Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File:                     6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier:          tH7ji8/Iq1kmC5wyIdHUzSzb/oUVqYyR5HvicZYwy9M=
Subject key identifier:   8F:DB:6F:99:29:F9:DB:E2:2E:DB:1F:06:37:FC:94:3D:B5:B7:37:BA
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer:       /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial:       0199FBEA7B5883C79A35A3E2F8B05F59BAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number:          120E
Signing time:             Sun 19 Oct 2025 10:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:12 +0000
Files and hashes:         1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: DSBhp1SGGlXn4pgtkNAPjdVLkC0JO8z+N4iJXJ77k2g=)
                          2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
                          3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
                          4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7b:58:83:c7:9a:35:a3:e2:f8:b0:5f:59:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
        Validity
            Not Before: Oct 19 10:01:12 2025 GMT
            Not After : Oct 20 10:01:12 2025 GMT
        Subject: CN=8fdb6f9929f9dbe22edb1f0637fc943db5b737ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:74:70:76:b5:94:00:74:40:3f:65:e5:9d:
                    cb:3e:c6:58:b4:f8:1e:9c:eb:79:3f:09:e5:32:35:
                    ed:d5:42:43:10:ee:6d:63:35:c9:d7:46:65:23:0e:
                    58:69:78:67:16:6f:83:07:d7:35:70:5b:e9:cf:d4:
                    ba:ba:2c:fe:6a:81:5b:a6:0f:d0:eb:f3:ae:9c:43:
                    ec:09:6b:7c:0b:55:b9:73:8d:20:d1:30:5d:5a:0b:
                    de:c3:fc:a7:19:93:48:3a:9c:d8:b2:5d:73:2c:3b:
                    f7:4d:56:fd:61:ca:99:63:40:d1:82:95:6b:01:2f:
                    e9:b7:1a:27:4f:eb:8e:74:c7:ca:4c:f9:cb:26:9f:
                    8b:f5:24:8e:77:4c:a4:ea:5a:bc:fe:a1:1b:c6:f6:
                    4d:46:18:a8:3f:46:46:a1:df:fe:b6:d5:b2:d5:fc:
                    5e:2d:b8:20:ff:80:ac:ee:c6:05:07:87:52:47:2d:
                    38:2b:c0:00:fe:24:2b:e5:58:16:ce:df:a7:dc:b4:
                    c8:46:26:1b:de:44:02:55:a4:0c:fd:eb:e9:ee:34:
                    69:13:e6:93:d6:41:1a:a7:64:21:0d:82:7a:e8:60:
                    36:54:64:91:06:60:f4:56:1d:78:38:be:9b:82:51:
                    22:a5:b0:8a:bf:b2:d1:24:c1:9a:95:8a:a4:fe:b0:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:6F:99:29:F9:DB:E2:2E:DB:1F:06:37:FC:94:3D:B5:B7:37:BA
            X509v3 Authority Key Identifier:
                keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:ac:5b:29:bd:78:22:c9:07:79:a5:5c:37:ad:02:6c:ea:
         a5:e8:0c:8a:f3:da:af:b5:d7:99:0c:aa:91:13:df:a7:07:ee:
         ca:4b:23:1a:6b:83:9c:a2:49:6d:0f:74:2c:31:0e:42:ba:0a:
         31:9b:3b:bc:03:6b:00:70:13:c5:cc:b7:da:12:45:2c:ad:be:
         ce:1d:df:e3:bc:8f:39:45:a6:5f:90:18:3f:e0:09:30:92:ab:
         b9:9f:2f:85:75:4a:1b:05:5a:e8:3f:d6:4c:81:ac:7e:4d:f1:
         86:da:f0:03:09:a3:b5:cb:08:87:0c:38:40:fb:bd:d8:06:de:
         92:8c:48:5b:5f:4b:fc:33:1c:0e:cb:10:76:01:4c:ea:64:5c:
         e8:b4:b2:23:bd:a2:26:70:e8:48:3c:f8:4b:93:b3:8f:70:c4:
         06:32:6c:19:c9:d1:3c:e1:19:42:72:85:3b:b3:9a:91:06:6f:
         04:46:76:7b:34:5c:8b:b1:6b:d2:87:a1:8d:40:88:f0:79:38:
         9e:3f:e3:15:57:5b:c2:ce:78:26:99:cf:d4:b0:56:4c:21:7f:
         d8:9d:f6:47:28:2d:65:21:39:1f:9f:0f:34:54:c1:cd:b5:1d:
         5a:c6:63:ff:b7:9a:31:59:31:7b:52:22:36:7c:a9:51:4c:7f:
         d1:77:d0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ntYg8eaNaPi+LBfWbqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NjNjgwYzg1OTgzZTdiZjc0NDk4ZDBlNmJlODAwZjg2
NDUxYzMwHhcNMjUxMDE5MTAwMTEyWhcNMjUxMDIwMTAwMTEyWjAzMTEwLwYDVQQD
Eyg4ZmRiNmY5OTI5ZjlkYmUyMmVkYjFmMDYzN2ZjOTQzZGI1YjczN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzN0cHa1lAB0QD9l5Z3LPsZYtPge
nOt5PwnlMjXt1UJDEO5tYzXJ10ZlIw5YaXhnFm+DB9c1cFvpz9S6uiz+aoFbpg/Q
6/OunEPsCWt8C1W5c40g0TBdWgvew/ynGZNIOpzYsl1zLDv3TVb9YcqZY0DRgpVr
AS/ptxonT+uOdMfKTPnLJp+L9SSOd0yk6lq8/qEbxvZNRhioP0ZGod/+ttWy1fxe
Lbgg/4Cs7sYFB4dSRy04K8AA/iQr5VgWzt+n3LTIRiYb3kQCVaQM/evp7jRpE+aT
1kEap2QhDYJ66GA2VGSRBmD0Vh14OL6bglEipbCKv7LRJMGalYqk/rC1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/bb5kp+dviLtsfBjf8lD21tze6MB8GA1UdIwQY
MBaAFOh8xoDIWYPnv3RJjQ5r6AD4ZFHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYt
MTRkMDJlMzBkMjI3LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYtMTRkMDJlMzBkMjI3
LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMysWym9
eCLJB3mlXDetAmzqpegMivPar7XXmQyqkRPfpwfuyksjGmuDnKJJbQ90LDEOQroK
MZs7vANrAHATxcy32hJFLK2+zh3f47yPOUWmX5AYP+AJMJKruZ8vhXVKGwVa6D/W
TIGsfk3xhtrwAwmjtcsIhww4QPu92AbekoxIW19L/DMcDssQdgFM6mRc6LSyI72i
JnDoSDz4S5Ozj3DEBjJsGcnRPOEZQnKFO7OakQZvBEZ2ezRci7Fr0oehjUCI8Hk4
nj/jFVdbws54JpnP1LBWTCF/2J32RygtZSE5H58PNFTBzbUdWsZj/7eaMVkxe1Ii
NnypUUx/0XfQ3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:41 2025 by rpki-client