Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          D/o7I/bmc1v687+iIAYwKMh4reFNWbQtEmrBB54xI1U=
Subject key identifier:   F9:30:00:E8:92:21:D7:47:9E:13:75:E7:27:D3:3A:4E:E0:36:42:DE
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       019D389C3D1FB50635EFBFDF4B02418B6262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          0710
Signing time:             Sun 29 Mar 2026 08:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:56 +0000
Files and hashes:         1: 1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa (hash: HK0T1idnRlHMenIEf+1HtX704o9MA+zk5Uce2Rn+7+s=)
                          2: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: 9NfDjImG2DdzjVIF/6EfzGZZMQVBOaYQzn95IIjvHr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:3d:1f:b5:06:35:ef:bf:df:4b:02:41:8b:62:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Mar 29 08:00:56 2026 GMT
            Not After : Mar 30 08:00:56 2026 GMT
        Subject: CN=f93000e89221d7479e1375e727d33a4ee03642de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:e6:a0:04:ae:e0:77:5a:80:34:fd:a9:ac:
                    30:74:98:0f:e2:a0:13:73:2e:dd:ca:8b:43:c3:1e:
                    f6:6e:9d:b1:21:31:ff:9f:82:5b:7f:90:7e:64:50:
                    58:83:e3:7d:88:0f:bf:18:17:d1:f8:d9:ff:6d:28:
                    cf:b4:f7:78:03:97:18:75:f3:48:08:fc:9b:32:a0:
                    d7:a6:ad:53:60:f4:df:1b:2f:7f:49:98:0c:09:c7:
                    34:ad:4d:09:4e:b1:80:b2:04:44:e7:72:0f:ac:26:
                    92:5e:92:65:a0:64:79:3f:63:09:3b:e9:68:4e:b2:
                    ac:e3:ac:4c:94:fe:83:f3:4d:2f:c2:83:ba:ae:a2:
                    0f:04:7f:57:c0:c3:89:11:2e:e1:87:61:ec:6c:d9:
                    e8:bb:1d:a2:ea:32:7c:1c:d2:12:d9:6a:af:68:20:
                    79:4a:bf:64:89:1b:c3:f1:2a:38:5a:1e:9f:37:1c:
                    ef:90:33:40:42:f4:f1:5e:b3:d7:a7:b2:2a:f0:af:
                    1d:20:b5:5f:f4:f6:f7:0e:fe:84:2d:57:a7:a7:f3:
                    c1:0c:03:6b:c0:23:04:7c:31:6a:5a:07:1f:8d:e0:
                    45:32:aa:b1:ae:cc:52:aa:9b:ae:e5:ad:41:fb:17:
                    39:2a:de:f8:be:14:97:e8:a0:92:9e:3c:cf:b0:3e:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:00:E8:92:21:D7:47:9E:13:75:E7:27:D3:3A:4E:E0:36:42:DE
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:28:67:e7:81:13:5c:ce:19:9c:71:21:7a:03:f5:7d:72:
         f3:f8:4c:99:c5:42:88:87:e3:0d:32:c4:40:6b:f8:71:e9:57:
         95:b0:07:5c:e3:95:62:34:ab:df:c7:04:67:4c:bf:06:b4:74:
         fa:fe:b0:a9:b8:9c:5c:5e:69:d2:4c:d7:52:dd:89:78:1c:f1:
         54:2b:e7:2d:71:88:1f:56:f4:3c:54:19:0e:00:ca:74:bf:14:
         dc:af:69:ab:b6:0f:fd:fe:64:37:24:03:f0:52:6b:72:2d:79:
         77:3a:e2:ea:02:e5:8d:e2:41:b2:ba:7e:0c:e9:15:df:8f:91:
         34:ab:92:7b:60:0c:6b:3c:cf:eb:eb:95:21:4e:51:05:4a:bb:
         05:04:25:6c:b1:fe:5f:23:8e:39:d6:fc:19:84:63:be:e5:06:
         06:bb:cf:d5:22:64:e0:6a:d3:ff:21:a8:05:41:53:08:20:c1:
         ad:5a:7d:8f:39:32:29:3e:96:36:e2:70:c9:c9:77:c3:88:c0:
         a2:32:ca:5b:e0:61:6c:1d:49:49:9f:b6:ba:8c:d7:14:07:14:
         b8:33:5e:88:07:84:0d:b3:d9:da:9e:44:58:d4:51:cc:08:f6:
         56:f9:3b:bf:ae:09:a2:eb:00:69:93:20:d3:5d:86:77:6e:5b:
         8b:3a:4d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nD0ftQY177/fSwJBi2JiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzBiNWQ3ZDdjYWY3ZWY0ZDM1NTVjMGQ5MGU5NWQ3YmY4
NmU2MDYwHhcNMjYwMzI5MDgwMDU2WhcNMjYwMzMwMDgwMDU2WjAzMTEwLwYDVQQD
EyhmOTMwMDBlODkyMjFkNzQ3OWUxMzc1ZTcyN2QzM2E0ZWUwMzY0MmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M7moASu4HdagDT9qawwdJgP4qAT
cy7dyotDwx72bp2xITH/n4Jbf5B+ZFBYg+N9iA+/GBfR+Nn/bSjPtPd4A5cYdfNI
CPybMqDXpq1TYPTfGy9/SZgMCcc0rU0JTrGAsgRE53IPrCaSXpJloGR5P2MJO+lo
TrKs46xMlP6D800vwoO6rqIPBH9XwMOJES7hh2HsbNnoux2i6jJ8HNIS2WqvaCB5
Sr9kiRvD8So4Wh6fNxzvkDNAQvTxXrPXp7Iq8K8dILVf9Pb3Dv6ELVenp/PBDANr
wCMEfDFqWgcfjeBFMqqxrsxSqpuu5a1B+xc5Kt74vhSX6KCSnjzPsD64YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkwAOiSIddHnhN15yfTOk7gNkLeMB8GA1UdIwQY
MBaAFOjAtdfXyvfvTTVVwNkOlde/huYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEt
MzU4MjBmNTFjNTc4LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEtMzU4MjBmNTFjNTc4
LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/soZ+eB
E1zOGZxxIXoD9X1y8/hMmcVCiIfjDTLEQGv4celXlbAHXOOVYjSr38cEZ0y/BrR0
+v6wqbicXF5p0kzXUt2JeBzxVCvnLXGIH1b0PFQZDgDKdL8U3K9pq7YP/f5kNyQD
8FJrci15dzri6gLljeJBsrp+DOkV34+RNKuSe2AMazzP6+uVIU5RBUq7BQQlbLH+
XyOOOdb8GYRjvuUGBrvP1SJk4GrT/yGoBUFTCCDBrVp9jzkyKT6WNuJwycl3w4jA
ojLKW+BhbB1JSZ+2uozXFAcUuDNeiAeEDbPZ2p5EWNRRzAj2Vvk7v64JousAaZMg
012Gd25bizpN3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:24 2026 by rpki-client