Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          KGSbFgo4QKL5CCOyWscENG0HygOzGTkkr7RUOy27v3U=
Subject key identifier:   B7:AC:DE:32:CC:7F:CB:B7:24:BC:F9:28:D2:3B:ED:E0:70:C5:55:99
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       0199FC215FBE6D4C5E479AE2567F1BC61074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          16A5
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: B5tAkNt2DvfkTSLcUp2E8qYgDTxm3Lx68t+Pu5whIjA=)
                          2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5f:be:6d:4c:5e:47:9a:e2:56:7f:1b:c6:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=b7acde32cc7fcbb724bcf928d23bede070c55599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:cc:6f:17:ea:4c:0d:36:30:52:1c:9b:18:
                    eb:39:e5:93:83:85:6e:95:d8:39:e4:df:71:b4:72:
                    17:ad:3b:b7:b1:1a:5c:16:f1:26:dd:a2:d0:ea:34:
                    a2:5d:78:81:14:14:cd:97:d6:71:e8:b5:b8:00:4c:
                    55:02:af:92:71:f2:ab:fc:58:99:31:e9:f1:7f:c3:
                    a0:ce:83:74:e5:d7:13:3e:84:a4:7b:03:c6:a8:47:
                    58:d7:fa:02:88:b8:6c:61:ef:70:6f:14:4c:bf:fa:
                    0f:7b:02:5a:7d:8d:59:90:8f:37:8e:c8:d6:20:8e:
                    7e:66:d9:26:d2:b1:cd:e8:a2:ed:25:bb:6d:42:45:
                    13:72:57:e1:46:8a:9d:b6:8f:db:39:7c:50:d4:2f:
                    1d:13:19:9b:88:73:fd:b8:17:e6:dc:cc:f8:ab:43:
                    af:15:1f:f7:d7:19:b7:de:0a:52:2b:7a:29:47:21:
                    aa:84:96:ca:30:f8:c5:58:85:a0:c3:9f:49:ee:dd:
                    63:77:d4:e6:cd:9a:90:8d:13:b5:d7:f8:ad:82:85:
                    53:c2:0a:e1:8b:b7:70:36:be:f0:b5:c0:94:87:6b:
                    28:77:fa:dc:b7:e5:aa:b8:64:9d:0e:a4:fe:06:bf:
                    65:6a:46:04:f8:97:96:01:0b:7f:d7:52:84:bc:a5:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AC:DE:32:CC:7F:CB:B7:24:BC:F9:28:D2:3B:ED:E0:70:C5:55:99
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:87:77:27:cc:f9:db:26:08:2e:bc:af:10:d7:da:82:26:
         f9:18:fe:1a:12:4b:3e:06:c0:8e:17:35:c3:2c:da:53:2c:32:
         ff:b9:7c:0d:24:b9:6e:44:40:fc:f1:3e:d4:c6:95:7e:d0:00:
         bf:11:98:2e:c1:30:ff:12:98:cc:18:48:58:29:4f:b8:d7:cf:
         cc:11:e8:14:96:93:5c:3e:c2:23:0b:0a:5b:46:64:68:6b:3c:
         8c:1b:97:32:ce:c7:c4:21:48:38:98:52:f6:1f:94:46:00:81:
         4a:56:a4:24:72:8e:42:21:8a:d3:a8:d9:6e:70:e5:30:9b:39:
         be:55:44:cd:a6:04:5b:d2:f5:dc:4d:70:0f:1a:cd:26:58:ca:
         df:dc:37:a2:90:59:2d:c8:88:9a:50:f2:33:f1:cb:c8:63:c8:
         64:0d:dd:d8:a0:2b:59:41:c4:8a:a9:eb:6e:c1:f6:b1:f2:ef:
         e0:1e:8b:44:14:df:da:79:15:ff:c0:be:08:a8:c2:37:d1:4b:
         4f:39:a1:10:f4:f6:50:8f:4e:42:34:c0:52:34:39:82:db:a3:
         fe:72:84:c7:d1:fd:b7:dd:ed:48:53:f2:14:cb:bc:ef:6a:81:
         48:6e:53:65:3c:11:c2:3b:7e:f5:75:59:4f:4b:55:12:f6:08:
         fa:53:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:31 2025 by rpki-client