36 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:36 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:36 +0000
Files and hashes:         1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: xw8+3hYV//UBVfYEqfm0Pd/YXC7r1siUlzp9Hqj3h3U=)
                          2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:83:f0:30:34:b2:d2:02:69:9b:dd:32:96:b7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
        Validity
            Not Before: Mar 25 21:01:36 2026 GMT
            Not After : Mar 26 21:01:36 2026 GMT
        Subject: CN=9a9b4e596676ed3743bf8f08d102b577c659480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:3a:c2:ed:db:4b:93:2b:04:37:ba:42:a7:
                    2d:49:62:6a:be:16:c5:af:5a:a6:a6:e3:27:b6:c1:
                    5d:c1:20:6f:e9:68:23:48:81:92:3e:75:a0:89:00:
                    b7:75:15:93:b6:cd:1d:33:8b:94:e0:bd:7f:d7:5d:
                    c4:f6:46:12:21:04:e5:86:a1:46:5b:a1:c1:ba:48:
                    69:9b:37:6f:27:aa:7e:26:47:7d:be:ec:c9:9c:6d:
                    42:bb:56:11:f8:f0:04:52:7b:29:eb:05:a3:07:f7:
                    b6:91:41:f4:09:3a:c7:4e:aa:51:38:38:95:09:88:
                    e9:71:d1:ed:0b:9a:b8:84:01:04:2c:6b:bb:d4:de:
                    08:18:01:22:55:3c:af:00:97:4c:3a:73:c4:bb:0f:
                    bc:53:28:2d:bf:33:d9:24:95:d9:2a:ec:12:40:cb:
                    38:03:aa:9a:e7:11:b5:2f:c1:fe:53:bf:3d:06:34:
                    66:2e:c0:5a:f8:fb:81:81:59:5a:89:6a:c8:46:a2:
                    1b:ce:f7:1a:ef:54:f8:83:06:c1:8f:ac:67:c9:0d:
                    ef:7e:c8:a3:25:86:c4:60:d7:e0:67:3c:69:c6:76:
                    f2:c2:eb:6b:e7:d5:03:f1:b0:bd:45:43:a4:a6:c3:
                    a3:75:73:8c:8f:ad:5c:0e:a8:cf:69:67:b6:0c:cd:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:4E:59:66:76:ED:37:43:BF:8F:08:D1:02:B5:77:C6:59:48:0E
            X509v3 Authority Key Identifier:
                keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:ab:b6:81:af:c3:68:94:67:ec:34:3c:bd:0d:b6:86:ac:
         89:f3:fd:d2:76:52:c9:89:4c:5a:ec:77:79:2f:64:7f:d6:7c:
         55:85:2b:10:09:12:a1:97:4a:19:bd:8f:14:32:83:80:5f:53:
         eb:c6:ce:d1:7b:c7:85:f9:ef:7b:e5:86:bb:fc:8c:13:fb:99:
         91:f8:e2:98:5b:b9:9f:fc:b7:b8:31:66:60:0b:58:4e:1b:db:
         51:5f:1c:e4:f3:8d:2a:68:bf:be:c4:75:e9:93:b8:65:ec:42:
         9a:02:6c:40:63:0a:e5:fe:2b:df:6c:45:c0:50:09:ca:68:24:
         70:87:4c:fb:1a:94:c9:2e:b9:b5:e0:4a:8f:4f:35:aa:c4:75:
         52:9d:e6:cb:5d:98:29:e6:dc:ea:96:4c:9e:40:62:04:9c:6d:
         c8:fb:45:62:8c:e7:9d:a3:f9:40:d0:a1:78:b5:5b:40:f2:17:
         32:b2:00:0b:04:ac:6c:7c:e5:1b:f5:15:d6:cc:c3:77:e9:b6:
         6c:0f:39:d8:36:96:43:5f:42:1a:a1:94:ca:d1:46:a2:18:fb:
         f5:78:6b:40:85:77:12:4a:6f:73:a2:b1:c7:0a:17:ca:03:fa:
         34:61:35:e7:f1:d0:3d:c8:32:7a:31:f6:29:97:f1:f0:01:60:
         5f:ab:7c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYPwMDSy0gJpm90ylrf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1
ODNlM2YwHhcNMjYwMzI1MjEwMTM2WhcNMjYwMzI2MjEwMTM2WjAzMTEwLwYDVQQD
Eyg5YTliNGU1OTY2NzZlZDM3NDNiZjhmMDhkMTAyYjU3N2M2NTk0ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2k6wu3bS5MrBDe6QqctSWJqvhbF
r1qmpuMntsFdwSBv6WgjSIGSPnWgiQC3dRWTts0dM4uU4L1/113E9kYSIQTlhqFG
W6HBukhpmzdvJ6p+Jkd9vuzJnG1Cu1YR+PAEUnsp6wWjB/e2kUH0CTrHTqpRODiV
CYjpcdHtC5q4hAEELGu71N4IGAEiVTyvAJdMOnPEuw+8UygtvzPZJJXZKuwSQMs4
A6qa5xG1L8H+U789BjRmLsBa+PuBgVlaiWrIRqIbzvca71T4gwbBj6xnyQ3vfsij
JYbEYNfgZzxpxnbywutr59UD8bC9RUOkpsOjdXOMj61cDqjPaWe2DM2zkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqbTllmdu03Q7+PCNECtXfGWUgOMB8GA1UdIwQY
MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt
NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0
LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu6rtoGv
w2iUZ+w0PL0NtoasifP90nZSyYlMWux3eS9kf9Z8VYUrEAkSoZdKGb2PFDKDgF9T
68bO0XvHhfnve+WGu/yME/uZkfjimFu5n/y3uDFmYAtYThvbUV8c5PONKmi/vsR1
6ZO4ZexCmgJsQGMK5f4r32xFwFAJymgkcIdM+xqUyS65teBKj081qsR1Up3my12Y
Kebc6pZMnkBiBJxtyPtFYoznnaP5QNCheLVbQPIXMrIACwSsbHzlG/UV1szDd+m2
bA852DaWQ19CGqGUytFGohj79XhrQIV3Ekpvc6KxxwoXygP6NGE15/HQPcgyejH2
KZfx8AFgX6t8Jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:06 2026 by rpki-client