Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          WXwNHgxHiqnuTZ949nueu5VyA4S/4ceTUY7ZcDPk0yA=
Subject key identifier:   BE:5B:7C:EC:4A:2D:35:BA:02:F4:0C:FE:C3:84:F2:90:07:60:34:36
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       019D3909DDCC0DA2B2EC086D6CE15CBD400B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          07F0
Signing time:             Sun 29 Mar 2026 10:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:40 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: VAxFDInsyUottVaSGqWW4fuv/hxsv8TO9zyE3hob5D8=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:dd:cc:0d:a2:b2:ec:08:6d:6c:e1:5c:bd:40:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Mar 29 10:00:40 2026 GMT
            Not After : Mar 30 10:00:40 2026 GMT
        Subject: CN=be5b7cec4a2d35ba02f40cfec384f29007603436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8c:5b:53:06:a2:5d:d3:92:9c:a7:b3:3b:01:
                    1d:98:50:f9:a9:e7:7c:3a:7c:c5:46:c2:bd:9a:f3:
                    01:c3:74:85:bb:c8:a3:c5:f8:10:fd:30:96:a9:45:
                    9f:f1:8a:85:f0:03:d7:9e:97:d9:38:b5:9b:90:26:
                    18:5e:ea:ba:a3:3c:25:bf:09:e2:2d:c4:70:8a:c0:
                    30:5b:b8:3a:61:fd:db:ce:79:23:50:47:5e:bb:07:
                    16:b5:71:1c:19:15:f9:8a:b8:a1:68:54:fd:1f:da:
                    42:33:37:77:8e:d5:f5:89:80:53:70:37:e1:91:3c:
                    bb:dd:ea:3a:5a:4d:ce:71:20:d7:4c:e1:7e:4c:ed:
                    4e:33:42:11:59:7f:40:e2:9f:06:f9:d0:d1:46:70:
                    83:18:4c:38:64:63:f1:d9:d3:87:9e:45:83:93:d4:
                    d7:7a:35:c0:c0:08:8d:f8:02:c0:2d:f1:d7:16:07:
                    7b:4a:f5:bf:c6:9c:85:54:a4:64:da:1a:9f:f9:9b:
                    c1:45:f3:27:73:8c:10:71:1c:47:28:d0:59:77:b5:
                    38:eb:46:2d:16:a2:af:f0:40:65:b3:45:4c:01:e8:
                    5b:71:e0:d4:4e:fd:e5:8b:46:e5:21:88:dd:ce:b0:
                    98:c0:37:85:8d:47:c0:e9:32:1e:d6:ea:9e:22:61:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:7C:EC:4A:2D:35:BA:02:F4:0C:FE:C3:84:F2:90:07:60:34:36
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:b1:53:6f:0a:28:98:8d:25:2c:e7:2b:ba:0f:30:d0:86:
         d3:e0:a2:8a:59:d8:8f:e8:47:03:ed:8f:26:7c:54:76:08:5c:
         0a:fa:10:8a:27:7c:77:cc:b6:6f:d4:d8:a0:9f:dc:67:87:c6:
         d7:27:e1:44:f6:56:dd:ed:69:77:2f:6b:ae:b1:89:f0:c3:72:
         b5:c2:c4:cd:95:d5:99:a4:fb:de:39:51:20:8e:81:07:ae:0e:
         2e:cc:e4:48:bd:82:97:f8:d1:56:48:8e:c4:57:ec:69:69:da:
         63:c4:cb:01:3e:42:df:6c:9f:56:94:7b:bd:90:f4:2a:ba:c3:
         4b:95:c4:0d:ab:14:40:76:42:6b:14:0f:82:11:75:a8:e2:59:
         cc:b7:b0:e4:43:2b:3e:17:b5:c2:cd:07:8c:12:6d:c0:32:d8:
         ae:4b:1f:fc:28:65:ce:f1:5d:99:b3:dc:dd:e2:90:88:d2:b4:
         c1:26:77:c5:5b:33:57:40:b4:76:a7:7c:9b:53:3b:7e:f5:e2:
         ce:12:24:94:ce:e2:89:ee:6e:c1:2c:7f:09:6f:e4:de:47:30:
         9a:47:30:e5:ad:0e:ca:8d:4b:89:17:f3:0c:66:2f:b0:b7:84:
         4e:2b:1d:fe:e8:7b:48:57:36:c5:99:1e:45:c1:c4:ab:8a:1c:
         f4:b1:54:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cd3MDaKy7AhtbOFcvUALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzU0NDdjMDQzMWE3NWVlN2JiNTk0MGEyMTgzYzE4NDM4
ZWI2YjEwHhcNMjYwMzI5MTAwMDQwWhcNMjYwMzMwMTAwMDQwWjAzMTEwLwYDVQQD
EyhiZTViN2NlYzRhMmQzNWJhMDJmNDBjZmVjMzg0ZjI5MDA3NjAzNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IxbUwaiXdOSnKezOwEdmFD5qed8
OnzFRsK9mvMBw3SFu8ijxfgQ/TCWqUWf8YqF8APXnpfZOLWbkCYYXuq6ozwlvwni
LcRwisAwW7g6Yf3bznkjUEdeuwcWtXEcGRX5irihaFT9H9pCMzd3jtX1iYBTcDfh
kTy73eo6Wk3OcSDXTOF+TO1OM0IRWX9A4p8G+dDRRnCDGEw4ZGPx2dOHnkWDk9TX
ejXAwAiN+ALALfHXFgd7SvW/xpyFVKRk2hqf+ZvBRfMnc4wQcRxHKNBZd7U460Yt
FqKv8EBls0VMAehbceDUTv3li0blIYjdzrCYwDeFjUfA6TIe1uqeImGWKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5bfOxKLTW6AvQM/sOE8pAHYDQ2MB8GA1UdIwQY
MBaAFOrFRHwEMade57tZQKIYPBhDjraxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83NzI2NGUtNDk2NC00ZjY4LTkyZTUt
ZmZhNDMzOWJjZTRmLzEvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83NzI2NGUtNDk2NC00ZjY4LTkyZTUtZmZhNDMzOWJjZTRm
LzEvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM52xU28K
KJiNJSznK7oPMNCG0+CiilnYj+hHA+2PJnxUdghcCvoQiid8d8y2b9TYoJ/cZ4fG
1yfhRPZW3e1pdy9rrrGJ8MNytcLEzZXVmaT73jlRII6BB64OLszkSL2Cl/jRVkiO
xFfsaWnaY8TLAT5C32yfVpR7vZD0KrrDS5XEDasUQHZCaxQPghF1qOJZzLew5EMr
Phe1ws0HjBJtwDLYrksf/ChlzvFdmbPc3eKQiNK0wSZ3xVszV0C0dqd8m1M7fvXi
zhIklM7iie5uwSx/CW/k3kcwmkcw5a0Oyo1LiRfzDGYvsLeETisd/uh7SFc2xZke
RcHEq4oc9LFUCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:48 2026 by rpki-client