Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          KkTJqXjbdnZFovC7hkQCyhBRv6q5AWEezLqOLumwnkE=
Subject key identifier:   F7:29:95:29:E7:90:20:F0:96:08:E1:28:2A:69:B4:B8:C5:AE:D0:4E
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019D38668465809BC7B5E6BE87E77F8B920B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          189D
Signing time:             Sun 29 Mar 2026 07:02:15 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:15 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:15 +0000
Files and hashes:         1: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
                          2: 5xBml7U-4lugY_mFciACfFr11lA.roa (hash: hT0w3sNsbCx55sgMzKKPb+SHty16gYRniqe1E9kHT9k=)
                          3: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: LDF0LoLbdKNPttAlCQ5jLWQwIxxGH9fQfAxSkjBzyd4=)
                          4: Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa (hash: sRohF3I3BrcI8tiCBb8cHcbGxNylJjfyMotjHjcTNBk=)
                          5: PpVR1H9Dr3vZRcc8033VYEw1iR8.roa (hash: HtJF9iQGIeR/alkm252L+bhPoI3G21HA8V6y+HAStow=)
                          6: ZgoGE8XJ6EQtlkajljqKjgC4h1s.roa (hash: jzjfkcV63XJ455+qf9Q8QIDQMhzX6UJFMcyNd5ZFd3U=)
                          7: j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa (hash: nPzQITN1WUJedpqGtx/YyCLrwyo9hulFJnuk/YLkhpY=)
                          8: nO7tTpvdnuv_RiW2D0qie4z-wLk.roa (hash: vFl54J4nFHINYVebftYlSvYVnatB6wruXNKfs9nR74M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:84:65:80:9b:c7:b5:e6:be:87:e7:7f:8b:92:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Mar 29 07:02:15 2026 GMT
            Not After : Mar 30 07:02:15 2026 GMT
        Subject: CN=f7299529e79020f09608e1282a69b4b8c5aed04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:96:02:11:e2:ad:c6:29:ef:80:5b:8d:8f:
                    d3:88:4a:86:d1:04:92:9c:3d:17:06:d7:ca:d9:ba:
                    8c:4e:5e:86:2a:35:21:aa:44:51:d9:44:46:d5:3b:
                    3c:6a:0d:6a:dd:be:e5:02:0b:a4:2c:df:e7:78:c2:
                    0a:e2:7a:df:0f:df:bb:57:02:84:ce:a1:64:e8:6d:
                    1d:15:2b:ca:3b:64:56:06:93:82:2f:88:ad:8c:b6:
                    71:29:d5:ef:60:ef:80:5b:72:1d:ba:46:ab:88:05:
                    5f:3c:16:e9:1a:6f:04:61:15:a8:87:d6:5f:8e:3c:
                    c5:6a:a7:ea:e6:70:ee:42:75:3c:19:a4:73:9f:1e:
                    e3:29:2a:fc:29:19:9b:e2:c3:a9:30:c4:22:2d:31:
                    b1:78:c1:f3:47:98:3b:ad:7a:63:8b:f7:47:3e:52:
                    5f:52:6e:31:05:d2:83:97:6c:9d:15:de:22:b1:91:
                    21:c8:3d:39:ff:49:ed:8c:03:50:46:c2:88:0d:43:
                    c0:81:87:ab:d3:ba:ad:63:1f:dc:99:b2:8d:5a:c8:
                    4d:2f:ab:5a:98:cb:3b:d1:27:c6:1d:4d:aa:2b:0f:
                    c6:31:39:76:17:58:08:c3:c7:5e:3b:90:d8:8a:df:
                    8c:15:f8:76:83:7f:fa:85:fc:a9:45:ce:48:e4:17:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:29:95:29:E7:90:20:F0:96:08:E1:28:2A:69:B4:B8:C5:AE:D0:4E
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:a1:e6:38:e6:83:59:65:25:fe:7b:4b:74:88:68:10:a6:
         1a:de:2f:0d:2a:81:ac:54:bd:30:b8:1f:81:14:2e:8f:c4:8c:
         f7:e3:a7:9a:7c:82:b8:28:76:aa:a5:78:79:dd:00:3a:a1:ef:
         88:c4:8d:49:94:ad:15:ee:f4:42:50:54:5f:11:cd:2e:0a:ef:
         44:f3:92:92:36:80:25:d3:5d:e2:78:9e:08:b5:2d:87:d0:d6:
         50:df:ec:3b:36:e5:bf:b8:76:b4:ca:c0:37:a0:a7:84:43:25:
         99:4c:39:df:dd:63:e0:87:48:5b:1c:09:92:b7:cb:24:15:f6:
         de:d9:3f:78:bd:02:d9:9d:c9:0d:65:93:da:74:9f:03:f5:d1:
         aa:c4:78:ab:ea:ce:f6:43:6b:d5:e5:18:95:5b:32:b7:19:f8:
         05:5f:9b:02:d2:32:ce:65:30:88:0b:24:5b:75:43:6d:9c:0e:
         d7:f3:5c:d4:17:4f:70:6a:cd:4d:57:af:9c:62:79:85:e7:7b:
         67:6a:3a:14:e9:ae:bb:60:fc:7c:52:95:1f:32:ec:b2:f9:29:
         0f:da:98:1a:a5:84:16:4f:8a:37:2a:74:bd:d0:4c:bb:75:b9:
         99:99:be:0f:69:c2:44:4d:ae:fa:f1:c1:c6:43:ab:0f:07:4c:
         2d:fe:9d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZoRlgJvHtea+h+d/i5ILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjYwMzI5MDcwMjE1WhcNMjYwMzMwMDcwMjE1WjAzMTEwLwYDVQQD
EyhmNzI5OTUyOWU3OTAyMGYwOTYwOGUxMjgyYTY5YjRiOGM1YWVkMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDyWAhHircYp74BbjY/TiEqG0QSS
nD0XBtfK2bqMTl6GKjUhqkRR2URG1Ts8ag1q3b7lAgukLN/neMIK4nrfD9+7VwKE
zqFk6G0dFSvKO2RWBpOCL4itjLZxKdXvYO+AW3IdukariAVfPBbpGm8EYRWoh9Zf
jjzFaqfq5nDuQnU8GaRznx7jKSr8KRmb4sOpMMQiLTGxeMHzR5g7rXpji/dHPlJf
Um4xBdKDl2ydFd4isZEhyD05/0ntjANQRsKIDUPAgYer07qtYx/cmbKNWshNL6ta
mMs70SfGHU2qKw/GMTl2F1gIw8deO5DYit+MFfh2g3/6hfypRc5I5BfcIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcplSnnkCDwlgjhKCpptLjFrtBOMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLmh5jjm
g1llJf57S3SIaBCmGt4vDSqBrFS9MLgfgRQuj8SM9+OnmnyCuCh2qqV4ed0AOqHv
iMSNSZStFe70QlBUXxHNLgrvRPOSkjaAJdNd4nieCLUth9DWUN/sOzblv7h2tMrA
N6CnhEMlmUw5391j4IdIWxwJkrfLJBX23tk/eL0C2Z3JDWWT2nSfA/XRqsR4q+rO
9kNr1eUYlVsytxn4BV+bAtIyzmUwiAskW3VDbZwO1/Nc1BdPcGrNTVevnGJ5hed7
Z2o6FOmuu2D8fFKVHzLssvkpD9qYGqWEFk+KNyp0vdBMu3W5mZm+D2nCRE2u+vHB
xkOrDwdMLf6dBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client