Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File:                     6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier:          0wuTNUtjEc0N+18XxDmL9AyRhYxaE3x+6GO+xidFthg=
Subject key identifier:   5B:9C:00:0D:B1:88:8B:37:17:1E:0E:9A:85:FC:DE:D8:FB:CB:2B:F0
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       0199FD3427582563BFB623561586ADEA8524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number:          0213
Signing time:             Sun 19 Oct 2025 16:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:17 +0000
Files and hashes:         1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
                          2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: o11rpuiroO2wbNavKzLk93CnYC5aZbN7LOQk5Cy0/J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:27:58:25:63:bf:b6:23:56:15:86:ad:ea:85:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: Oct 19 16:01:17 2025 GMT
            Not After : Oct 20 16:01:17 2025 GMT
        Subject: CN=5b9c000db1888b37171e0e9a85fcded8fbcb2bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:7a:88:40:6c:39:65:5c:e6:7f:9d:b4:b5:
                    5c:70:45:82:c8:f3:3d:0d:87:ed:ad:c8:2d:e4:a6:
                    37:bb:ab:ad:7f:6a:c9:40:d0:0e:c3:94:b5:7f:c3:
                    f5:ca:9e:9e:4b:59:0c:1e:20:84:60:77:90:17:1f:
                    65:fc:36:bb:97:09:ec:b5:38:f5:bf:80:2f:7e:9a:
                    97:84:79:de:27:16:0d:5b:ff:0e:83:68:ed:a3:28:
                    f9:47:a8:88:af:de:e5:74:a9:cb:ce:d9:ff:3b:9d:
                    81:6d:8e:a5:cc:ab:a4:78:dd:76:a5:90:96:ab:00:
                    07:35:76:02:c5:77:34:e3:52:74:54:b6:eb:28:85:
                    90:b1:dc:84:3a:24:9f:8a:41:f7:a5:9b:07:bd:4d:
                    e3:61:53:af:40:25:ef:21:62:bd:55:99:77:b7:d2:
                    fe:ca:6c:78:46:e5:f3:d2:8f:9c:bb:26:73:e4:85:
                    9f:15:ec:c3:06:a9:c1:7d:3e:99:dd:66:c8:7a:3b:
                    aa:70:39:07:e7:bc:68:a8:df:0a:51:2f:ce:dc:9a:
                    1a:59:fc:3e:0a:3b:27:26:4b:e7:25:5b:d8:56:ad:
                    3f:0a:9d:35:e7:ff:fe:04:c5:7d:8e:ef:44:54:15:
                    99:44:e0:53:87:46:d0:86:2f:68:60:f9:9f:66:7c:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9C:00:0D:B1:88:8B:37:17:1E:0E:9A:85:FC:DE:D8:FB:CB:2B:F0
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:80:6e:1c:88:32:29:44:81:4e:f0:99:9d:8e:e7:1c:84:a0:
         f3:ce:6e:99:37:f4:19:b8:25:c0:a3:2a:81:bd:44:e7:72:64:
         c0:3c:ac:b1:db:ba:d4:63:f3:ed:0c:59:43:00:a7:66:67:5a:
         20:ac:b5:b2:44:46:25:d3:a2:c8:2f:40:6f:bc:b5:31:ae:9f:
         4d:9b:e1:97:3e:33:13:be:e2:c9:46:3c:cf:4b:36:69:f5:70:
         0f:19:21:60:32:62:2d:7b:8a:a3:9a:ee:f7:6f:16:f1:c3:4e:
         3e:db:e0:9a:b1:8c:05:7e:ca:6a:f0:e2:cd:d8:35:e4:5d:d0:
         2d:57:27:d4:a3:93:0f:56:40:a4:2a:94:93:57:a6:b5:27:33:
         ec:7b:9d:26:33:31:48:4a:15:e2:d7:38:e2:b1:69:6c:be:a2:
         fd:1e:f0:9e:f9:95:d0:46:9f:c8:96:4b:a2:54:7d:4e:ca:4f:
         c5:b7:cd:86:68:24:ee:66:90:6e:d5:f7:75:a2:96:91:07:2c:
         cf:e1:12:2b:df:cb:8a:4c:14:fc:7f:b7:5f:e7:9f:bf:da:15:
         e6:5b:6e:c9:68:fa:68:c7:84:0f:c0:d7:0e:33:da:0a:aa:88:
         9c:5a:eb:7a:1c:3a:05:99:ec:cc:5a:81:f7:e5:1d:6a:2d:df:
         ab:51:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:39 2025 by rpki-client