Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
File:                     6WTScFqbJv1IKpwQ6Sbq572kHps.mft (raw, json)
Hash identifier:          86KEQG9EUBjOy64WxoFgxrAPlHJ5hQ9DgNxybQqmo+g=
Subject key identifier:   4A:74:1A:10:8E:71:1D:B5:E0:29:31:FD:CF:3C:B0:63:64:3F:45:32
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Certificate issuer:       /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial:       0199FF59558FC4DE01D295594606F5C8C232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
Manifest number:          0DED
Signing time:             Mon 20 Oct 2025 02:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:08 +0000
Files and hashes:         1: 6WTScFqbJv1IKpwQ6Sbq572kHps.crl (hash: t8DbAPqJ30Bopw3zJGfBIsHQhlYJbdXXZJyIWQPY3mg=)
                          2: qE5CKR1beI5QzGXctw8hwUZF3kQ.roa (hash: GJQ9ToPtMxv6IDjV2YJ/S2be8eseM+f65LcvwP6vzp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:55:8f:c4:de:01:d2:95:59:46:06:f5:c8:c2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
        Validity
            Not Before: Oct 20 02:01:08 2025 GMT
            Not After : Oct 21 02:01:08 2025 GMT
        Subject: CN=4a741a108e711db5e02931fdcf3cb063643f4532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:78:24:00:df:f4:74:3a:0d:7d:14:ee:64:
                    92:d5:73:29:04:14:de:56:ce:82:2b:d4:d8:cc:ec:
                    a1:c3:fe:bd:bd:68:be:be:31:82:05:b0:49:c4:ec:
                    78:21:49:6c:1f:d2:7e:03:68:d6:ed:f0:a5:bf:42:
                    f3:b9:83:34:1a:11:11:c5:df:a3:74:03:70:7c:2c:
                    91:90:93:a6:ef:92:2c:94:bc:24:bf:62:8f:fc:0a:
                    64:cb:cb:ac:df:13:39:f6:be:d4:00:7b:55:f1:9e:
                    00:9b:84:c0:ea:f0:4a:26:d5:b6:30:6a:11:c6:b0:
                    01:ec:12:92:fb:2d:6c:51:51:2b:81:5b:c1:f6:cd:
                    43:54:79:38:4b:b7:9b:ce:53:77:a9:15:b7:fd:b0:
                    72:a7:4e:8e:64:29:e7:93:dc:a4:d0:9d:6b:39:dd:
                    13:22:cf:a5:ee:53:73:5e:07:ce:c6:8f:9d:af:f9:
                    b8:7b:4f:05:81:07:06:4b:6e:c3:2f:86:54:39:a6:
                    bf:1c:f8:0d:90:62:a2:31:42:65:aa:1c:6e:a1:bc:
                    ac:a6:2b:cd:95:cf:de:8e:72:bb:b4:ed:36:ff:e5:
                    bc:78:42:8b:d4:94:f7:3f:61:37:bf:d6:7e:8c:29:
                    c2:f3:51:fc:8d:15:68:50:d9:72:3b:9e:02:f0:44:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:74:1A:10:8E:71:1D:B5:E0:29:31:FD:CF:3C:B0:63:64:3F:45:32
            X509v3 Authority Key Identifier:
                keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:09:d6:e8:6e:0f:de:f8:fb:c9:0e:49:2d:e4:46:8a:6b:
         65:7e:10:ed:0d:e6:e0:fd:a6:0c:c7:85:98:49:93:b0:a5:e5:
         6e:21:2a:df:a0:ef:66:45:b1:e9:ac:47:72:e3:01:0f:19:94:
         42:4e:a1:c2:2b:55:a7:2c:ec:c1:9c:ee:a2:d7:b2:76:d7:16:
         dd:e4:ce:4f:14:18:fe:31:38:2e:3a:b9:91:31:9a:5b:8b:1c:
         1d:61:6d:3d:e7:83:44:54:45:d4:5a:b9:18:a2:aa:9c:0a:43:
         59:b3:cc:07:58:5a:34:00:86:bc:4c:e2:24:a2:58:50:1a:7a:
         6b:70:41:00:f9:4f:55:08:6d:1d:d6:74:45:22:1a:ec:5f:0f:
         ca:38:5b:b1:c5:60:ca:8c:fb:51:94:64:8d:e3:43:c9:ea:1f:
         35:e6:b8:01:9b:cd:0c:df:61:51:27:29:4d:bf:6f:cb:55:fa:
         80:b6:f1:a3:86:2d:7e:bc:70:2f:38:82:a9:71:0b:ef:58:cb:
         a4:45:48:e7:77:8c:e1:5c:ac:66:e4:54:e5:1d:b1:fd:ef:6d:
         d9:f7:af:6d:51:f5:13:98:ba:c1:60:f7:cb:76:81:23:4b:4a:
         82:0e:8f:c5:a3:3b:76:e8:80:9b:35:5e:49:32:e3:56:df:97:
         dc:ea:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:05 2025 by rpki-client