Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File:                     PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier:          /ozWR1Oug8hNf15xoQ9u8pL8riNywYAW86p2KOPYaTA=
Subject key identifier:   B3:F8:5B:CC:89:45:91:C7:12:3A:50:11:44:19:D7:7E:FE:C2:C2:9C
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer:       /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial:       0199FE46A1C51E1852C787E4ABF364087BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number:          0161
Signing time:             Sun 19 Oct 2025 21:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:05 +0000
Files and hashes:         1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: nTA6709UzbjQkzi5S+Lh/ghKWJVcz4WBk6FwAWYuMh4=)
                          2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:a1:c5:1e:18:52:c7:87:e4:ab:f3:64:08:7b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
        Validity
            Not Before: Oct 19 21:01:05 2025 GMT
            Not After : Oct 20 21:01:05 2025 GMT
        Subject: CN=b3f85bcc894591c7123a50114419d77efec2c29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:39:66:06:4e:98:60:ca:98:5b:91:4a:8f:
                    32:a4:66:4d:82:54:c8:71:7b:29:31:ab:66:e3:b1:
                    fb:c9:29:ad:92:b2:9c:92:2e:e3:d2:ea:8e:8c:f6:
                    81:b8:f4:e3:b5:8f:f5:cb:97:1e:d5:94:95:79:f4:
                    c6:00:cc:a1:9e:a3:0e:5f:db:88:7b:15:e3:98:9c:
                    e2:47:c4:d1:5a:73:7f:03:f9:1a:99:1f:13:b7:ea:
                    a9:f6:42:31:fe:44:94:ae:0e:c1:96:45:e5:e6:03:
                    3d:08:a9:d3:05:3f:54:99:ed:c6:26:43:3f:e3:29:
                    96:93:4e:d7:bc:a3:13:db:54:0e:85:3c:72:df:6e:
                    ae:cc:97:a4:a8:84:7a:5b:24:6e:ff:ec:eb:88:13:
                    c9:52:09:f3:91:db:ed:7b:34:a3:41:e1:3e:b4:5e:
                    bd:a2:16:49:ff:30:e0:86:0a:b0:67:9a:a2:04:22:
                    66:a4:ef:2e:a1:b5:3f:1b:6a:d5:0f:53:f2:62:e0:
                    4f:eb:5e:d6:a9:bf:6b:bb:58:2a:47:01:dd:21:34:
                    38:48:a9:6d:cc:97:c7:fc:4c:1c:81:f8:0d:94:c6:
                    a8:79:c8:33:3b:ce:e1:7b:a2:5b:70:29:35:47:66:
                    37:9b:6b:9b:85:86:47:68:ef:b0:df:29:0a:0a:c2:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F8:5B:CC:89:45:91:C7:12:3A:50:11:44:19:D7:7E:FE:C2:C2:9C
            X509v3 Authority Key Identifier:
                keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:8c:50:9e:91:b6:ca:27:f7:24:9d:60:b7:a0:ac:9f:58:
         e7:f6:55:6c:bc:3a:68:4c:29:da:72:07:16:4c:8f:f4:df:46:
         12:0a:e8:6f:90:1d:10:4d:bb:14:a1:4f:3c:c5:c4:d6:14:82:
         95:93:7e:70:bb:f9:81:96:77:2e:d3:59:13:e8:ce:de:01:1a:
         51:fc:d1:41:aa:4f:14:ec:7b:82:da:8c:24:9d:5a:57:66:be:
         75:08:69:e6:df:24:8f:f7:e2:fc:c4:27:49:3e:65:01:98:fb:
         de:a8:b2:d1:83:f8:e2:ac:aa:03:93:a4:15:c7:ba:fb:83:9d:
         2a:99:76:5b:ec:ca:f1:e2:b1:c1:b3:80:87:fe:c4:55:36:30:
         12:68:57:f0:45:f7:e2:d1:9b:d6:f8:cf:22:6b:30:65:8c:4a:
         b3:7b:69:1b:3b:75:1c:4f:c0:67:67:23:69:9c:54:1d:bd:e4:
         7f:0c:47:87:04:5b:d6:cc:8f:50:36:34:f4:f8:30:58:99:40:
         9e:ca:fc:83:b1:8e:d5:53:2f:98:93:8b:f3:25:5d:9a:83:c1:
         67:d3:10:29:fa:de:93:b2:21:7e:82:3f:d0:b4:bf:c4:13:5c:
         0e:f5:17:98:bc:7c:c9:8e:08:b9:9c:ea:28:a0:78:3c:a8:28:
         68:2c:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:52 2025 by rpki-client