Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          QTb/Vuju2vMhsZ/AYicPe3noIKQdvwrQS4UsP/8YX9A=
Subject key identifier:   55:57:B9:65:33:7C:5F:C7:D2:B6:51:CF:8C:7D:AE:1C:D5:D2:7C:FF
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       019A50E282AFFD245297A1503000B67B4911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          1109
Signing time:             Tue 04 Nov 2025 22:00:13 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:13 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:13 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: D/pdo7aKL23E2ZQl7Zo62Utwdf6hOEHsuf9DArHoYgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:82:af:fd:24:52:97:a1:50:30:00:b6:7b:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Nov  4 22:00:13 2025 GMT
            Not After : Nov  5 22:00:13 2025 GMT
        Subject: CN=5557b965337c5fc7d2b651cf8c7dae1cd5d27cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:92:71:57:ed:ff:c3:ab:7f:e8:cf:d0:fb:
                    66:7f:97:e8:fb:22:d3:67:8c:55:b2:68:b2:43:ae:
                    de:b5:20:45:47:06:69:db:63:c5:cc:68:aa:73:f9:
                    b2:c1:75:e3:19:e9:26:29:e7:73:38:a2:04:af:3b:
                    58:e6:79:d4:56:06:35:ab:79:dc:5a:c2:5c:22:f7:
                    8b:5e:2a:12:af:77:e9:cd:1e:70:4a:00:2a:b1:3e:
                    17:cc:6c:b0:c1:7d:df:0e:89:4a:3d:62:1a:c1:ea:
                    e9:e6:8f:ec:c0:9f:24:76:da:de:0c:04:e0:53:69:
                    22:d5:18:e6:ad:c8:08:d9:9f:eb:27:f2:43:cb:ad:
                    a2:99:d4:83:45:ad:a3:8a:26:ef:2d:74:04:bd:7a:
                    ef:a8:85:c3:6c:3f:be:13:70:bd:04:1e:b6:ad:fd:
                    3b:37:01:52:34:e8:d6:b4:7d:cb:a9:80:b1:19:4b:
                    3a:d6:c5:a9:9d:bb:9f:d1:fe:f0:d9:2e:9e:47:1c:
                    58:19:d8:9b:f4:f1:c3:0a:0e:ac:33:fe:9f:c9:71:
                    6b:73:e7:9c:c5:0d:35:35:e5:16:28:ca:a0:35:99:
                    8d:dd:4a:e4:d3:f8:a2:b1:a8:8a:b3:c2:89:df:a2:
                    49:d3:0c:db:87:d2:80:00:f0:6d:a4:30:70:cd:9e:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:B9:65:33:7C:5F:C7:D2:B6:51:CF:8C:7D:AE:1C:D5:D2:7C:FF
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:96:33:02:4e:33:47:24:db:3c:ff:4e:45:07:8e:21:83:69:
         36:9f:ed:42:bc:af:19:e6:f3:ce:d9:f7:cf:95:9b:87:de:60:
         5a:f4:eb:a7:ca:dd:8f:9e:74:45:cf:91:36:6c:e8:bb:16:cf:
         1e:78:d2:50:b2:63:be:50:a3:68:59:df:7e:27:91:4a:2d:f2:
         d4:5f:7d:03:d4:24:e3:e0:c5:0e:66:34:c5:f1:6c:5b:ca:94:
         bd:70:39:9e:de:8f:36:ae:0c:0d:a1:f3:7e:59:09:36:db:12:
         79:b0:1a:29:75:8a:b4:c8:a2:69:9d:55:36:41:6e:22:d5:fc:
         80:0b:73:0a:cb:d2:59:9d:9b:4a:5f:90:2b:5a:69:d9:0a:1f:
         1f:cd:81:ca:26:8d:c0:c5:9a:05:7f:22:4f:21:db:d6:4a:99:
         16:f0:13:a6:56:0d:14:a3:11:7c:8f:44:e1:6d:6f:91:70:da:
         34:ac:2a:f8:36:97:12:ee:04:b6:c7:69:7c:48:97:be:4e:23:
         d1:f9:46:56:60:72:77:cc:e6:5a:a7:94:cd:95:c2:ab:cb:20:
         54:2e:ba:c3:e6:c1:06:b2:6a:0d:ef:ea:77:21:a6:f4:c5:16:
         4e:6b:e6:c5:13:94:7f:98:74:96:d0:c5:81:17:b8:c7:08:57:
         9a:e9:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:07 2025 by rpki-client