Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          mybrV3ltb1eiGfhuLNFQy/UCrYcvPFfmrZP8CxV5oTY=
Subject key identifier:   08:58:D3:F3:F4:78:BE:E1:7A:FE:04:01:F6:65:4E:3E:E8:7C:B1:DB
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       0199FE0FEC5412C8E3C280B13EBE8502BA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 20:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:20 +0000
Files and hashes:         1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: cATaT1Gy42DVvYVya+gTax/kfGKUhM9nkkK4aGeoj/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:ec:54:12:c8:e3:c2:80:b1:3e:be:85:02:ba:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Oct 19 20:01:20 2025 GMT
            Not After : Oct 20 20:01:20 2025 GMT
        Subject: CN=0858d3f3f478bee17afe0401f6654e3ee87cb1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9d:2f:60:8b:91:ae:ff:69:25:5b:29:1d:b1:
                    04:61:f4:d8:58:de:14:dd:e5:b7:55:79:e0:76:19:
                    22:4a:0a:37:5c:2b:72:25:7e:05:dc:c7:eb:ef:7e:
                    e2:bb:6c:74:ac:bd:b1:e2:de:33:3d:30:8e:72:43:
                    dc:72:3e:a6:d6:48:92:57:1f:6c:73:19:0e:07:4e:
                    91:ae:96:72:c8:6c:ec:7b:34:1a:d0:f0:bf:f3:e0:
                    e8:fa:0b:eb:da:6f:16:90:1a:33:2b:f9:96:57:98:
                    0f:04:78:17:73:0f:9f:b0:32:0e:19:0f:d1:27:12:
                    a4:ee:ce:00:9a:e6:ff:ba:91:db:a0:62:f6:2a:ac:
                    3d:5b:ad:13:aa:da:36:b6:16:db:0d:8a:f5:c9:74:
                    af:f3:0f:db:38:eb:22:03:7c:c5:46:bc:c9:7b:75:
                    c0:57:41:30:b2:1c:dd:81:16:c3:3e:09:5f:40:33:
                    7c:78:2c:ff:bb:64:a6:c0:db:f6:84:39:13:89:45:
                    57:c3:ba:b7:d7:fc:db:32:7d:e1:d5:52:48:6c:8e:
                    71:16:d8:e7:58:05:da:af:ea:d3:2d:4a:11:9f:17:
                    ea:87:be:80:55:ee:d1:b5:fd:3a:1b:71:c7:85:82:
                    1b:35:05:a6:08:07:fd:f2:bf:85:ae:f5:1d:29:85:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:D3:F3:F4:78:BE:E1:7A:FE:04:01:F6:65:4E:3E:E8:7C:B1:DB
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:1a:6a:ad:73:26:a7:1b:d6:60:01:85:80:61:40:4d:56:
         ac:3b:89:1e:0c:fb:88:6c:68:08:26:f5:ef:7e:2b:ef:4e:a9:
         ea:0e:0a:0f:ab:34:e7:4c:21:6a:54:c0:f3:7c:19:c8:f6:a8:
         11:45:ac:c1:6f:9e:1f:4c:d1:40:09:fd:00:b2:47:8f:dc:0d:
         da:bc:b6:91:4c:14:77:e3:fc:86:00:3c:07:46:66:47:75:7b:
         f6:e4:0e:31:be:9d:82:e9:cc:2c:a6:10:55:20:11:b3:94:7a:
         0d:4a:59:fd:ca:41:4c:a3:b3:c6:2a:ed:99:bc:0f:a9:b1:d5:
         ba:57:f1:5e:de:f0:88:0d:b2:6d:ac:cc:99:a6:ee:cd:dc:7a:
         91:d1:98:27:a6:c8:bf:7e:04:98:f9:37:b8:92:f4:c8:15:f6:
         8d:7e:cd:9b:7e:44:94:4e:83:e4:26:a3:9a:f3:e5:2c:92:2d:
         46:c4:62:be:5b:df:b3:42:de:3e:83:fb:45:64:f6:02:f8:54:
         5f:26:4c:6a:aa:a0:48:ee:e1:73:9d:79:61:49:13:11:bf:95:
         a1:df:d4:91:ce:3b:f6:c6:c1:a5:4b:c4:7a:7e:a5:22:d6:7f:
         27:72:16:19:b6:dc:d0:80:55:5c:54:c6:46:01:f3:84:aa:90:
         69:8b:2f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+xUEsjjwoCxPr6FAroDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw
N2Y4YzIwHhcNMjUxMDE5MjAwMTIwWhcNMjUxMDIwMjAwMTIwWjAzMTEwLwYDVQQD
EygwODU4ZDNmM2Y0NzhiZWUxN2FmZTA0MDFmNjY1NGUzZWU4N2NiMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p0vYIuRrv9pJVspHbEEYfTYWN4U
3eW3VXngdhkiSgo3XCtyJX4F3Mfr737iu2x0rL2x4t4zPTCOckPccj6m1kiSVx9s
cxkOB06RrpZyyGzsezQa0PC/8+Do+gvr2m8WkBozK/mWV5gPBHgXcw+fsDIOGQ/R
JxKk7s4Amub/upHboGL2Kqw9W60Tqto2thbbDYr1yXSv8w/bOOsiA3zFRrzJe3XA
V0EwshzdgRbDPglfQDN8eCz/u2SmwNv2hDkTiUVXw7q31/zbMn3h1VJIbI5xFtjn
WAXar+rTLUoRnxfqh76AVe7Rtf06G3HHhYIbNQWmCAf98r+FrvUdKYWulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhY0/P0eL7hev4EAfZlTj7ofLHbMB8GA1UdIwQY
MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt
YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm
LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY54aaq1z
Jqcb1mABhYBhQE1WrDuJHgz7iGxoCCb1734r706p6g4KD6s050whalTA83wZyPao
EUWswW+eH0zRQAn9ALJHj9wN2ry2kUwUd+P8hgA8B0ZmR3V79uQOMb6dgunMLKYQ
VSARs5R6DUpZ/cpBTKOzxirtmbwPqbHVulfxXt7wiA2ybazMmabuzdx6kdGYJ6bI
v34EmPk3uJL0yBX2jX7Nm35ElE6D5CajmvPlLJItRsRivlvfs0LePoP7RWT2AvhU
XyZMaqqgSO7hc515YUkTEb+Vod/Ukc479sbBpUvEen6lItZ/J3IWGbbc0IBVXFTG
RgHzhKqQaYsv7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:03 2025 by rpki-client