Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File:                     g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier:          LTCKpMM7SaCnsyt80c0axDMMpDkjeG7XDW7cmtGtvGY=
Subject key identifier:   5B:D9:6C:F1:39:96:2C:45:55:42:98:95:3A:AC:69:ED:47:24:9F:D7
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer:       /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial:       0199FAA0DF38200FC3305F1E555694735978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 04:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:10 +0000
Files and hashes:         1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
                          2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: mUjBxWENvsGYO53pXu19bhXM78Xw3OXENWyMKwJ7rx4=)
                          3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:df:38:20:0f:c3:30:5f:1e:55:56:94:73:59:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
        Validity
            Not Before: Oct 19 04:01:10 2025 GMT
            Not After : Oct 20 04:01:10 2025 GMT
        Subject: CN=5bd96cf139962c45554298953aac69ed47249fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:ac:b9:4a:4c:11:8c:9d:58:3c:55:b3:9f:
                    8d:f0:a4:f9:15:9b:d6:93:66:fb:5c:82:13:10:a0:
                    45:4c:c3:1b:97:38:5f:7d:f9:b9:92:41:29:af:45:
                    10:db:7f:bc:d8:10:bc:ec:43:f8:c7:5d:98:01:89:
                    db:70:3b:d8:04:67:4c:c8:d3:e2:fc:e6:d1:7c:bb:
                    f9:e8:7c:4c:90:ec:43:5f:bc:8d:7c:88:de:8c:11:
                    3a:95:59:d4:d9:dc:70:2c:97:fc:63:de:c9:79:bf:
                    17:82:93:fc:c1:95:9a:1b:c2:6f:14:69:d7:b8:7b:
                    d4:84:71:41:6d:c0:34:36:dd:b3:37:6f:0d:c8:50:
                    d5:14:66:28:32:09:0e:92:71:3b:fc:1d:20:06:d3:
                    8e:33:65:f0:30:5c:69:40:c4:ef:c4:ad:bf:1f:ae:
                    a2:22:23:4a:76:31:f9:92:6e:c5:63:de:24:e8:4e:
                    39:07:31:96:a1:7a:e2:5e:15:9d:8b:aa:6e:cf:25:
                    21:dc:9c:3f:b4:6e:96:a8:77:93:d7:4f:c9:44:79:
                    79:74:48:85:fd:12:da:fc:94:a3:c4:91:a3:85:c3:
                    0c:3a:23:91:a8:58:de:6e:e8:2c:4c:f4:1d:6f:23:
                    a8:ba:f9:f3:31:89:6d:49:42:6c:9e:43:6f:da:47:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D9:6C:F1:39:96:2C:45:55:42:98:95:3A:AC:69:ED:47:24:9F:D7
            X509v3 Authority Key Identifier:
                keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:0e:d0:0a:67:25:7d:69:5e:3d:d0:ec:fc:1d:73:ad:34:a1:
         7a:92:a1:b3:06:dc:ca:36:2e:c6:b1:93:26:10:31:26:b1:0b:
         59:ad:53:aa:58:55:1b:05:7d:19:52:f2:93:2c:36:a5:e1:c9:
         13:db:51:36:29:c6:2f:4b:0b:0a:45:d9:66:99:c4:c0:e2:20:
         63:ce:90:c8:7b:dd:22:7a:e0:12:71:67:b4:22:25:f9:1e:b4:
         8a:c6:0c:5a:97:21:01:e3:1e:ac:c3:0f:c1:ac:2c:4b:67:d7:
         81:59:f1:94:fb:ee:14:74:1c:5b:18:bf:92:42:4a:76:43:67:
         b1:c0:fe:37:25:a6:10:0e:82:f0:fd:08:58:53:38:51:94:6e:
         cb:b1:ae:16:87:bf:6c:63:f4:9d:8d:6b:ba:3f:27:b8:21:03:
         f0:d9:41:1d:5e:ed:48:39:75:8a:f0:00:a3:a3:f3:39:d4:98:
         0d:f7:17:8f:43:82:9a:fe:c1:d2:7d:19:00:7a:f2:f7:e3:b4:
         d1:66:bf:fb:6e:e6:1a:13:06:9f:fe:1b:11:66:30:dd:cf:91:
         6b:1e:32:78:0d:89:7e:df:0e:2f:83:fc:b8:7d:82:0d:db:9e:
         3e:3c:ce:59:fa:92:58:16:56:63:ca:90:4b:e0:90:5d:57:b9:
         a4:a8:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:26 2025 by rpki-client