Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File:                     bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier:          PDsUy7nBY1FJDsrkQ56ZqH/KSQvx1oTGKD50P18k+ps=
Subject key identifier:   09:8D:ED:6B:B7:43:46:84:4D:AC:08:61:0C:17:5E:1D:30:AA:6C:0A
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer:       /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial:       0199FE472AA7293CA71471A1CDE1F5A17CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number:          014E
Signing time:             Sun 19 Oct 2025 21:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:40 +0000
Files and hashes:         1: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (hash: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=)
                          2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: GxQRmtdoAFVxUOeJQIKohXBK7FBCE1wgvGaC2oXhPMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:2a:a7:29:3c:a7:14:71:a1:cd:e1:f5:a1:7c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
        Validity
            Not Before: Oct 19 21:01:40 2025 GMT
            Not After : Oct 20 21:01:40 2025 GMT
        Subject: CN=098ded6bb74346844dac08610c175e1d30aa6c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:11:4e:e0:7b:d0:db:af:b4:e9:31:62:fa:
                    5c:88:40:76:f0:bb:e1:de:f9:a9:4b:7e:88:fe:45:
                    57:de:e4:91:80:3e:7d:12:98:ff:3a:dc:f6:48:65:
                    c4:a9:b5:fa:7e:be:22:0c:8c:2d:f9:ac:ab:c4:29:
                    ed:a4:40:17:5e:5e:cd:ab:ff:c2:bf:cc:ef:36:ea:
                    e7:98:ce:41:b9:07:b3:5f:32:f8:67:96:07:00:ca:
                    ef:45:ee:5f:7a:ac:fc:63:0a:2b:d0:54:d4:88:14:
                    9d:2f:7e:85:47:59:c4:ca:4c:cf:8f:ec:6c:a8:ed:
                    a8:2c:c7:a4:73:1a:52:c5:35:ca:d4:3a:f6:20:17:
                    46:d7:fb:63:17:81:47:a3:cf:e5:28:a9:75:71:56:
                    ba:01:ab:66:ff:1f:99:4a:71:c3:7a:06:64:5f:99:
                    c8:4d:86:da:9b:30:37:11:79:f5:15:1b:f1:4b:f3:
                    75:41:f4:24:33:63:46:2c:82:be:28:a2:9c:86:24:
                    09:3a:48:dc:67:dd:97:ff:b5:b4:0f:b0:22:13:3f:
                    f0:58:00:24:b7:4e:37:6d:72:8d:a9:ab:d8:94:8a:
                    c3:2b:39:9d:34:d9:c9:ae:26:b6:85:ac:5d:e8:ca:
                    a7:6f:b7:08:ba:5a:3a:d4:e6:31:a6:03:bd:9e:b5:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:ED:6B:B7:43:46:84:4D:AC:08:61:0C:17:5E:1D:30:AA:6C:0A
            X509v3 Authority Key Identifier:
                keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:5b:6e:a8:85:c7:63:a2:cc:83:f6:1b:29:01:fe:e5:17:
         9b:94:be:88:59:92:1a:95:47:91:d6:6f:10:a4:33:7c:10:bf:
         a9:aa:28:27:1b:7e:39:91:3f:69:7f:0b:04:03:6e:53:3d:09:
         8a:78:52:35:91:de:94:25:dc:93:8a:a7:4f:90:78:93:22:fe:
         76:33:c1:d1:90:c6:04:7b:c9:f7:0d:c3:46:b2:23:0c:6b:3c:
         0f:9e:bf:35:bd:12:d1:8c:de:fc:54:ac:9d:bc:34:5a:17:4e:
         c6:ed:6c:4b:a3:5a:de:8f:41:68:a6:d5:87:4e:57:5f:1a:d9:
         b2:82:97:2d:aa:1f:ab:34:9f:1c:87:83:04:4d:ca:ac:b8:5d:
         2a:5c:31:9a:df:9b:4b:01:2f:c5:2b:74:58:29:a7:76:e7:2e:
         24:6b:22:7b:e8:f7:c0:87:70:ae:51:89:ae:63:96:8e:95:31:
         05:24:4b:95:cb:2e:e4:01:c7:65:4b:6d:ce:be:3c:dc:05:62:
         d5:90:65:aa:1c:f5:3d:10:54:5f:58:6e:8f:87:eb:4a:ce:6f:
         98:a9:83:8c:ab:7c:1f:ed:a2:11:28:1f:89:3a:4f:b9:07:b6:
         c9:38:0d:06:a6:46:45:00:d6:e8:0f:9d:ac:62:e7:39:92:47:
         b0:80:70:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RyqnKTynFHGhzeH1oXzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3
NzQ2ZDkwHhcNMjUxMDE5MjEwMTQwWhcNMjUxMDIwMjEwMTQwWjAzMTEwLwYDVQQD
EygwOThkZWQ2YmI3NDM0Njg0NGRhYzA4NjEwYzE3NWUxZDMwYWE2YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMRTuB70NuvtOkxYvpciEB28Lvh
3vmpS36I/kVX3uSRgD59Epj/Otz2SGXEqbX6fr4iDIwt+ayrxCntpEAXXl7Nq//C
v8zvNurnmM5BuQezXzL4Z5YHAMrvRe5feqz8Ywor0FTUiBSdL36FR1nEykzPj+xs
qO2oLMekcxpSxTXK1Dr2IBdG1/tjF4FHo8/lKKl1cVa6Aatm/x+ZSnHDegZkX5nI
TYbamzA3EXn1FRvxS/N1QfQkM2NGLIK+KKKchiQJOkjcZ92X/7W0D7AiEz/wWAAk
t043bXKNqavYlIrDKzmdNNnJria2haxd6Mqnb7cIulo61OYxpgO9nrWVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmN7Wu3Q0aETawIYQwXXh0wqmwKMB8GA1UdIwQY
MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt
OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi
LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbZbbqiF
x2OizIP2GykB/uUXm5S+iFmSGpVHkdZvEKQzfBC/qaooJxt+OZE/aX8LBANuUz0J
inhSNZHelCXck4qnT5B4kyL+djPB0ZDGBHvJ9w3DRrIjDGs8D56/Nb0S0Yze/FSs
nbw0WhdOxu1sS6Na3o9BaKbVh05XXxrZsoKXLaofqzSfHIeDBE3KrLhdKlwxmt+b
SwEvxSt0WCmnducuJGsie+j3wIdwrlGJrmOWjpUxBSRLlcsu5AHHZUttzr483AVi
1ZBlqhz1PRBUX1huj4frSs5vmKmDjKt8H+2iESgfiTpPuQe2yTgNBqZGRQDW6A+d
rGLnOZJHsIBwIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:41 2025 by rpki-client