Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          vtLdDnPtqu6pxeR+O2mKrhTSo13/OX46ZAJAEDT3Gps=
Subject key identifier:   86:4D:84:BB:8D:8C:15:16:52:89:CD:4B:51:29:CC:D3:A6:3D:EB:8D
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       0199FC58FA67E1419E4142237D241FBC6A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          069A
Signing time:             Sun 19 Oct 2025 12:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:53 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: DRGG7SL9JIE0Q+jpJ+R5i4NEyXkfEHjjD+INJ4KwKoM=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:fa:67:e1:41:9e:41:42:23:7d:24:1f:bc:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Oct 19 12:01:53 2025 GMT
            Not After : Oct 20 12:01:53 2025 GMT
        Subject: CN=864d84bb8d8c15165289cd4b5129ccd3a63deb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:3a:41:97:cf:6b:79:63:2a:8d:ac:a5:70:
                    9c:ee:14:af:35:f0:8b:e3:5b:69:12:bf:fc:6e:6a:
                    1d:b0:9d:7c:44:76:f7:46:83:aa:2c:bd:08:9a:89:
                    db:c5:09:da:e2:26:07:a0:ef:2b:33:f5:36:2e:9f:
                    65:1f:03:f6:7f:7b:c4:b3:41:5b:f6:9f:3e:ea:bc:
                    26:e7:f6:91:62:90:e9:d7:00:3b:2c:1b:e1:c2:77:
                    27:e1:c4:38:7f:d1:4f:ca:a2:69:7d:b5:dd:b1:0f:
                    ea:b9:7f:62:71:f3:7d:c6:fd:23:38:c3:16:29:40:
                    a4:0d:6e:9e:4a:af:7a:7a:1d:eb:5a:82:e9:7a:7e:
                    f7:56:29:5b:90:47:35:5f:d6:07:4a:be:15:b3:12:
                    9b:05:45:80:f3:c3:d1:c6:49:1d:14:0a:38:8e:e5:
                    52:e6:fa:09:28:1e:0f:86:09:ab:5b:22:38:96:a4:
                    6b:cc:f8:8a:89:40:54:9a:16:fb:d6:77:e7:e5:0b:
                    7a:d7:d0:17:27:6c:c4:77:80:bb:94:79:fe:fc:fd:
                    ab:f8:fd:4d:08:d6:15:c0:4a:81:d5:6c:35:ff:44:
                    5a:b3:f1:66:c2:a1:e3:5f:34:e0:87:bf:45:62:e9:
                    2e:2e:78:e1:00:e0:1a:26:18:2a:64:92:b2:89:da:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4D:84:BB:8D:8C:15:16:52:89:CD:4B:51:29:CC:D3:A6:3D:EB:8D
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:62:d7:12:11:cb:bb:b3:1d:54:78:a8:9a:71:8a:26:64:
         1a:2d:09:d2:74:8b:72:bc:b9:16:e1:9a:53:38:36:9a:12:65:
         6c:6c:c6:2d:dd:76:48:50:35:b7:91:d0:b2:ff:af:09:09:01:
         8a:87:98:ea:7c:57:d0:4e:84:8d:ee:ca:f8:d8:44:0a:56:47:
         34:ae:df:b3:6b:c8:64:ef:1e:70:00:6f:72:a6:a3:33:a6:62:
         fc:78:61:c7:a9:a1:30:a5:e8:07:c1:3f:c7:6e:3f:0a:eb:e8:
         6e:a0:6c:0d:ee:d5:81:10:4a:7d:0f:f0:8b:4a:d6:01:bc:b7:
         6c:48:4b:e3:a4:23:16:a5:57:bf:78:58:da:0d:bf:61:c2:90:
         5c:b3:11:a3:fa:bc:ce:0e:61:b0:91:1e:7f:a5:9d:b9:ef:f4:
         41:98:4f:93:0d:0d:ef:f7:9e:80:85:7c:67:29:76:e6:31:22:
         34:0b:42:b5:9d:b8:72:73:93:33:35:ff:ec:b0:75:5a:d9:aa:
         c9:67:8f:cf:d8:26:00:a0:3f:e3:74:74:66:ae:48:24:5f:a1:
         ad:d0:7c:ef:62:0f:93:d6:70:e7:3a:bb:7e:d7:bb:ca:b2:a7:
         1d:72:3e:26:5c:6e:bc:13:c0:2d:2c:40:82:1d:a0:0c:d0:8a:
         1a:ac:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:52 2025 by rpki-client