Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File:                     6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier:          yi1IDHjEC5Hl1eCWmbMkY1lSewPeF2hm2MAG4fWhrUw=
Subject key identifier:   52:EE:AD:9C:CB:BB:51:69:C2:26:CA:FE:70:A6:67:89:7A:F0:02:B3
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer:       /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial:       0199FF594F5D6990C227E45535C38E2D2AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number:          0B9C
Signing time:             Mon 20 Oct 2025 02:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:06 +0000
Files and hashes:         1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: wvt6atqCFLAYBkT/eiLyWOiIHdrAA7tmcERKcpCai50=)
                          2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:4f:5d:69:90:c2:27:e4:55:35:c3:8e:2d:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
        Validity
            Not Before: Oct 20 02:01:06 2025 GMT
            Not After : Oct 21 02:01:06 2025 GMT
        Subject: CN=52eead9ccbbb5169c226cafe70a667897af002b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:b7:0a:98:73:86:38:70:0e:3a:78:22:d4:
                    6a:d4:3c:57:8e:06:05:f2:1d:b4:ff:4d:67:22:c7:
                    10:c8:40:a5:bc:5a:2f:49:c5:20:b2:3b:9a:4f:e5:
                    23:61:44:d2:77:dc:c3:63:b2:07:b3:f1:39:d1:0e:
                    e8:43:f5:12:ef:34:91:d1:3b:3e:43:a9:5a:0b:c0:
                    8e:a0:79:82:02:7e:5a:07:36:5f:e8:71:3d:61:b6:
                    1a:89:8d:15:68:cc:f9:66:c7:0f:c0:00:d9:5a:16:
                    1e:1f:ec:f8:4e:01:98:3e:e8:3e:3e:18:70:a5:25:
                    f5:0d:7a:33:81:41:3d:ca:6b:32:5e:31:2c:fe:ef:
                    2c:be:3f:83:3d:4c:85:7f:3f:e7:e0:db:03:fd:d0:
                    2d:73:b4:fc:8c:a2:b4:5d:36:2b:45:a0:2d:cf:03:
                    d4:ce:0c:5a:b2:53:ed:48:01:14:be:ea:ff:bc:47:
                    0e:74:12:cc:e2:3b:30:a6:8a:9c:89:87:94:de:18:
                    11:e8:dd:33:f6:21:1d:bd:ff:e8:98:8f:d0:c6:fd:
                    61:83:93:58:61:2c:0c:6a:9f:dd:06:d0:d5:51:de:
                    c3:35:08:f0:ff:f6:cc:b5:c2:96:22:0b:31:dc:10:
                    5e:b9:8d:64:43:ce:7c:42:43:b1:f3:2e:d5:bf:bd:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:AD:9C:CB:BB:51:69:C2:26:CA:FE:70:A6:67:89:7A:F0:02:B3
            X509v3 Authority Key Identifier:
                keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:46:cf:54:32:cf:9d:02:0f:9f:6f:cd:d1:7e:56:34:87:22:
         12:ce:26:99:23:4c:b7:8b:71:c2:ce:7e:11:82:02:41:91:85:
         8b:0c:a0:52:fc:ed:6e:80:c9:12:cc:fe:51:2b:93:e0:b5:8a:
         e6:e6:4a:e9:cc:11:63:63:b7:d9:b7:4d:9f:d6:3a:f7:4b:5a:
         84:03:77:6f:56:5b:41:3f:d0:f4:c2:bb:fa:00:17:6d:de:41:
         1c:e7:f3:89:ff:21:dc:49:6d:39:8b:b4:c3:7f:db:fc:9f:42:
         7f:ef:bd:fd:64:82:8e:d9:77:ae:86:fc:a9:dd:6d:0e:31:75:
         5a:c8:99:2d:f6:0e:de:06:82:1a:74:f1:57:41:93:de:9b:0c:
         b4:ff:cd:5f:18:4b:7a:bb:59:09:17:fd:bc:0b:fc:72:66:c9:
         b3:b3:a9:97:a6:66:69:13:f5:9b:ad:80:26:a2:00:9d:63:7f:
         eb:29:dd:2a:aa:9e:fb:f3:7d:5a:20:49:3c:b9:e9:d0:b0:1f:
         b3:c3:86:93:f8:83:fe:cb:c6:7b:fd:cc:34:d3:33:c8:24:1b:
         47:8d:62:3f:33:c2:36:af:20:7f:f3:2d:3e:b8:00:d2:fd:2e:
         50:b6:11:fa:eb:2b:92:f3:a6:8e:cc:07:ee:d6:17:a5:b3:38:
         a6:a6:fd:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WU9daZDCJ+RVNcOOLSqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy
YzNjZWIwHhcNMjUxMDIwMDIwMTA2WhcNMjUxMDIxMDIwMTA2WjAzMTEwLwYDVQQD
Eyg1MmVlYWQ5Y2NiYmI1MTY5YzIyNmNhZmU3MGE2Njc4OTdhZjAwMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTO3CphzhjhwDjp4ItRq1DxXjgYF
8h20/01nIscQyEClvFovScUgsjuaT+UjYUTSd9zDY7IHs/E50Q7oQ/US7zSR0Ts+
Q6laC8COoHmCAn5aBzZf6HE9YbYaiY0VaMz5ZscPwADZWhYeH+z4TgGYPug+Phhw
pSX1DXozgUE9ymsyXjEs/u8svj+DPUyFfz/n4NsD/dAtc7T8jKK0XTYrRaAtzwPU
zgxaslPtSAEUvur/vEcOdBLM4jswpoqciYeU3hgR6N0z9iEdvf/omI/Qxv1hg5NY
YSwMap/dBtDVUd7DNQjw//bMtcKWIgsx3BBeuY1kQ858QkOx8y7Vv73h+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLurZzLu1FpwibK/nCmZ4l68AKzMB8GA1UdIwQY
MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt
YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh
LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUbPVDLP
nQIPn2/N0X5WNIciEs4mmSNMt4txws5+EYICQZGFiwygUvztboDJEsz+USuT4LWK
5uZK6cwRY2O32bdNn9Y690tahAN3b1ZbQT/Q9MK7+gAXbd5BHOfzif8h3EltOYu0
w3/b/J9Cf++9/WSCjtl3rob8qd1tDjF1WsiZLfYO3gaCGnTxV0GT3psMtP/NXxhL
ertZCRf9vAv8cmbJs7Opl6ZmaRP1m62AJqIAnWN/6yndKqqe+/N9WiBJPLnp0LAf
s8OGk/iD/svGe/3MNNMzyCQbR41iPzPCNq8gf/MtPrgA0v0uULYR+usrkvOmjswH
7tYXpbM4pqb9yw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:00 2025 by rpki-client