Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          QEFFPyrcwM5dGlw7tNi64mqjhc/Df+cpz5J/0Fg2kgI=
Subject key identifier:   5C:9D:13:E4:F0:04:C7:4D:84:0F:15:2A:7D:A2:A5:E7:E5:33:DF:B0
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       019CE1EC6B6EA03FC426A31C2EDEFBE85F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          1863
Signing time:             Thu 12 Mar 2026 12:01:33 +0000
Manifest this update:     Thu 12 Mar 2026 12:01:33 +0000
Manifest next update:     Fri 13 Mar 2026 12:01:33 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: INAVlQ9KJqunJW1kBTSwfnntkzRT9ZCJVnSnO4QBuU0=)
                          2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 12:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:ec:6b:6e:a0:3f:c4:26:a3:1c:2e:de:fb:e8:5f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Mar 12 12:01:33 2026 GMT
            Not After : Mar 13 12:01:33 2026 GMT
        Subject: CN=5c9d13e4f004c74d840f152a7da2a5e7e533dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:45:2d:2c:3b:08:41:bc:b2:ab:e4:d0:1f:
                    12:0d:17:b2:ee:d4:cb:17:af:a8:4c:87:a1:c9:d3:
                    42:11:55:b2:58:b5:0f:92:66:7f:0a:9b:c6:e8:5f:
                    86:af:d9:ba:2e:d0:df:b7:b9:9d:7e:cf:6b:84:44:
                    4f:c9:bd:32:61:a9:85:ab:ce:62:19:91:a1:bb:24:
                    32:c5:ed:03:6f:b0:f4:7f:fc:ef:99:17:78:5a:68:
                    35:5e:db:97:29:8e:6b:18:47:e8:5c:4a:8c:b6:1a:
                    0c:e4:6b:d8:3a:9f:2c:4f:b2:47:0a:7f:ea:c2:56:
                    16:7b:5a:10:f2:cb:35:b9:ad:a9:11:20:b0:3e:6a:
                    a5:c3:a5:32:33:24:c5:0b:a8:1d:5a:4d:e3:46:33:
                    bd:c1:df:5f:06:d5:db:eb:04:e3:88:ba:66:76:a5:
                    d8:96:3b:f0:72:dc:30:9a:78:b8:05:fc:a0:a5:28:
                    e7:c5:ca:4e:9f:6d:94:0c:13:56:3c:e7:21:97:3f:
                    a5:f7:89:5f:f7:92:05:a7:d5:75:b1:a4:03:4a:ee:
                    a4:b0:ad:d1:c2:8f:7f:19:fa:c8:19:83:50:ea:b2:
                    3f:e6:08:a5:5a:bc:41:9b:a4:82:dd:80:5f:b1:9e:
                    5a:2d:7a:2e:d9:e9:2e:c8:7e:c8:f4:72:85:b6:53:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9D:13:E4:F0:04:C7:4D:84:0F:15:2A:7D:A2:A5:E7:E5:33:DF:B0
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:3d:66:f6:83:7a:00:de:e6:22:b7:a5:1f:cf:82:95:83:
         94:46:89:63:f0:63:da:30:0a:40:f3:e6:21:35:b0:18:a1:b3:
         81:99:8c:b2:e8:df:0c:2b:8d:d4:b9:c8:7d:05:51:e0:0e:94:
         f7:0a:73:48:c5:ae:cc:5f:56:21:3a:d7:fe:96:7c:56:8b:82:
         27:d8:7a:07:74:66:dd:29:51:ed:6b:f0:e4:26:e7:b8:5d:bd:
         bb:2c:a8:27:f7:9f:f8:29:d8:3f:8e:2e:b9:91:30:f7:f8:19:
         24:8b:95:57:8a:fa:fc:8c:dd:99:a7:fb:00:b7:76:38:0a:83:
         78:fd:4f:cd:05:41:1b:1d:30:86:f7:99:8a:ea:21:e9:ba:d7:
         c7:d7:16:a5:f0:59:2c:d1:4a:cb:d1:3a:6b:23:23:41:52:80:
         67:13:5a:2a:0a:4c:f9:af:0a:a8:b3:fa:25:00:ad:e7:71:e7:
         31:0f:44:ac:fc:3d:e3:f9:fe:e7:e7:50:e4:5d:c8:2b:e2:88:
         3a:b4:45:69:6c:5e:37:e0:75:1b:35:85:dc:2f:6a:68:91:25:
         d2:18:db:ec:5c:ca:5f:c0:f4:54:9f:eb:89:45:bc:2e:2f:2b:
         fb:34:50:df:b4:59:90:51:5e:bf:f5:11:6b:b8:fa:ee:19:87:
         6b:eb:8e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzh7GtuoD/EJqMcLt776F9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjYwMzEyMTIwMTMzWhcNMjYwMzEzMTIwMTMzWjAzMTEwLwYDVQQD
Eyg1YzlkMTNlNGYwMDRjNzRkODQwZjE1MmE3ZGEyYTVlN2U1MzNkZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmepFLSw7CEG8sqvk0B8SDRey7tTL
F6+oTIehydNCEVWyWLUPkmZ/CpvG6F+Gr9m6LtDft7mdfs9rhERPyb0yYamFq85i
GZGhuyQyxe0Db7D0f/zvmRd4Wmg1XtuXKY5rGEfoXEqMthoM5GvYOp8sT7JHCn/q
wlYWe1oQ8ss1ua2pESCwPmqlw6UyMyTFC6gdWk3jRjO9wd9fBtXb6wTjiLpmdqXY
ljvwctwwmni4BfygpSjnxcpOn22UDBNWPOchlz+l94lf95IFp9V1saQDSu6ksK3R
wo9/GfrIGYNQ6rI/5gilWrxBm6SC3YBfsZ5aLXou2ekuyH7I9HKFtlMnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFydE+TwBMdNhA8VKn2ipeflM9+wMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7c9ZvaD
egDe5iK3pR/PgpWDlEaJY/Bj2jAKQPPmITWwGKGzgZmMsujfDCuN1LnIfQVR4A6U
9wpzSMWuzF9WITrX/pZ8VouCJ9h6B3Rm3SlR7Wvw5CbnuF29uyyoJ/ef+CnYP44u
uZEw9/gZJIuVV4r6/Izdmaf7ALd2OAqDeP1PzQVBGx0whveZiuoh6brXx9cWpfBZ
LNFKy9E6ayMjQVKAZxNaKgpM+a8KqLP6JQCt53HnMQ9ErPw94/n+5+dQ5F3IK+KI
OrRFaWxeN+B1GzWF3C9qaJEl0hjb7FzKX8D0VJ/riUW8Li8r+zRQ37RZkFFev/UR
a7j67hmHa+uOqw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:18 2026 by rpki-client