Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          9YkuC/WysVmXSu3ATsbIHF1n0q9rBaVrid8cPyom3kg=
Subject key identifier:   D5:00:B7:0C:81:DF:5B:D5:12:B0:8A:88:FC:03:DA:01:4E:BA:50:20
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       0199FD346CE1C9F8A13C160F4D5B52C5B2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          035F
Signing time:             Sun 19 Oct 2025 16:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:35 +0000
Files and hashes:         1: 2tQqGK4g82dy1c5SML4akqkLzQs.roa (hash: 0ihiDi+ydh24SGVwQxglY4r4t8f0Ij3xsuV5NeDNJgU=)
                          2: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (hash: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=)
                          3: I1LQw1CBlPzdRK1ZEvgFu8378uI.roa (hash: iIDM1s8e551CHIuxRBUaodgRmli45m1JLpfi8ps3uPQ=)
                          4: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
                          5: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=)
                          6: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: b0muniTDBTGO3GmhmvI1gqoITs0n4s20U3eQXDV+fj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:6c:e1:c9:f8:a1:3c:16:0f:4d:5b:52:c5:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Oct 19 16:01:35 2025 GMT
            Not After : Oct 20 16:01:35 2025 GMT
        Subject: CN=d500b70c81df5bd512b08a88fc03da014eba5020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cf:d4:25:e1:0e:51:f8:37:06:71:63:a4:ae:
                    03:37:db:cb:65:6b:69:54:20:29:5d:2e:08:f7:d4:
                    f9:f6:d3:9a:c6:b0:2b:2d:56:8f:86:bd:e2:d7:f6:
                    a8:45:df:bf:df:80:05:4b:e5:09:83:fe:2d:c9:db:
                    86:f0:93:e2:a5:0a:a5:54:e9:64:47:b4:33:36:21:
                    3c:05:48:ce:8f:50:75:e4:63:f2:29:27:b0:61:98:
                    8f:7c:b0:cd:c8:6d:15:82:cd:2f:30:0c:ee:30:35:
                    3a:73:0e:02:2f:40:5c:52:e6:35:f8:db:11:01:ee:
                    a2:43:bf:5f:ef:78:3a:08:60:2e:59:4f:d3:46:a6:
                    91:6f:25:ac:66:13:06:b4:1b:52:98:d5:8a:a0:3e:
                    2b:20:4d:92:63:30:c8:d7:46:ae:1b:66:4c:11:8e:
                    06:40:48:f6:b9:e9:7d:4c:86:81:54:ca:e5:a6:f0:
                    46:66:78:2b:0f:c3:6b:c0:7f:d0:4e:24:aa:64:79:
                    43:16:d4:ed:0e:50:28:09:f2:eb:dc:31:df:e4:bf:
                    3c:4d:dc:17:1c:76:ff:9f:62:44:01:a5:67:82:7c:
                    33:f2:d6:a4:a2:b8:43:4d:71:fa:af:66:cd:73:eb:
                    ad:99:c6:60:9b:d4:d4:82:9a:00:53:ad:f3:1c:76:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:00:B7:0C:81:DF:5B:D5:12:B0:8A:88:FC:03:DA:01:4E:BA:50:20
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:38:8d:85:31:d1:06:0f:da:57:4b:dc:8a:43:ef:d8:3e:
         fb:a0:0d:3f:93:b0:6a:3c:7e:5e:58:b7:0e:37:60:88:10:5e:
         8e:26:59:83:38:32:01:fd:4e:71:b0:fe:4b:4e:51:c0:97:c5:
         39:6d:dc:90:b7:fd:02:f2:1d:59:e2:cd:d7:2a:9c:94:da:2f:
         2b:4b:39:b4:99:49:5c:77:56:3d:7a:c1:83:ae:a9:21:f9:84:
         18:68:ea:78:5a:e0:cd:a0:64:1f:54:00:0b:86:1d:41:4b:4a:
         8b:2d:eb:fd:0d:52:ee:a2:63:2d:9b:c2:5f:13:4f:44:2c:08:
         35:ae:96:99:a8:c3:90:0f:54:58:c9:ec:f4:ea:8e:f9:2c:bd:
         20:8f:e6:76:5d:62:12:76:47:e4:18:fa:8d:94:d3:fb:86:2b:
         ce:af:19:17:ac:94:7b:95:3d:34:48:83:75:32:08:22:a1:6a:
         0f:ad:dc:72:76:8e:fe:d8:50:d9:31:4e:1f:5f:25:8f:b7:59:
         94:aa:66:28:6f:45:1c:9c:de:c7:f9:46:20:d3:b5:2a:d1:48:
         be:94:06:6f:73:39:21:dc:af:b2:61:55:62:ab:55:82:a1:22:
         aa:e4:bb:27:4f:08:16:bc:87:1b:92:8b:40:38:ad:20:e5:bf:
         82:21:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:25 2025 by rpki-client