Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          ixpaS6dKH0eNEpiaj9nvewe9v3k7o0SaPRS57eyVabg=
Subject key identifier:   BB:32:3A:0C:67:30:61:8F:8D:1E:1B:80:D6:DC:B9:D1:25:97:DA:8C
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       019D29CE9EFEFC15BFFE8A2410181F035640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          0FBF
Signing time:             Thu 26 Mar 2026 11:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:39 +0000
Files and hashes:         1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
                          2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: S4V/Ybc/Y8Fa7Urmhs9O4BgV275UVhrdosva6JLxq8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:9e:fe:fc:15:bf:fe:8a:24:10:18:1f:03:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Mar 26 11:01:39 2026 GMT
            Not After : Mar 27 11:01:39 2026 GMT
        Subject: CN=bb323a0c6730618f8d1e1b80d6dcb9d12597da8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:a6:72:1c:75:d7:a0:89:ea:81:8b:7c:ca:
                    51:f3:90:01:7c:ea:ce:c5:86:53:8e:c4:37:13:3a:
                    85:d3:11:8c:84:39:59:3c:5b:19:1f:dd:2f:d2:58:
                    5d:d0:9f:3e:e9:2c:d2:e4:3f:23:25:7d:c6:39:51:
                    98:c7:94:5d:85:ce:04:76:c5:48:ad:b9:7a:a1:1a:
                    30:2f:d0:43:e1:1a:c6:52:c6:25:cf:a0:84:19:86:
                    7d:76:47:89:76:31:90:4c:bb:7f:f7:90:94:8f:6e:
                    5f:b3:19:2b:49:fb:44:22:b8:8a:71:0a:12:a2:7b:
                    26:b5:6d:30:13:e1:5b:00:56:d6:9c:5b:78:4a:71:
                    8a:b4:9f:da:eb:ef:6c:d3:b6:7d:fb:05:c7:4d:27:
                    88:ab:cb:f3:8b:8d:d6:c9:22:86:a6:ee:94:22:6c:
                    30:db:e8:c3:30:8d:5d:e9:9a:9a:52:96:fd:4e:e7:
                    ad:47:69:5c:8f:71:b4:9b:cd:39:81:e4:f1:6f:f2:
                    13:41:3e:2b:05:8d:86:f5:9b:fc:33:b1:8f:81:31:
                    80:e8:74:95:5e:d3:2e:ae:07:19:71:f7:0f:34:13:
                    c6:c0:f9:bc:d6:18:39:2e:1b:23:fc:99:4f:b9:64:
                    a9:6f:56:94:09:3a:62:db:e2:7c:76:e2:30:05:9a:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:3A:0C:67:30:61:8F:8D:1E:1B:80:D6:DC:B9:D1:25:97:DA:8C
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:dc:c5:9b:d0:d9:a5:cb:5f:b2:a3:b6:c8:34:76:64:c1:
         15:15:6c:c8:7c:1e:dd:dc:b1:87:c0:28:ea:84:1d:fa:24:4f:
         0f:88:e7:0c:d1:cf:ea:f9:b6:ad:3d:dd:da:f1:e0:fd:68:a6:
         c3:3e:40:73:02:44:c1:60:96:5b:42:09:27:53:61:0a:2e:19:
         c7:04:64:ba:58:18:1a:e2:cb:f3:b1:b3:f1:70:ee:c3:5d:c3:
         cf:19:dc:f9:ac:99:f8:6b:de:84:41:50:5b:8a:32:58:2f:39:
         48:76:b6:b0:fe:95:11:c3:5f:69:5a:16:f8:c3:b3:60:47:82:
         72:2b:f8:6a:08:57:50:38:3d:c8:25:47:6f:82:43:c9:a4:91:
         bf:6d:06:00:b3:6f:2f:f5:7c:e9:24:e7:9d:df:38:f1:d0:cf:
         57:64:21:0a:a2:fe:a1:01:ae:e5:fc:01:34:f9:e9:f8:55:b6:
         10:98:fa:09:ed:c1:88:b5:d5:82:8b:51:92:5c:f4:69:1c:f1:
         88:fc:9a:05:7a:49:7f:7a:09:d0:b1:65:60:95:29:a7:e6:b7:
         e9:ea:38:59:b2:0d:ca:09:e1:62:2e:4a:3c:e4:66:16:7e:93:
         c6:a8:a9:51:99:03:c9:e5:7a:10:db:17:1a:db:6c:3c:4f:af:
         16:4c:06:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzp7+/BW//ookEBgfA1ZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5
MDJmOTgwHhcNMjYwMzI2MTEwMTM5WhcNMjYwMzI3MTEwMTM5WjAzMTEwLwYDVQQD
EyhiYjMyM2EwYzY3MzA2MThmOGQxZTFiODBkNmRjYjlkMTI1OTdkYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOqmchx116CJ6oGLfMpR85ABfOrO
xYZTjsQ3EzqF0xGMhDlZPFsZH90v0lhd0J8+6SzS5D8jJX3GOVGYx5Rdhc4EdsVI
rbl6oRowL9BD4RrGUsYlz6CEGYZ9dkeJdjGQTLt/95CUj25fsxkrSftEIriKcQoS
onsmtW0wE+FbAFbWnFt4SnGKtJ/a6+9s07Z9+wXHTSeIq8vzi43WySKGpu6UImww
2+jDMI1d6ZqaUpb9TuetR2lcj3G0m805geTxb/ITQT4rBY2G9Zv8M7GPgTGA6HSV
XtMurgcZcfcPNBPGwPm81hg5Lhsj/JlPuWSpb1aUCTpi2+J8duIwBZqiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsyOgxnMGGPjR4bgNbcudEll9qMMB8GA1UdIwQY
MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt
OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj
LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKTcxZvQ
2aXLX7Kjtsg0dmTBFRVsyHwe3dyxh8Ao6oQd+iRPD4jnDNHP6vm2rT3d2vHg/Wim
wz5AcwJEwWCWW0IJJ1NhCi4ZxwRkulgYGuLL87Gz8XDuw13Dzxnc+ayZ+GvehEFQ
W4oyWC85SHa2sP6VEcNfaVoW+MOzYEeCciv4aghXUDg9yCVHb4JDyaSRv20GALNv
L/V86STnnd848dDPV2QhCqL+oQGu5fwBNPnp+FW2EJj6Ce3BiLXVgotRklz0aRzx
iPyaBXpJf3oJ0LFlYJUpp+a36eo4WbINygnhYi5KPORmFn6TxqipUZkDyeV6ENsX
GttsPE+vFkwG3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:59 2026 by rpki-client