Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          4WZ8eQsfoaXoMv7UiPGbUUuuTA3CsCvKExNis4kmXb4=
Subject key identifier:   B1:84:54:A5:5F:78:1B:F3:90:27:3E:E7:15:57:26:C9:C8:F1:73:99
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       019A4F61E24D2F23D5F2DDCBF1C7F3208709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          06C9
Signing time:             Tue 04 Nov 2025 15:00:05 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:05 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:05 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: YdYefeX/x5gaggnougUEiC2/2iC6TmgAKgB/zdhEbvo=)
                          2: Vrgx7vIvsF8zYOaGSae4akirA8E.roa (hash: ui7bIuQdVcdRVDf8eIFg2mfVrPzlEX+6v4UZ3XVxNiQ=)
                          3: fuvY2x3HsIO6gagsFqqITiQ_yGw.roa (hash: SuZo82ra513kqunDJrOE76D6k1ULI5qVhzPv0+Hxb8s=)
                          4: lhlKvmvkFsIW7BjWsR3tP1Wy7Fk.roa (hash: eyvbVaWDQgudnxbH2Wpb3cZMxMIr13klVBOw1VQYwwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:61:e2:4d:2f:23:d5:f2:dd:cb:f1:c7:f3:20:87:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Nov  4 15:00:05 2025 GMT
            Not After : Nov  5 15:00:05 2025 GMT
        Subject: CN=b18454a55f781bf390273ee7155726c9c8f17399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:64:d2:39:16:03:f7:19:21:65:34:d5:c2:
                    16:9a:d0:1c:35:03:f4:ab:16:73:6a:62:48:00:2a:
                    2d:59:69:56:36:0e:10:cf:48:59:03:58:b4:77:66:
                    75:ea:09:bf:5e:04:d3:d1:34:fe:d2:c0:57:59:e3:
                    c7:59:5e:af:5f:3b:52:ac:86:d8:e6:e5:1f:99:53:
                    55:29:b8:b1:dd:fb:2f:90:0d:b5:04:16:74:91:ae:
                    69:9f:5d:2e:07:ca:0e:17:64:32:d3:b8:00:ce:c1:
                    a1:da:ac:ba:0e:a6:bb:f1:3a:ad:14:5e:75:91:ac:
                    aa:9e:ff:9b:40:e8:e3:4a:26:76:c1:d0:2f:55:2b:
                    ce:77:1e:83:2c:bc:ac:1b:bb:df:0b:28:1e:ad:50:
                    aa:bf:7d:fd:d1:25:29:0c:c8:3e:94:73:1b:9b:6e:
                    d3:64:98:cc:6c:ed:fa:1d:5e:29:47:0c:2b:55:28:
                    92:7e:53:bf:3b:76:11:81:28:4f:f8:b8:00:25:d9:
                    4e:2f:30:37:a3:06:03:f8:6c:cf:ed:c3:17:f6:87:
                    ae:9c:f5:a2:b5:a5:04:85:78:1d:54:14:c7:09:8e:
                    93:f5:87:36:1f:d4:35:6b:4b:ea:44:3a:1a:b2:08:
                    c5:b6:fd:ca:10:72:a7:5f:47:66:b0:8e:fe:18:70:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:54:A5:5F:78:1B:F3:90:27:3E:E7:15:57:26:C9:C8:F1:73:99
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:88:e4:cf:76:4d:49:db:02:9d:6e:25:50:fb:3d:c3:49:f9:
         43:8c:30:e6:7d:60:7c:14:95:42:29:56:76:82:11:92:a1:c8:
         88:bf:a8:75:48:97:07:26:c8:1e:cd:ba:54:dd:48:83:92:a4:
         a8:f4:98:24:77:7c:b9:b1:ff:31:41:19:15:d7:d4:e6:27:55:
         0a:77:21:82:9c:d9:52:49:06:10:32:76:c0:ee:aa:89:e9:19:
         58:bf:6a:9e:10:8c:21:c7:20:ec:7b:be:20:65:42:f4:96:3c:
         70:67:64:a1:51:e4:67:fd:bc:12:41:7b:8a:be:93:6e:7b:c9:
         7f:f9:24:91:bd:6c:61:84:c1:ec:d9:49:83:c4:63:a6:d7:06:
         32:2c:0e:45:e5:d8:8e:c6:a1:8c:19:e1:83:7f:85:22:0c:3e:
         bc:c4:78:da:0b:7e:a2:88:9e:33:66:89:0b:bf:3a:0f:73:b0:
         b1:47:0d:5d:43:42:70:72:a8:de:42:64:70:a6:b7:37:3b:aa:
         3d:89:cd:48:fa:93:a5:0d:cf:61:18:63:bb:ed:de:2e:3f:99:
         5d:14:72:04:9b:9a:5a:09:94:22:d1:8b:bd:ba:35:a0:f0:8f:
         92:a8:d2:5c:b7:13:a8:1a:72:dd:53:4e:8d:fe:13:30:d0:17:
         12:8a:72:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYeJNLyPV8t3L8cfzIIcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4
NDFjOTYwHhcNMjUxMTA0MTUwMDA1WhcNMjUxMTA1MTUwMDA1WjAzMTEwLwYDVQQD
EyhiMTg0NTRhNTVmNzgxYmYzOTAyNzNlZTcxNTU3MjZjOWM4ZjE3Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sFk0jkWA/cZIWU01cIWmtAcNQP0
qxZzamJIACotWWlWNg4Qz0hZA1i0d2Z16gm/XgTT0TT+0sBXWePHWV6vXztSrIbY
5uUfmVNVKbix3fsvkA21BBZ0ka5pn10uB8oOF2Qy07gAzsGh2qy6Dqa78TqtFF51
kayqnv+bQOjjSiZ2wdAvVSvOdx6DLLysG7vfCygerVCqv3390SUpDMg+lHMbm27T
ZJjMbO36HV4pRwwrVSiSflO/O3YRgShP+LgAJdlOLzA3owYD+GzP7cMX9oeunPWi
taUEhXgdVBTHCY6T9Yc2H9Q1a0vqRDoasgjFtv3KEHKnX0dmsI7+GHDpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGEVKVfeBvzkCc+5xVXJsnI8XOZMB8GA1UdIwQY
MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt
NDY1ZDIyM2IyMzJlLzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl
LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkojkz3ZN
SdsCnW4lUPs9w0n5Q4ww5n1gfBSVQilWdoIRkqHIiL+odUiXBybIHs26VN1Ig5Kk
qPSYJHd8ubH/MUEZFdfU5idVCnchgpzZUkkGEDJ2wO6qiekZWL9qnhCMIccg7Hu+
IGVC9JY8cGdkoVHkZ/28EkF7ir6TbnvJf/kkkb1sYYTB7NlJg8RjptcGMiwOReXY
jsahjBnhg3+FIgw+vMR42gt+ooieM2aJC786D3OwsUcNXUNCcHKo3kJkcKa3Nzuq
PYnNSPqTpQ3PYRhju+3eLj+ZXRRyBJuaWgmUItGLvbo1oPCPkqjSXLcTqBpy3VNO
jf4TMNAXEopyug==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:08 2025 by rpki-client