Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          I3IQ1X7AjMjdsda5Dj3HyN9PhoQ4sDwtHFxJlDtO/tc=
Subject key identifier:   DD:8E:9D:DB:68:94:A5:5B:05:0F:12:DF:FE:8C:57:BE:62:87:1A:7C
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       0199FD341A7A1B563FF73ECEFAC4F80E39B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          16EE
Signing time:             Sun 19 Oct 2025 16:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:14 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: 2Vw6C7Bz7Zc0Pu85kUpkPvy9OtNDixvc+gDmIXyllvw=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:1a:7a:1b:56:3f:f7:3e:ce:fa:c4:f8:0e:39:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Oct 19 16:01:14 2025 GMT
            Not After : Oct 20 16:01:14 2025 GMT
        Subject: CN=dd8e9ddb6894a55b050f12dffe8c57be62871a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:1f:26:9a:1b:5a:b9:a4:3a:31:8c:c8:91:
                    d1:02:8d:9d:e2:f4:b2:44:05:e7:ad:54:9c:e2:c8:
                    0a:81:f0:51:05:24:3c:83:e3:19:ba:f9:ff:ed:b4:
                    19:33:58:e8:98:1d:4e:b8:33:87:3f:4e:7b:ec:ec:
                    4a:15:da:58:c0:18:4e:06:8a:b0:91:4f:c6:f8:8b:
                    4e:ce:da:d3:5a:a1:dd:d9:28:5d:8b:55:b2:27:a8:
                    c1:6f:4d:64:22:ca:d5:4e:09:7d:45:be:41:3f:bf:
                    55:76:09:c1:62:87:26:20:3c:a7:ab:e9:ac:29:cd:
                    8d:e5:bc:17:b2:a4:b4:ba:31:8c:bd:d4:83:d0:00:
                    94:e4:bc:40:b5:ff:26:a0:d5:44:0c:d2:e2:16:73:
                    8b:f3:ed:c4:e6:f8:21:4e:5c:27:a0:0d:c1:ac:4d:
                    b5:28:1d:09:de:d1:f2:6f:ea:11:cb:ca:30:01:1c:
                    9a:66:b2:f0:7a:d4:65:8c:f2:70:73:36:e4:cc:31:
                    83:f9:c4:3d:0e:eb:e9:7e:87:8e:28:c5:12:3f:a6:
                    91:84:36:99:2c:d0:f2:6a:b5:72:9f:e6:46:18:d4:
                    1b:0f:4f:ef:be:5e:b7:7a:80:1b:9e:e8:05:35:82:
                    4c:ff:6c:9e:a7:7d:4b:74:be:e6:0b:5a:57:e6:f0:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:9D:DB:68:94:A5:5B:05:0F:12:DF:FE:8C:57:BE:62:87:1A:7C
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:fa:3a:61:87:fd:48:0e:2d:ec:79:ae:1a:76:50:1d:56:
         92:bc:4e:08:84:07:6c:a0:4a:bb:64:dc:86:6d:01:57:3a:99:
         cd:6f:c6:35:b1:df:59:4f:e4:fd:54:e1:57:e8:85:f6:d2:7b:
         15:1d:69:2e:60:58:17:98:2e:c9:a9:22:64:90:8d:f9:6d:6c:
         3a:f0:12:21:85:6c:84:b0:64:06:cd:8a:74:cd:1c:70:a9:c6:
         5e:ba:b7:6a:0b:78:44:17:9d:19:a9:35:33:84:4e:74:30:db:
         b3:6d:89:8a:6c:64:44:24:9a:b7:c1:7b:01:08:6e:f9:86:4b:
         28:e3:f1:e8:43:59:66:e7:2c:25:f4:c1:6f:23:04:ee:b9:f7:
         52:cf:92:96:4e:1e:1e:19:e0:c3:2a:d6:30:64:1d:81:a8:9d:
         26:d2:aa:3c:c5:3a:94:0b:84:03:a7:4a:da:78:a7:53:32:01:
         39:d6:8a:13:e5:b8:22:05:55:b3:ef:29:ab:59:e1:e4:0d:64:
         1b:3c:d4:e4:be:ba:fe:94:e4:36:ba:19:35:41:8d:5d:30:fe:
         3a:4d:13:20:5f:3b:2e:ba:07:7e:f7:88:67:a7:2d:a4:02:79:
         65:cf:37:a0:ff:41:9a:54:ad:d0:39:6d:4d:50:99:d9:ed:f3:
         5f:d3:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:15 2025 by rpki-client