Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File:                     6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier:          +1Fmwv5+vf6SD3aXSgpb7dqQ20OjmRC1nY/t2/NEFe8=
Subject key identifier:   1B:BE:C1:FA:F6:40:84:60:6E:FD:26:B9:AC:2B:18:82:AA:41:47:F0
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer:       /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial:       019D3752258EE0D2527A4968A753289025E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number:          0C0F
Signing time:             Sun 29 Mar 2026 02:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:23 +0000
Files and hashes:         1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: Bs4+FiKKMZchlZloJSVjzWlA2HY3R2eaevGVS95jKL0=)
                          2: RB0CxxdcJs_oaTv7g9xCVclpFO0.roa (hash: LNOS99kYHkha/eTI7I8FUJK8eUwKkoPBduqaOWXJJGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:25:8e:e0:d2:52:7a:49:68:a7:53:28:90:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
        Validity
            Not Before: Mar 29 02:00:23 2026 GMT
            Not After : Mar 30 02:00:23 2026 GMT
        Subject: CN=1bbec1faf64084606efd26b9ac2b1882aa4147f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:f9:f4:b8:c5:b5:65:56:13:b8:de:2c:dc:
                    e1:0d:d0:91:df:69:62:7d:ca:16:3c:e7:59:36:2f:
                    ec:cc:32:25:e7:8b:ec:c2:ef:da:17:5b:28:02:ba:
                    8f:ee:80:0e:c2:52:e7:2c:d7:11:3e:9d:61:b0:ed:
                    3a:9b:41:14:6e:04:10:8d:10:c3:a8:0c:37:d9:e5:
                    7f:6a:08:a2:e2:28:1c:f7:ee:01:b4:e4:a2:cf:2b:
                    03:dd:9d:91:55:be:fe:11:9b:1d:12:36:46:31:62:
                    4e:69:ca:85:ad:d3:cf:68:22:12:3a:61:f7:f2:a0:
                    d5:9d:f8:3a:22:5c:86:19:d9:ce:e1:29:f6:ea:03:
                    42:e1:25:1a:08:e4:c6:23:98:9a:9c:cd:51:1a:dd:
                    60:80:2c:bd:08:db:c0:d5:0e:d8:05:72:41:b8:c1:
                    9a:3a:f3:20:45:8f:bb:61:ac:5b:4b:d9:42:79:1e:
                    22:cd:70:9a:bf:0a:ad:c7:ee:b8:fb:bf:5b:ee:03:
                    9b:bd:ee:bc:37:85:9a:bc:f1:7d:06:00:84:99:da:
                    82:bd:a7:5c:e8:83:bc:aa:86:78:ca:fc:8c:f9:17:
                    76:d8:53:5e:c4:04:1b:c6:34:52:bd:61:ce:50:64:
                    ee:6a:42:62:1c:11:4a:6e:15:6c:3e:06:a6:04:77:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BE:C1:FA:F6:40:84:60:6E:FD:26:B9:AC:2B:18:82:AA:41:47:F0
            X509v3 Authority Key Identifier:
                keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:24:11:fd:75:84:c1:6a:fe:d9:a1:b2:1e:d3:9b:3b:72:92:
         a1:0a:14:99:4b:e6:5f:5c:86:90:04:30:c1:d5:e4:84:b9:e9:
         4f:dc:0f:29:ed:23:18:b5:53:9a:ea:92:5a:c0:98:d0:1b:8f:
         93:77:bc:70:ce:de:6b:9c:87:22:f6:31:4d:c3:ef:52:fa:ae:
         22:bf:17:a9:cf:57:3f:29:ca:1c:7b:4f:7e:d9:21:db:a2:0c:
         70:35:a1:a0:9f:29:e7:6a:04:21:63:77:87:2c:fa:19:3a:49:
         d7:10:0c:16:89:76:3b:df:e4:c9:61:4d:e7:7d:f7:bf:c6:7d:
         ea:67:9c:29:f6:d1:19:d8:93:e7:ec:e6:dc:35:88:32:9f:85:
         8e:b3:2e:38:86:fb:fe:dc:83:62:d1:5c:64:65:84:4a:a6:f1:
         04:59:07:0a:91:52:e5:01:6c:6c:1b:e4:92:1c:2a:52:c5:35:
         f8:40:21:5c:5a:c8:4b:05:a4:51:4b:c9:b9:97:b7:91:6a:5a:
         56:59:6a:72:01:08:74:ad:00:11:e5:83:6e:ef:70:90:6b:d6:
         06:99:6d:b6:ba:ab:62:da:9a:ed:49:73:39:0f:1a:29:8e:ae:
         bb:f6:41:1b:4f:a6:14:37:b1:0f:dd:03:29:bc:7e:20:d3:9a:
         92:61:88:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UiWO4NJSeklop1MokCXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTc5NTIwMWM3ZDNkOTNjZDJhMDg1ZGUzNjkyZWRkNzFi
NzcyNmQwHhcNMjYwMzI5MDIwMDIzWhcNMjYwMzMwMDIwMDIzWjAzMTEwLwYDVQQD
EygxYmJlYzFmYWY2NDA4NDYwNmVmZDI2YjlhYzJiMTg4MmFhNDE0N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur359LjFtWVWE7jeLNzhDdCR32li
fcoWPOdZNi/szDIl54vswu/aF1soArqP7oAOwlLnLNcRPp1hsO06m0EUbgQQjRDD
qAw32eV/agii4igc9+4BtOSizysD3Z2RVb7+EZsdEjZGMWJOacqFrdPPaCISOmH3
8qDVnfg6IlyGGdnO4Sn26gNC4SUaCOTGI5ianM1RGt1ggCy9CNvA1Q7YBXJBuMGa
OvMgRY+7YaxbS9lCeR4izXCavwqtx+64+79b7gObve68N4WavPF9BgCEmdqCvadc
6IO8qoZ4yvyM+Rd22FNexAQbxjRSvWHOUGTuakJiHBFKbhVsPgamBHd9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu+wfr2QIRgbv0muawrGIKqQUfwMB8GA1UdIwQY
MBaAFOiXlSAcfT2TzSoIXeNpLt1xt3JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUt
Mjk4NjcxZDEyNjFlLzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUtMjk4NjcxZDEyNjFl
LzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCQR/XWE
wWr+2aGyHtObO3KSoQoUmUvmX1yGkAQwwdXkhLnpT9wPKe0jGLVTmuqSWsCY0BuP
k3e8cM7ea5yHIvYxTcPvUvquIr8Xqc9XPynKHHtPftkh26IMcDWhoJ8p52oEIWN3
hyz6GTpJ1xAMFol2O9/kyWFN5333v8Z96mecKfbRGdiT5+zm3DWIMp+FjrMuOIb7
/tyDYtFcZGWESqbxBFkHCpFS5QFsbBvkkhwqUsU1+EAhXFrISwWkUUvJuZe3kWpa
VllqcgEIdK0AEeWDbu9wkGvWBplttrqrYtqa7UlzOQ8aKY6uu/ZBG0+mFDexD90D
Kbx+INOakmGITg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:41 2026 by rpki-client