Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          dTARY1UF2bVy/qZTMJlpuRUO+U0Pu0tCll8+KQTQJrY=
Subject key identifier:   1E:24:AB:9B:02:28:25:20:E6:0A:25:DE:75:6F:07:3F:B3:13:B2:53
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       0199FBEBA2F7F87B046F0718FE8B119796ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          09FB
Signing time:             Sun 19 Oct 2025 10:02:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:27 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: lApPxsInKpNEmU5y+n7JjI+gCZ34lvIBSpFFTUwdQUs=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:a2:f7:f8:7b:04:6f:07:18:fe:8b:11:97:96:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Oct 19 10:02:27 2025 GMT
            Not After : Oct 20 10:02:27 2025 GMT
        Subject: CN=1e24ab9b02282520e60a25de756f073fb313b253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:41:0a:52:3f:0d:e1:10:c8:2b:7c:f7:04:
                    d9:a0:2d:30:0d:69:fc:b5:54:b7:60:1a:a8:f6:b2:
                    98:c5:f2:c1:6d:e4:ee:5b:66:a9:a3:b9:f0:ba:89:
                    88:e8:82:9d:66:29:cd:95:47:8d:b8:fa:03:70:2a:
                    89:bf:de:0f:bd:d2:19:bf:36:13:c2:4c:21:f3:33:
                    ea:e1:04:91:6c:61:ce:75:9c:1f:9a:4c:12:2f:07:
                    22:fa:90:ee:e4:d7:ff:82:0e:23:26:ad:7e:b1:24:
                    e4:91:39:06:99:80:94:c2:20:61:b2:b8:ac:6e:cb:
                    dc:62:37:d1:41:6a:7e:bb:57:37:b0:c8:84:46:c8:
                    5b:87:7c:6a:62:c0:4d:b2:67:be:14:bd:d5:d1:3a:
                    19:eb:00:25:00:c8:83:71:f2:66:eb:95:d7:ab:f2:
                    41:10:49:5a:b0:98:f3:ea:d3:03:e2:9c:18:01:8e:
                    5b:f5:67:c1:9a:2f:1d:7f:2c:56:ac:66:f4:e9:4e:
                    c9:60:c6:c1:d8:a4:41:b3:8e:ca:be:40:33:c7:a8:
                    9c:fd:48:64:e1:2e:a0:08:97:ba:59:1a:47:0c:5b:
                    c0:48:11:0a:7b:b6:83:79:16:bf:40:57:2e:82:f5:
                    9f:8d:de:7c:b2:a9:87:4a:10:81:6f:e0:4c:1e:b5:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:AB:9B:02:28:25:20:E6:0A:25:DE:75:6F:07:3F:B3:13:B2:53
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:02:45:81:f0:56:ea:4f:f4:05:ed:3f:48:ca:f5:f2:fc:18:
         ca:5a:05:06:8e:6c:45:e1:52:e3:99:8a:2a:56:b0:d1:a2:67:
         8a:79:ae:d4:b6:9e:60:11:e2:17:f4:2c:ef:3e:a6:fd:e7:04:
         ea:09:62:5a:82:33:01:83:e0:a4:56:6b:3f:03:33:44:83:e8:
         b4:a5:68:d4:9a:cc:83:fe:53:88:0b:3a:69:01:b2:40:8e:83:
         18:e8:8a:8f:c5:14:9d:b2:2f:36:5c:84:71:65:dc:f5:ee:9e:
         d6:9b:4a:8a:e8:09:e3:d2:12:ac:92:15:bc:9c:6e:df:30:ac:
         4a:5e:22:75:dd:6b:65:d3:17:84:6b:6b:10:06:37:a4:40:49:
         67:e3:e1:c7:3f:88:47:0d:81:21:3f:c3:38:08:fc:dd:df:91:
         1d:c6:ab:cb:b4:84:d2:c6:dd:38:af:c7:51:64:a5:2e:83:b2:
         bc:de:ef:aa:f2:3a:4d:82:af:45:7b:d2:8e:32:7b:37:f4:03:
         bf:1f:c3:24:b5:da:c0:e0:78:79:76:99:be:69:2b:26:c5:35:
         69:51:30:e9:e3:b1:ed:f0:69:0a:f4:cf:31:e3:e2:8c:45:c9:
         c5:c6:64:38:e8:18:1d:14:22:53:a6:5a:15:2e:8f:3b:67:2c:
         f8:9b:a2:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766L3+HsEbwcY/osRl5btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGE1MmRkNmYzY2RlYjQ3ODBiYjI5OThmNTAxNjYwY2M5
Yjg4ZmYwHhcNMjUxMDE5MTAwMjI3WhcNMjUxMDIwMTAwMjI3WjAzMTEwLwYDVQQD
EygxZTI0YWI5YjAyMjgyNTIwZTYwYTI1ZGU3NTZmMDczZmIzMTNiMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmdBClI/DeEQyCt89wTZoC0wDWn8
tVS3YBqo9rKYxfLBbeTuW2apo7nwuomI6IKdZinNlUeNuPoDcCqJv94PvdIZvzYT
wkwh8zPq4QSRbGHOdZwfmkwSLwci+pDu5Nf/gg4jJq1+sSTkkTkGmYCUwiBhsris
bsvcYjfRQWp+u1c3sMiERshbh3xqYsBNsme+FL3V0ToZ6wAlAMiDcfJm65XXq/JB
EElasJjz6tMD4pwYAY5b9WfBmi8dfyxWrGb06U7JYMbB2KRBs47KvkAzx6ic/Uhk
4S6gCJe6WRpHDFvASBEKe7aDeRa/QFcugvWfjd58sqmHShCBb+BMHrU3/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4kq5sCKCUg5gol3nVvBz+zE7JTMB8GA1UdIwQY
MBaAFOhKUt1vPN60eAuymY9QFmDMm4j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYt
YjI2OWY4OTVlN2Y3LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYtYjI2OWY4OTVlN2Y3
LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQJFgfBW
6k/0Be0/SMr18vwYyloFBo5sReFS45mKKlaw0aJninmu1LaeYBHiF/Qs7z6m/ecE
6gliWoIzAYPgpFZrPwMzRIPotKVo1JrMg/5TiAs6aQGyQI6DGOiKj8UUnbIvNlyE
cWXc9e6e1ptKiugJ49ISrJIVvJxu3zCsSl4idd1rZdMXhGtrEAY3pEBJZ+Phxz+I
Rw2BIT/DOAj83d+RHcary7SE0sbdOK/HUWSlLoOyvN7vqvI6TYKvRXvSjjJ7N/QD
vx/DJLXawOB4eXaZvmkrJsU1aVEw6eOx7fBpCvTPMePijEXJxcZkOOgYHRQiU6Za
FS6PO2cs+Jui9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:23 2025 by rpki-client