Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File:                     6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier:          Ue0OzCfDTiONx7mPRtxGH9So/ybHxqDgR+gWwMPcdks=
Subject key identifier:   63:C8:DC:D9:08:C7:2E:53:8C:21:4A:6C:B5:73:31:3E:CD:43:FF:24
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer:       /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial:       019D37BFEF0189E35F1AC1862739324DC470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 04:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:18 +0000
Files and hashes:         1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: CZTHkx0Mx2aDj0QscqaqgWRXHFOpBWD5B0/kCmWwbGs=)
                          2: HCSkn_s79dVRLP0NsGdsyRp7U8s.roa (hash: vA+6CL2dZEJQx3L3PcyWjNM/CFH05g+lZ0pmunKFANw=)
                          3: zXmC5b7nH6itAjao6-wWOfJxl_A.roa (hash: jE99E8ty9qFkTA0vxf9N6NqHRrg3u7LBy0fCqZ+S/uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:ef:01:89:e3:5f:1a:c1:86:27:39:32:4d:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
        Validity
            Not Before: Mar 29 04:00:18 2026 GMT
            Not After : Mar 30 04:00:18 2026 GMT
        Subject: CN=63c8dcd908c72e538c214a6cb573313ecd43ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:56:fb:8d:4d:51:7e:c0:81:f7:5c:47:6e:
                    07:01:5d:18:06:b4:76:87:63:f6:6a:af:a4:8b:2a:
                    b3:31:cf:b8:22:1f:86:33:99:c1:21:a9:61:3f:46:
                    23:53:b0:a1:eb:c0:2e:3e:76:5d:9c:d1:e8:e6:3c:
                    8e:02:86:ca:f4:b6:dd:76:93:ee:d9:6f:88:6c:1e:
                    92:aa:bf:e0:ed:37:22:9f:9e:0b:e8:be:4d:bc:c8:
                    ec:40:61:2c:a3:91:13:03:e9:46:32:72:4c:fc:be:
                    6e:e3:5d:47:12:a9:47:79:90:6a:fe:e3:24:71:63:
                    20:72:1e:3f:c5:22:49:aa:41:83:a2:9e:11:8c:ab:
                    c7:17:f2:74:1f:ae:48:e6:fc:6d:90:00:bd:b9:4f:
                    36:8f:93:63:3c:e9:9f:51:f1:bb:82:7e:26:c3:9b:
                    31:59:8a:8a:93:3b:5f:de:2f:8d:5b:30:37:0a:03:
                    e2:3f:ff:c9:fe:98:a9:a4:fe:aa:22:39:3e:2a:cd:
                    7d:70:ce:7b:8e:d7:aa:f8:84:fa:3c:5f:74:da:79:
                    44:0f:dd:5e:ef:04:13:65:b5:30:d4:63:26:5f:1d:
                    f1:30:05:e1:19:b5:1d:e4:a3:6f:cd:bb:62:4d:2a:
                    95:ba:ae:f6:a3:0b:e4:a9:9e:ac:df:62:cc:c2:96:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:DC:D9:08:C7:2E:53:8C:21:4A:6C:B5:73:31:3E:CD:43:FF:24
            X509v3 Authority Key Identifier:
                keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b7:d9:4d:a0:94:21:22:da:65:cd:39:68:33:5f:b4:5e:f2:
         ef:b3:e5:b0:0b:e3:dd:c4:2a:b5:fd:a5:50:77:0d:67:d8:34:
         08:0d:14:af:d3:79:df:d0:b1:08:ed:46:7e:07:64:eb:9a:04:
         6c:42:9e:63:ba:e4:53:97:cb:aa:15:f9:91:5e:17:49:6e:39:
         2c:9e:26:ae:49:14:83:e0:d7:af:aa:33:32:db:33:66:4f:7f:
         9d:3b:f9:f2:88:98:91:e5:66:05:9a:9d:1a:19:4c:2f:d9:e4:
         cb:dc:49:b3:fb:c5:4d:c1:1c:fd:6b:2c:bd:42:57:d9:3c:0b:
         63:a8:65:b2:47:8d:73:ab:71:3f:cb:91:dd:82:7a:87:b1:a6:
         22:9d:6e:7a:61:24:2f:2f:ca:1d:d8:3e:dd:92:4e:c8:91:78:
         89:ff:83:98:34:32:88:22:ba:37:18:38:d4:37:90:75:e9:bf:
         ae:36:71:87:5a:6f:7b:ff:b3:6a:3a:75:95:f0:fb:fc:91:e7:
         74:89:e7:08:e4:68:50:ba:e8:7e:e2:5c:2c:4c:87:32:d1:fb:
         96:41:ae:77:ed:2d:1e:49:33:c4:f2:23:cb:e2:dc:2f:d1:ff:
         73:b4:3c:00:67:d1:11:7e:c9:1f:68:2f:41:9a:90:be:f8:8c:
         a8:dc:b2:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v+8BieNfGsGGJzkyTcRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDA2MmE5NjlkMjE0MmJiODUwNmE1NzExODBiNDViZDBm
YWI5MzQwHhcNMjYwMzI5MDQwMDE4WhcNMjYwMzMwMDQwMDE4WjAzMTEwLwYDVQQD
Eyg2M2M4ZGNkOTA4YzcyZTUzOGMyMTRhNmNiNTczMzEzZWNkNDNmZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1W+41NUX7AgfdcR24HAV0YBrR2
h2P2aq+kiyqzMc+4Ih+GM5nBIalhP0YjU7Ch68AuPnZdnNHo5jyOAobK9LbddpPu
2W+IbB6Sqr/g7Tcin54L6L5NvMjsQGEso5ETA+lGMnJM/L5u411HEqlHeZBq/uMk
cWMgch4/xSJJqkGDop4RjKvHF/J0H65I5vxtkAC9uU82j5NjPOmfUfG7gn4mw5sx
WYqKkztf3i+NWzA3CgPiP//J/pippP6qIjk+Ks19cM57jteq+IT6PF902nlED91e
7wQTZbUw1GMmXx3xMAXhGbUd5KNvzbtiTSqVuq72owvkqZ6s32LMwpYjqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPI3NkIxy5TjCFKbLVzMT7NQ/8kMB8GA1UdIwQY
MBaAFOjQYqlp0hQruFBqVxGAtFvQ+rk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQt
NThiNmE1Nzg0YWI3LzEvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQtNThiNmE1Nzg0YWI3
LzEvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrfZTaCU
ISLaZc05aDNftF7y77PlsAvj3cQqtf2lUHcNZ9g0CA0Ur9N539CxCO1Gfgdk65oE
bEKeY7rkU5fLqhX5kV4XSW45LJ4mrkkUg+DXr6ozMtszZk9/nTv58oiYkeVmBZqd
GhlML9nky9xJs/vFTcEc/WssvUJX2TwLY6hlskeNc6txP8uR3YJ6h7GmIp1uemEk
Ly/KHdg+3ZJOyJF4if+DmDQyiCK6Nxg41DeQdem/rjZxh1pve/+zajp1lfD7/JHn
dInnCORoULrofuJcLEyHMtH7lkGud+0tHkkzxPIjy+LcL9H/c7Q8AGfREX7JH2gv
QZqQvviMqNyyqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:36 2026 by rpki-client