Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          Hi8aDhF3QfpNuXDj95zqyYna7rg9s+8qwfMWguflYes=
Subject key identifier:   FB:E5:FD:0D:15:89:78:2B:D6:A2:14:0A:29:86:DF:E0:08:B7:31:FA
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       0199FB0EE0D1C716CC22C65C495F7849A66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 06:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:20 +0000
Files and hashes:         1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: c5roDKawC8DcWN63rzXZWXn5ww7pNg1JzOlyJlPY5nU=)
                          2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:e0:d1:c7:16:cc:22:c6:5c:49:5f:78:49:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: Oct 19 06:01:20 2025 GMT
            Not After : Oct 20 06:01:20 2025 GMT
        Subject: CN=fbe5fd0d1589782bd6a2140a2986dfe008b731fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:c0:b6:7f:9b:60:ef:dd:7e:77:aa:c2:46:
                    07:85:17:06:4b:42:3c:6c:b7:5e:b4:11:31:7c:5f:
                    aa:ee:01:55:bd:f6:06:47:c5:d8:d5:e2:b4:8e:78:
                    45:5e:36:a2:45:13:49:df:ee:5d:0e:52:c2:1a:b4:
                    f9:e7:a4:e7:67:ef:f9:d1:be:b0:7e:d4:6d:bf:4e:
                    87:58:aa:01:60:47:e3:f3:02:11:c9:79:23:a4:c5:
                    19:4f:d3:79:5c:f0:e8:2c:27:01:93:1e:f1:fb:ff:
                    34:46:4d:3c:53:d1:5a:fc:3c:40:db:95:9f:3c:65:
                    70:e0:3d:a6:db:92:7f:e8:96:a3:33:12:8f:b6:9a:
                    a1:3a:ec:4b:b6:6c:cd:c6:4f:75:86:92:e7:8b:05:
                    a2:d9:83:5a:3a:06:61:16:40:7e:b4:37:5e:7f:3f:
                    f5:29:fe:18:7b:6a:15:55:19:3b:a8:f0:9c:86:15:
                    7f:42:47:86:24:6e:93:b2:41:1d:ab:db:7a:b2:ce:
                    7a:b0:7a:45:77:3b:a4:db:fb:60:d6:5f:2b:9d:7a:
                    8c:15:b9:6c:0f:42:04:54:de:60:58:0c:a9:f6:df:
                    51:16:2f:66:17:43:7c:c0:a9:71:1e:f1:0c:b7:96:
                    e9:16:75:08:e0:45:97:91:73:48:ce:a4:af:0e:4c:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E5:FD:0D:15:89:78:2B:D6:A2:14:0A:29:86:DF:E0:08:B7:31:FA
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:3a:89:4f:b9:d0:0d:01:24:a0:9c:f0:af:21:3e:a2:05:
         a0:6b:b6:63:24:60:74:1c:e0:12:16:a9:b5:48:68:2e:5e:ee:
         e8:7e:bd:e6:79:a7:83:69:ac:cb:81:11:f4:83:2d:41:00:be:
         8d:6f:41:dd:69:48:00:43:76:e9:79:12:9e:3b:75:22:48:8f:
         ea:34:33:18:31:90:dc:34:c8:94:26:b1:88:59:e4:6b:13:1e:
         d3:33:9f:17:48:8a:c1:3f:12:aa:24:0d:20:b3:11:c4:0d:87:
         08:9b:c2:19:d5:9c:70:43:8f:ad:74:d5:13:a0:fa:d5:f0:58:
         8c:d3:77:50:6a:a2:9b:fd:bc:23:96:5b:58:20:d6:cc:ac:e6:
         de:0b:a4:a7:ef:62:a5:8b:07:c4:3a:c9:0f:27:b0:17:28:63:
         ac:e0:d8:2a:76:a8:04:8d:25:a4:81:50:07:12:bf:4c:20:b5:
         0a:13:1d:ed:8c:7e:fe:09:c2:65:36:ac:db:22:29:c2:ec:aa:
         7f:47:e8:0b:9b:0b:87:8a:1a:6b:3f:d0:9e:12:53:50:4d:10:
         d4:21:40:bb:01:21:7c:64:7a:cd:82:1f:3b:10:22:d8:5e:a5:
         4c:76:4f:72:96:c2:15:87:74:04:f4:63:8a:62:29:f8:2e:e2:
         b4:7e:0d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DuDRxxbMIsZcSV94SaZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODFjZDFmYzZjMzJlNGIzYjdjOWM1MzhiMDRkZDMwYTgx
MWMzY2IwHhcNMjUxMDE5MDYwMTIwWhcNMjUxMDIwMDYwMTIwWjAzMTEwLwYDVQQD
EyhmYmU1ZmQwZDE1ODk3ODJiZDZhMjE0MGEyOTg2ZGZlMDA4YjczMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJHAtn+bYO/dfneqwkYHhRcGS0I8
bLdetBExfF+q7gFVvfYGR8XY1eK0jnhFXjaiRRNJ3+5dDlLCGrT556TnZ+/50b6w
ftRtv06HWKoBYEfj8wIRyXkjpMUZT9N5XPDoLCcBkx7x+/80Rk08U9Fa/DxA25Wf
PGVw4D2m25J/6JajMxKPtpqhOuxLtmzNxk91hpLniwWi2YNaOgZhFkB+tDdefz/1
Kf4Ye2oVVRk7qPCchhV/QkeGJG6TskEdq9t6ss56sHpFdzuk2/tg1l8rnXqMFbls
D0IEVN5gWAyp9t9RFi9mF0N8wKlxHvEMt5bpFnUI4EWXkXNIzqSvDkxk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvl/Q0ViXgr1qIUCimG3+AItzH6MB8GA1UdIwQY
MBaAFOmBzR/Gwy5LO3ycU4sE3TCoEcPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUt
MWMyOGUxY2Q1NzQ1LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUtMWMyOGUxY2Q1NzQ1
LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD06iU+5
0A0BJKCc8K8hPqIFoGu2YyRgdBzgEhaptUhoLl7u6H695nmng2msy4ER9IMtQQC+
jW9B3WlIAEN26XkSnjt1IkiP6jQzGDGQ3DTIlCaxiFnkaxMe0zOfF0iKwT8SqiQN
ILMRxA2HCJvCGdWccEOPrXTVE6D61fBYjNN3UGqim/28I5ZbWCDWzKzm3gukp+9i
pYsHxDrJDyewFyhjrODYKnaoBI0lpIFQBxK/TCC1ChMd7Yx+/gnCZTas2yIpwuyq
f0foC5sLh4oaaz/QnhJTUE0Q1CFAuwEhfGR6zYIfOxAi2F6lTHZPcpbCFYd0BPRj
imIp+C7itH4N0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:28 2025 by rpki-client