Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          NBlQA6DT7CjWzW1wV/QAZPa/T6xVWmbP6Wd7TdKetkY=
Subject key identifier:   E6:13:A6:02:AB:9B:9B:11:20:F4:7C:95:06:3B:3C:C9:5E:E8:91:CF
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       0199FD6B625C8E7ED48AFF97092341380C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 17:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:37 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: QJuK6OiKJDa6SmU6rb9omaTS4HiSOcOers+iivldhr0=)
                          2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:62:5c:8e:7e:d4:8a:ff:97:09:23:41:38:0c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Oct 19 17:01:37 2025 GMT
            Not After : Oct 20 17:01:37 2025 GMT
        Subject: CN=e613a602ab9b9b1120f47c95063b3cc95ee891cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:c8:54:6c:e2:67:89:b8:a7:6f:e5:64:34:
                    06:3a:52:c8:3e:88:7e:1b:2b:f7:c7:3b:b8:5f:23:
                    32:74:de:7a:78:b9:46:41:4e:3d:bf:e5:f3:4e:5f:
                    6e:48:46:d1:ee:72:ad:37:c0:de:54:42:aa:1c:f9:
                    92:25:32:b2:38:30:1b:87:78:a8:72:8f:5c:a2:72:
                    4f:e3:6f:a1:3a:4a:42:76:15:21:a6:f0:24:93:d7:
                    40:7f:1d:32:fd:44:79:1d:bd:e2:98:d9:f3:9c:8f:
                    86:3a:70:a3:70:c1:f7:e6:49:f1:81:65:0e:6a:2e:
                    68:4a:4e:f0:6c:f3:b1:97:aa:ee:a7:b0:e3:a1:37:
                    2c:65:84:01:16:9a:3f:72:9c:a1:7d:59:55:36:9d:
                    de:41:db:d6:c7:f7:6e:b1:ea:08:59:03:21:a8:7b:
                    85:2e:75:35:53:5f:99:12:91:8f:71:25:67:c8:71:
                    bc:d4:50:db:ca:03:09:fb:6e:e6:97:83:71:3e:ee:
                    57:7a:8a:e2:39:fb:b7:19:42:21:f3:45:78:50:9c:
                    06:28:8d:26:26:36:3b:22:d5:d5:80:66:2d:76:ce:
                    d6:f9:72:c2:41:c7:1b:ba:25:f5:8a:e7:69:d8:87:
                    b3:bc:9d:66:5d:ff:09:29:36:15:4a:02:19:0c:25:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:A6:02:AB:9B:9B:11:20:F4:7C:95:06:3B:3C:C9:5E:E8:91:CF
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b0:30:00:f0:f6:bc:55:37:24:c4:ac:4c:7c:da:0a:90:00:
         fc:12:fb:16:f1:58:d6:98:6a:e4:8b:6b:e7:3d:49:42:0f:25:
         66:8f:11:98:8a:bb:16:de:00:77:70:8d:47:23:52:ba:68:f3:
         40:69:e1:a7:78:d8:2e:0e:04:0c:b2:49:04:3d:e2:d9:57:f3:
         2f:74:8b:a6:ce:d4:93:ff:14:33:73:5a:8d:6f:f7:e5:b0:0f:
         72:45:cd:81:f7:e0:03:59:7e:8a:a3:36:11:80:df:8c:a1:b8:
         40:73:37:f2:db:4a:bf:bd:ff:6e:2f:f5:56:e6:28:6a:a0:5d:
         88:8f:a4:68:93:a3:45:be:be:b9:f4:2b:f8:a7:e7:69:f5:70:
         cd:ee:1d:55:b9:7a:0d:a9:f2:19:95:62:50:d4:f0:dc:85:19:
         24:59:2d:6d:fd:15:56:9a:9d:92:5c:d8:d6:bd:5a:34:fd:70:
         e0:19:fa:04:28:7b:2d:90:5c:75:53:00:7f:d1:4b:b4:55:33:
         c8:b8:94:89:61:25:71:0d:ca:94:85:22:ce:5e:05:34:15:49:
         77:e4:f9:1e:9c:7d:79:9b:24:cd:e8:fe:33:6c:74:8f:b2:77:
         b6:bd:81:6e:91:e0:3c:d2:25:e5:97:46:fe:98:30:4e:36:e1:
         eb:e6:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:26 2025 by rpki-client