Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          M1xh8wztyyY57DnMq/ylgKfIktlzrcKmMjc5MFbOgz8=
Subject key identifier:   94:F6:CE:FA:B5:C4:D3:1E:9B:69:27:95:75:49:B6:47:B9:3E:1D:8A
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019A500773B0D4EFDC213B77011C0A5AEE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          16DB
Signing time:             Tue 04 Nov 2025 18:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:56 +0000
Files and hashes:         1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: m0A7R/6taSX6RQQkOoVsdHbU9hk9ekMxRP5ytyKzec4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:73:b0:d4:ef:dc:21:3b:77:01:1c:0a:5a:ee:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Nov  4 18:00:56 2025 GMT
            Not After : Nov  5 18:00:56 2025 GMT
        Subject: CN=94f6cefab5c4d31e9b6927957549b647b93e1d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d2:f4:84:6a:93:31:48:97:98:cb:f1:ad:de:
                    af:0f:c9:71:55:a3:e3:65:86:f5:45:a0:7b:9c:1d:
                    3b:6a:1a:f1:89:bd:07:dd:c2:07:eb:77:42:ef:9e:
                    06:2b:6e:4e:41:9c:d1:4a:e1:14:4e:17:33:87:40:
                    ed:f5:7c:0f:b5:2f:5e:62:84:8a:63:c3:74:35:f3:
                    9d:9d:dc:d9:73:80:4d:c5:bf:d1:f5:c2:fc:7c:6c:
                    1d:ef:a7:33:42:5c:bf:75:a6:56:a2:35:6b:59:7a:
                    72:f0:f5:54:26:22:f6:b3:7b:35:84:43:fa:07:b0:
                    10:1f:db:5e:d3:98:7a:4e:ab:49:9f:5e:bf:b5:05:
                    73:bd:c1:4e:72:9c:73:84:7f:a6:c0:da:63:00:d0:
                    60:7f:19:ff:77:50:ef:f5:05:1c:ab:9e:7b:a0:49:
                    0c:d8:bd:76:0d:50:f7:4e:f4:40:ed:56:72:76:f2:
                    68:17:86:3e:1c:49:ab:bd:49:a8:ea:a9:a7:1d:07:
                    d3:36:76:8b:3c:e7:ad:f8:6b:da:6f:cf:83:e6:b4:
                    aa:4c:fa:74:bd:9f:6c:08:b6:12:89:8a:c5:87:0f:
                    e1:5e:98:b7:6a:58:3b:84:6c:1a:df:30:b6:df:45:
                    d1:92:33:75:47:59:60:d4:05:af:4c:40:ad:43:9f:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:CE:FA:B5:C4:D3:1E:9B:69:27:95:75:49:B6:47:B9:3E:1D:8A
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:3f:93:89:c3:c5:8a:35:28:aa:55:e4:30:64:8c:7f:33:
         42:16:ed:b3:05:53:5c:fc:a2:4e:c1:b2:a3:4c:a9:1a:a2:94:
         02:5a:45:cb:5c:50:6b:bc:00:e3:16:1c:8f:aa:d1:8c:d0:46:
         b5:8d:26:7e:c7:f5:94:64:f6:e1:72:4e:49:e6:b9:1e:1b:b6:
         b7:bc:64:bf:d4:b3:9c:43:cd:ab:cd:77:45:de:be:0f:05:d6:
         7f:b9:6e:25:2c:ef:3f:11:e5:c1:fb:ac:e0:51:ad:72:7f:c6:
         36:3e:cd:12:15:4a:90:cd:3e:31:68:84:9d:92:64:90:fb:a8:
         35:66:f8:92:76:d9:0a:78:1d:56:1d:6a:36:d3:54:a4:2b:d6:
         fd:4c:18:f4:94:7c:fa:aa:96:f3:e1:e0:e1:20:2e:ba:3b:55:
         d4:b7:c5:91:1c:5c:dc:c4:ad:6e:a4:d4:39:af:4a:6f:74:64:
         df:f1:d6:5a:9e:4a:40:c9:73:59:7d:2d:ac:2d:56:cb:30:39:
         b7:b7:2d:ab:7f:99:76:b5:0f:c2:ee:7f:6f:5d:25:3e:0c:49:
         66:29:dd:65:c5:ff:5e:da:fc:f8:67:bc:3e:5d:d4:4c:a6:f0:
         08:9f:00:21:95:55:64:3c:cb:90:b7:71:2d:f4:a5:b4:ef:cd:
         f2:5c:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:39 2025 by rpki-client