Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          w6mHZVUEOc28YwCTCLmLIgXr4I58irLp/EWIcEfnSpk=
Subject key identifier:   FB:39:79:D0:91:58:0D:72:7C:B4:1D:7D:DF:7A:65:12:4F:78:18:18
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       0199FBEADED773A58818D1D36FBA83AEBF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 10:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:37 +0000
Files and hashes:         1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: 7y3hb774WrbSt8sqaKmti1atIrMLsXoLAYC55Ij214c=)
                          2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:de:d7:73:a5:88:18:d1:d3:6f:ba:83:ae:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Oct 19 10:01:37 2025 GMT
            Not After : Oct 20 10:01:37 2025 GMT
        Subject: CN=fb3979d091580d727cb41d7ddf7a65124f781818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:3c:ef:ef:04:c2:43:2b:47:89:11:69:a5:
                    70:6c:ea:a4:23:e4:41:64:a6:94:71:6c:0c:78:6d:
                    d2:d7:d5:d4:e9:35:46:ee:e4:94:47:07:ff:50:3a:
                    22:6c:70:83:da:73:bf:16:87:57:14:76:02:d5:d4:
                    b5:2f:56:93:1f:d1:4b:2f:92:fe:ae:4a:18:46:4f:
                    35:21:1f:7a:c1:ba:8d:1a:18:ca:00:ca:99:05:26:
                    25:60:79:fe:4e:46:40:f2:de:24:b5:d3:33:f1:54:
                    2a:0c:29:bb:b9:78:ef:ae:56:d2:ae:a2:35:d9:28:
                    24:4b:1e:75:5a:a4:9e:73:d1:93:e3:e3:5b:7c:f6:
                    f6:e4:03:94:25:2a:5f:5a:88:06:5c:7b:97:73:71:
                    59:94:d0:d4:4e:e5:a4:e3:b0:e5:2b:d9:47:59:c3:
                    a6:25:fc:bf:7b:37:7b:99:f6:5a:85:b4:f3:f3:c2:
                    9b:8a:d1:3f:89:d7:18:d2:e2:d7:f5:c2:f2:b2:65:
                    a3:0d:d9:c2:4e:1c:b7:3a:8e:f3:0f:10:4c:e2:f1:
                    0c:5f:8f:60:ca:3a:bd:95:d4:49:ac:5d:26:c1:d0:
                    71:40:a9:44:1e:c8:9b:d9:84:91:b5:dc:a9:f5:bf:
                    59:49:4b:ef:96:7e:94:aa:1c:a5:a2:9f:2a:1d:ea:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:79:D0:91:58:0D:72:7C:B4:1D:7D:DF:7A:65:12:4F:78:18:18
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:f2:f3:8d:56:b7:4c:83:f1:cb:3c:a8:84:8a:92:ab:de:
         6b:a7:95:a6:0a:4b:18:2a:fc:aa:fa:16:57:20:c5:09:f3:f5:
         19:4d:14:12:ae:e5:b8:a2:18:83:62:42:3e:c7:97:ce:d3:a0:
         1b:cb:eb:8f:df:1f:6a:d6:d7:82:09:80:10:3d:5f:c4:15:a4:
         1e:63:37:e3:09:40:84:14:92:6a:40:3b:1d:23:d6:d4:c2:7d:
         1f:73:0a:0a:c8:90:1f:b5:f7:60:5f:10:7d:4b:71:5b:0c:9d:
         f6:01:05:a8:a7:86:b7:2e:77:87:25:0c:4a:b5:95:05:de:a7:
         8e:8b:98:6d:e0:5d:69:13:32:a5:0c:24:0c:9f:8c:d1:88:24:
         ba:9f:cb:85:a4:1b:57:50:1f:65:16:2a:37:fd:6b:38:a8:1b:
         14:59:88:e9:11:18:82:28:45:e2:49:69:eb:61:9c:4e:b9:2f:
         67:dc:0d:b6:c9:84:6f:a5:88:f0:c9:e6:8e:e0:37:7a:f8:6b:
         d7:a7:cf:9f:ca:55:ec:f5:3f:75:2a:ad:c9:f3:c9:1a:49:6d:
         9a:ab:32:fb:1f:d4:16:e8:ce:b2:d9:33:c8:35:72:e8:ef:40:
         3a:bc:f0:75:a1:8f:85:9f:fe:6a:ea:df:b1:7c:ff:7a:c0:30:
         07:ee:59:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76t7Xc6WIGNHTb7qDrr8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk
MjI5YTUwHhcNMjUxMDE5MTAwMTM3WhcNMjUxMDIwMTAwMTM3WjAzMTEwLwYDVQQD
EyhmYjM5NzlkMDkxNTgwZDcyN2NiNDFkN2RkZjdhNjUxMjRmNzgxODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom887+8EwkMrR4kRaaVwbOqkI+RB
ZKaUcWwMeG3S19XU6TVG7uSURwf/UDoibHCD2nO/FodXFHYC1dS1L1aTH9FLL5L+
rkoYRk81IR96wbqNGhjKAMqZBSYlYHn+TkZA8t4ktdMz8VQqDCm7uXjvrlbSrqI1
2SgkSx51WqSec9GT4+NbfPb25AOUJSpfWogGXHuXc3FZlNDUTuWk47DlK9lHWcOm
Jfy/ezd7mfZahbTz88KbitE/idcY0uLX9cLysmWjDdnCThy3Oo7zDxBM4vEMX49g
yjq9ldRJrF0mwdBxQKlEHsib2YSRtdyp9b9ZSUvvln6Uqhylop8qHerwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs5edCRWA1yfLQdfd96ZRJPeBgYMB8GA1UdIwQY
MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt
ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw
LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5by841W
t0yD8cs8qISKkqvea6eVpgpLGCr8qvoWVyDFCfP1GU0UEq7luKIYg2JCPseXztOg
G8vrj98fatbXggmAED1fxBWkHmM34wlAhBSSakA7HSPW1MJ9H3MKCsiQH7X3YF8Q
fUtxWwyd9gEFqKeGty53hyUMSrWVBd6njouYbeBdaRMypQwkDJ+M0Ygkup/LhaQb
V1AfZRYqN/1rOKgbFFmI6REYgihF4klp62GcTrkvZ9wNtsmEb6WI8MnmjuA3evhr
16fPn8pV7PU/dSqtyfPJGkltmqsy+x/UFujOstkzyDVy6O9AOrzwdaGPhZ/+aurf
sXz/esAwB+5Zvg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:26 2025 by rpki-client