Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
File:                     6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft (raw, json)
Hash identifier:          GspDeTrDehqLbKOiujvJYlfK+G2pyA7Sc/sZ807Ogm0=
Subject key identifier:   9F:68:90:61:8D:56:58:FA:3F:91:8F:10:49:2D:D5:85:05:58:EA:F6
Authority key identifier: E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
Certificate issuer:       /CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
Certificate serial:       019D25F1EDF4F85B63AE63229013EBFAF683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
Manifest number:          29
Signing time:             Wed 25 Mar 2026 17:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:45 +0000
Files and hashes:         1: 6RLqS0VIgIsN3V0yM0B0QaujAag.asa (hash: uUr/vp85N4XS3S8eyQsn/vKnyBqXe73xryosUfkTWdI=)
                          2: 6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl (hash: NdB0DChN42khfH+UY+1apZsqyZkjw6RvNx9OmxQl6R8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:ed:f4:f8:5b:63:ae:63:22:90:13:eb:fa:f6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
        Validity
            Not Before: Mar 25 17:01:45 2026 GMT
            Not After : Mar 26 17:01:45 2026 GMT
        Subject: CN=9f6890618d5658fa3f918f10492dd5850558eaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:d0:99:28:65:5a:1f:98:18:7e:63:af:83:
                    90:5c:b5:b3:81:b8:43:4a:a3:30:9a:82:4a:d5:16:
                    48:a5:7d:46:97:7f:6f:b2:d5:4f:d5:f7:d6:3e:61:
                    c1:66:1b:23:f3:8e:d5:2d:5a:41:b6:b2:1c:9d:6d:
                    2c:da:cc:86:17:21:a8:a6:24:6e:17:dc:e5:c8:d0:
                    02:98:05:7d:66:e7:1e:b7:8d:98:ab:38:ac:2c:fc:
                    d6:02:e6:2c:35:84:a7:a4:d0:ee:f0:83:14:76:95:
                    91:96:fc:2e:46:6e:f7:ec:56:7e:72:76:6c:f0:4b:
                    28:10:89:3c:e4:0e:50:54:ad:a5:84:55:ab:2d:0e:
                    88:23:59:1e:63:72:24:d2:9a:db:4f:80:e8:75:ae:
                    ec:cf:c7:9c:26:b3:b7:b7:25:0f:34:53:2c:69:e0:
                    b6:2a:dd:9e:d1:93:c2:4c:11:ee:4a:3e:cf:e4:8d:
                    17:0f:00:52:d6:3c:d4:f6:42:5e:3b:cc:66:55:cc:
                    a9:1c:50:cb:d4:cb:07:fa:39:40:d5:67:fa:4e:3a:
                    34:b7:a6:b2:bb:f3:f3:9d:4f:6b:3b:01:dc:4b:7b:
                    f4:74:d1:13:9c:ca:61:45:32:14:ac:b3:57:f6:55:
                    1c:19:9c:32:bf:5d:da:6f:6a:59:ac:53:1b:12:0f:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:90:61:8D:56:58:FA:3F:91:8F:10:49:2D:D5:85:05:58:EA:F6
            X509v3 Authority Key Identifier:
                keyid:E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ae:fa:0b:64:cf:f1:b8:3d:d7:0c:5c:d6:e8:2e:05:7d:fc:
         5e:51:fb:33:c3:b5:db:3f:70:71:47:97:02:23:ee:22:ee:82:
         cc:2c:23:98:bd:b6:c5:a3:9e:8c:ec:69:db:e8:b0:b8:db:48:
         89:30:43:11:82:d5:53:82:ce:cb:0f:ad:3b:9c:50:eb:df:bb:
         55:ca:36:a2:b6:2e:1f:ea:f2:df:8c:df:8e:d6:65:aa:06:0b:
         01:77:83:6f:35:7d:57:e6:58:c6:9d:5d:25:06:bf:33:fc:cb:
         21:32:d2:42:d9:5d:29:62:dc:44:64:46:63:a6:4a:15:1d:65:
         b1:e6:21:5f:61:0d:86:78:41:db:29:30:d2:1d:a8:2f:5d:55:
         64:6c:a7:8f:56:30:10:2e:5c:e9:70:5e:fe:da:f5:9b:c8:6c:
         d8:be:d6:47:c8:fc:43:fc:84:d4:0a:7e:31:3e:e8:64:dc:bc:
         64:bf:d3:de:55:be:c4:e2:aa:bb:0e:e9:e1:dd:34:d9:dd:0d:
         e2:6b:b8:ee:00:03:bc:91:e6:b8:54:bb:9b:8d:fe:c9:b7:7f:
         54:f8:3d:c2:44:d0:64:8b:c4:7f:55:58:a1:46:73:e1:51:42:
         98:71:3a:fd:60:4d:0a:69:52:40:f3:97:8d:e6:0c:62:8f:1b:
         75:bb:9f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8e30+FtjrmMikBPr+vaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NGQzZTM2Yjc1ZDcxMjJhMDg3ZDdiM2MwZmI5MmE2N2M5
Y2VkYjQwHhcNMjYwMzI1MTcwMTQ1WhcNMjYwMzI2MTcwMTQ1WjAzMTEwLwYDVQQD
Eyg5ZjY4OTA2MThkNTY1OGZhM2Y5MThmMTA0OTJkZDU4NTA1NThlYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eDQmShlWh+YGH5jr4OQXLWzgbhD
SqMwmoJK1RZIpX1Gl39vstVP1ffWPmHBZhsj847VLVpBtrIcnW0s2syGFyGopiRu
F9zlyNACmAV9Zucet42YqzisLPzWAuYsNYSnpNDu8IMUdpWRlvwuRm737FZ+cnZs
8EsoEIk85A5QVK2lhFWrLQ6II1keY3Ik0prbT4Doda7sz8ecJrO3tyUPNFMsaeC2
Kt2e0ZPCTBHuSj7P5I0XDwBS1jzU9kJeO8xmVcypHFDL1MsH+jlA1Wf6Tjo0t6ay
u/PznU9rOwHcS3v0dNETnMphRTIUrLNX9lUcGZwyv13ab2pZrFMbEg+7cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9okGGNVlj6P5GPEEkt1YUFWOr2MB8GA1UdIwQY
MBaAFOlNPja3XXEioIfXs8D7kqZ8nO20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlUwLU5yZGRjU0tnaDllendQdVNwbnljN2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYmM2M2UtZDcyMi00ZDA1LWIxYmYt
NGRhMTRkMmQ1OTFiLzEvNlUwLU5yZGRjU0tnaDllendQdVNwbnljN2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYmM2M2UtZDcyMi00ZDA1LWIxYmYtNGRhMTRkMmQ1OTFi
LzEvNlUwLU5yZGRjU0tnaDllendQdVNwbnljN2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK76C2TP
8bg91wxc1uguBX38XlH7M8O12z9wcUeXAiPuIu6CzCwjmL22xaOejOxp2+iwuNtI
iTBDEYLVU4LOyw+tO5xQ69+7Vco2orYuH+ry34zfjtZlqgYLAXeDbzV9V+ZYxp1d
JQa/M/zLITLSQtldKWLcRGRGY6ZKFR1lseYhX2ENhnhB2ykw0h2oL11VZGynj1Yw
EC5c6XBe/tr1m8hs2L7WR8j8Q/yE1Ap+MT7oZNy8ZL/T3lW+xOKquw7p4d002d0N
4mu47gADvJHmuFS7m43+ybd/VPg9wkTQZIvEf1VYoUZz4VFCmHE6/WBNCmlSQPOX
jeYMYo8bdbufuQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:15 2026 by rpki-client