Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          UClvmZ0YG3sU1Uzz5NGOymz8WOUcTwAWSviPu5IdGrU=
Subject key identifier:   B3:7F:6F:9C:A6:6F:14:9C:43:0E:0A:4F:9B:7D:D4:2D:8F:9E:E1:3B
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0199FC58F127EDFF98197123ADB47944FBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          16FD
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          2: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          3: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: w8BA9kjLlc+RtQdrcCUmtQlMsoYRpIyNPDCR6WLf4fM=)
                          4: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          5: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          6: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          7: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          8: VpUO8FztHwErwqX-N9UX_EYZh7A.roa (hash: KoW1E0hQQXw+2PHPNCjmoEVjfKo8T8cI7h2RXMqdk48=)
                          9: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          10: fjtFOz4IlAaEAQnySY7OoN_tT9k.roa (hash: +Sr0IAWH0Sl8SJhZIIslWSKF0Gz1QtZzH2BHIKdnR6Y=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f1:27:ed:ff:98:19:71:23:ad:b4:79:44:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=b37f6f9ca66f149c430e0a4f9b7dd42d8f9ee13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:10:f5:fb:ec:8b:a5:ed:79:aa:da:73:42:
                    ec:0c:28:ac:7e:9b:af:1b:1d:5f:42:e6:ad:8e:ce:
                    dd:48:5c:6c:92:65:9d:d8:62:c7:68:89:1b:06:05:
                    67:91:90:7d:b4:04:8c:61:83:15:9b:15:fb:15:4d:
                    9f:91:07:ea:e4:64:70:ca:f3:23:db:f9:1a:82:79:
                    77:f5:74:66:10:3f:dc:98:e2:15:b8:0c:af:48:4f:
                    f1:e3:f9:27:23:79:f6:ec:f7:94:42:24:64:62:69:
                    6f:23:5d:e1:2a:02:97:e3:14:18:ea:4b:e1:c6:27:
                    70:04:09:28:28:a0:cf:7f:53:4e:1b:93:f4:cc:bf:
                    d2:ea:db:28:3c:4a:ba:fd:f9:21:69:bd:bd:b3:8c:
                    d0:e0:0f:d8:b0:c4:e3:00:68:60:c9:5e:d8:4c:bd:
                    b6:97:b4:31:23:74:c6:7b:e0:67:fc:b7:52:0f:ad:
                    3a:02:43:62:fd:35:d8:06:a3:bd:5f:a9:07:ca:03:
                    8f:40:31:bb:1b:f0:da:1a:1c:e0:b6:9e:70:e9:1f:
                    b7:5d:8e:38:b8:5c:91:b5:e6:23:a4:94:16:bd:be:
                    71:d0:b9:38:a2:97:17:63:1f:da:b8:8d:92:5e:65:
                    0f:44:49:cc:10:b1:c0:3e:04:6c:1e:64:28:ae:17:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:6F:9C:A6:6F:14:9C:43:0E:0A:4F:9B:7D:D4:2D:8F:9E:E1:3B
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:69:71:10:ed:fa:9d:a5:0b:2e:0f:3e:be:a5:39:3d:dd:a5:
         3a:ee:97:ca:7c:e0:cc:a6:f0:c6:9d:2a:a5:07:8c:2b:1d:c9:
         0c:e4:f4:1d:b8:42:ea:4a:5d:c9:0a:20:35:54:2f:5f:0f:58:
         7f:f9:6a:2f:38:04:32:f4:58:c9:75:d3:30:f3:d9:8b:ba:76:
         98:f1:c1:ff:26:d2:dd:f8:0f:25:9b:76:84:c6:6c:9b:17:30:
         10:14:30:e9:1e:e3:6a:f5:bb:8c:2c:42:fe:b0:95:da:ae:fb:
         33:22:3d:5f:41:ec:0a:29:41:8b:a6:ac:7a:c7:f5:5b:30:86:
         dc:d4:7b:93:08:b8:2f:2f:9a:a0:cb:b1:4f:b4:11:e2:dd:b6:
         f5:34:13:1b:e6:5e:ea:70:fc:d9:75:e0:cf:29:bb:6d:c5:dd:
         d5:6b:7d:36:79:2b:25:09:25:a3:04:a4:ac:e8:cf:ad:b9:8b:
         31:fa:4d:92:03:c9:94:91:a5:24:a3:61:56:3e:2c:6c:a9:de:
         4a:bc:af:01:b8:2f:d6:8b:80:85:80:e7:b3:54:8c:66:cd:38:
         ac:99:0c:bc:1f:a6:31:00:1b:41:8e:f9:e0:36:74:55:48:60:
         25:cf:2d:f5:cb:de:e7:24:a4:36:97:4d:73:d5:f2:38:93:59:
         51:ca:49:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPEn7f+YGXEjrbR5RPvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUxMDE5MTIwMTUxWhcNMjUxMDIwMTIwMTUxWjAzMTEwLwYDVQQD
EyhiMzdmNmY5Y2E2NmYxNDljNDMwZTBhNGY5YjdkZDQyZDhmOWVlMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p4Q9fvsi6Xtearac0LsDCisfpuv
Gx1fQuatjs7dSFxskmWd2GLHaIkbBgVnkZB9tASMYYMVmxX7FU2fkQfq5GRwyvMj
2/kagnl39XRmED/cmOIVuAyvSE/x4/knI3n27PeUQiRkYmlvI13hKgKX4xQY6kvh
xidwBAkoKKDPf1NOG5P0zL/S6tsoPEq6/fkhab29s4zQ4A/YsMTjAGhgyV7YTL22
l7QxI3TGe+Bn/LdSD606AkNi/TXYBqO9X6kHygOPQDG7G/DaGhzgtp5w6R+3XY44
uFyRteYjpJQWvb5x0Lk4opcXYx/auI2SXmUPREnMELHAPgRsHmQorhcMGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN/b5ymbxScQw4KT5t91C2PnuE7MB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGlxEO36
naULLg8+vqU5Pd2lOu6XynzgzKbwxp0qpQeMKx3JDOT0HbhC6kpdyQogNVQvXw9Y
f/lqLzgEMvRYyXXTMPPZi7p2mPHB/ybS3fgPJZt2hMZsmxcwEBQw6R7javW7jCxC
/rCV2q77MyI9X0HsCilBi6asesf1WzCG3NR7kwi4Ly+aoMuxT7QR4t229TQTG+Ze
6nD82XXgzym7bcXd1Wt9NnkrJQklowSkrOjPrbmLMfpNkgPJlJGlJKNhVj4sbKne
SryvAbgv1ouAhYDns1SMZs04rJkMvB+mMQAbQY754DZ0VUhgJc8t9cve5ySkNpdN
c9XyOJNZUcpJyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:04 2025 by rpki-client