Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          X2fgOZgLgykejxe1f2e1r/8neT3dZRB/0sJENDufeRM=
Subject key identifier:   9F:B8:A6:3B:AF:C6:5C:E8:03:66:A5:39:8D:B8:5C:CB:85:F2:A7:93
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       0199FDD99C831BDCC1FFDBDA4AA05C2744AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0AF0
Signing time:             Sun 19 Oct 2025 19:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:00 +0000
Files and hashes:         1: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: DM78LRSRj8z7Bmbc2KIoFabFu9OoEK+6NlosB9/MjsI=)
                          2: fz0sJARZZ_TYinSLBp8Y46GRSAE.roa (hash: k5Klk32fNc1hp3soFN9xokf0fk3JpGUEVYNQtXZtdqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:9c:83:1b:dc:c1:ff:db:da:4a:a0:5c:27:44:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Oct 19 19:02:00 2025 GMT
            Not After : Oct 20 19:02:00 2025 GMT
        Subject: CN=9fb8a63bafc65ce80366a5398db85ccb85f2a793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:69:49:75:d6:3f:85:a0:05:b8:42:47:34:
                    ee:08:83:40:14:1b:6d:02:0b:e1:b0:79:b1:4c:f0:
                    22:c6:81:3c:54:83:9a:10:11:0c:28:90:f1:e9:64:
                    29:c8:c9:a4:7d:a2:37:3d:1b:d0:c4:06:8c:82:16:
                    3f:86:12:ce:50:a7:96:33:3d:65:1f:da:6d:ff:5c:
                    53:f0:f7:27:54:42:6e:be:49:d7:c9:ba:7f:76:5f:
                    13:f5:68:9b:21:1e:d3:4b:5c:b7:cb:11:78:17:2a:
                    d2:f4:8f:57:9b:b7:44:d3:c6:85:dd:e6:13:29:96:
                    28:6f:83:f1:ce:48:dc:06:fa:37:c7:9c:47:c5:85:
                    4b:ab:34:2c:5f:55:fb:8f:96:9b:7e:60:28:d4:80:
                    81:c8:de:a6:83:8a:aa:85:6e:ec:97:48:ec:cb:04:
                    3e:a3:07:d0:8e:30:4e:06:8e:ed:f6:fc:b6:93:8c:
                    d9:1f:e5:74:f7:a5:96:a5:c2:ec:24:06:1b:7a:bb:
                    90:a5:fd:0e:2d:3f:0b:71:dc:17:21:78:f6:e2:53:
                    3f:54:36:b6:0e:7a:fa:8d:68:f4:9e:3e:1a:10:db:
                    32:aa:c9:b5:d4:53:4f:1c:92:30:b3:ab:c7:a7:b0:
                    d3:00:50:b6:b9:bb:27:b0:4b:00:1d:e9:7a:09:5d:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:A6:3B:AF:C6:5C:E8:03:66:A5:39:8D:B8:5C:CB:85:F2:A7:93
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:39:89:f7:ef:bc:b8:4a:84:fa:87:aa:89:41:c9:79:85:
         af:d7:bc:af:6a:c0:b6:57:69:1a:f0:35:b4:12:23:db:39:40:
         7d:cb:c4:ee:2e:30:1a:b1:4a:f7:58:97:56:52:94:0e:6d:ef:
         33:9f:59:35:82:61:62:59:7a:53:b5:38:33:44:1e:1a:aa:5d:
         c6:61:df:1a:03:3c:10:b3:b4:10:34:69:02:87:d7:ae:8a:4d:
         a7:0b:60:53:09:45:07:76:44:3e:03:6f:71:0c:6f:15:07:24:
         12:5a:7a:33:11:28:7a:81:54:ae:98:72:c5:d2:af:b7:9f:03:
         d4:cc:e1:ce:00:62:59:d2:a8:a2:62:54:79:50:40:5c:3d:5e:
         f8:a4:7f:d7:19:1e:43:a3:2a:2a:f1:78:3a:f4:04:34:cc:3b:
         6a:37:18:33:88:d2:9e:de:c8:80:1b:51:53:1d:b4:06:93:e4:
         8a:a1:fd:73:e4:a2:32:db:78:e2:78:d3:7e:09:e8:0e:af:ae:
         0c:72:be:48:5e:c5:7d:67:08:3e:9b:3c:a3:3d:8e:a8:3a:23:
         6e:1d:8d:8b:fa:9c:a2:24:bb:8c:e5:81:5a:14:9a:bd:5b:0d:
         96:1b:13:36:c5:9d:d0:a6:89:34:26:71:2d:dc:70:2c:05:73:
         e3:66:e8:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ZyDG9zB/9vaSqBcJ0SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmUxNDZhMWU5ZTgzYjM3NTZmMDQ4YjZjMWIzMWUwZmM3
ZDIwN2QwHhcNMjUxMDE5MTkwMjAwWhcNMjUxMDIwMTkwMjAwWjAzMTEwLwYDVQQD
Eyg5ZmI4YTYzYmFmYzY1Y2U4MDM2NmE1Mzk4ZGI4NWNjYjg1ZjJhNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY9pSXXWP4WgBbhCRzTuCINAFBtt
AgvhsHmxTPAixoE8VIOaEBEMKJDx6WQpyMmkfaI3PRvQxAaMghY/hhLOUKeWMz1l
H9pt/1xT8PcnVEJuvknXybp/dl8T9WibIR7TS1y3yxF4FyrS9I9Xm7dE08aF3eYT
KZYob4PxzkjcBvo3x5xHxYVLqzQsX1X7j5abfmAo1ICByN6mg4qqhW7sl0jsywQ+
owfQjjBOBo7t9vy2k4zZH+V096WWpcLsJAYberuQpf0OLT8LcdwXIXj24lM/VDa2
Dnr6jWj0nj4aENsyqsm11FNPHJIws6vHp7DTAFC2ubsnsEsAHel6CV3HcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+4pjuvxlzoA2alOY24XMuF8qeTMB8GA1UdIwQY
MBaAFOkuFGoenoOzdW8Ei2wbMeD8fSB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmIt
NzRhMzk1YWE1NjA2LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmItNzRhMzk1YWE1NjA2
LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG505iffv
vLhKhPqHqolByXmFr9e8r2rAtldpGvA1tBIj2zlAfcvE7i4wGrFK91iXVlKUDm3v
M59ZNYJhYll6U7U4M0QeGqpdxmHfGgM8ELO0EDRpAofXropNpwtgUwlFB3ZEPgNv
cQxvFQckElp6MxEoeoFUrphyxdKvt58D1MzhzgBiWdKoomJUeVBAXD1e+KR/1xke
Q6MqKvF4OvQENMw7ajcYM4jSnt7IgBtRUx20BpPkiqH9c+SiMtt44njTfgnoDq+u
DHK+SF7FfWcIPps8oz2OqDojbh2Ni/qcoiS7jOWBWhSavVsNlhsTNsWd0KaJNCZx
LdxwLAVz42bo8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:12 2025 by rpki-client