Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          3EvAu1zy6c1N3ekKYQ1IhiPqxWxN7Ac6yoAExzcOJ/Q=
Subject key identifier:   95:CF:58:8F:C3:D8:C0:18:B8:37:A3:F3:2C:E3:7C:31:62:AC:2B:71
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019A4DE1D928707FAE75C7F5A0FBE469300A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          16F4
Signing time:             Tue 04 Nov 2025 08:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:37 +0000
Files and hashes:         1: 8GYAexsjvmr0ISLsQKryGmpLtTs.roa (hash: SQMUuzA/SYQZuwCfc0e9iAWXVLPmE3XP9dpG659uDkI=)
                          2: GX0hRHwpO_GFAf_Dl8eMW3z_248.roa (hash: HctIB8ovJUFcdq28I1mZn+xQVZZMOfz92Vt9MrUaS78=)
                          3: WKensdemy_AXuee8qERPXAv7WQQ.roa (hash: 5h5e2Cjl6Y6xTdpx1Uogj/kqIPDJsoW5m77rPfpWD30=)
                          4: Yp8Y2f-rm0XFP0JksYyQiIn5YI4.roa (hash: zUTWYSFUC05+hAZt14a3XZJms6iqhzhaVnj/uuxFKy0=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 6MwZFKNnm8TcHKIqtm/m5asB10X4wcaV67ZvU87wn/A=)
                          6: p78TdZM7jp7r56ACoeEx_vocT4c.roa (hash: GFGeQudO2jovI4snICeqKAiASNPKMGJsocJeu39JBto=)
                          7: tXVRXa1qJjFTp7ESN89vh6T8E94.roa (hash: 0lv9VjdN51nQRf36Hx017s+uMUMF9eBDdjJHsff15ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:d9:28:70:7f:ae:75:c7:f5:a0:fb:e4:69:30:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Nov  4 08:00:37 2025 GMT
            Not After : Nov  5 08:00:37 2025 GMT
        Subject: CN=95cf588fc3d8c018b837a3f32ce37c3162ac2b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:bf:19:44:84:f6:6d:03:f9:60:24:07:bf:
                    11:26:67:cd:6c:3a:34:db:1d:6c:64:a4:3a:7b:d8:
                    7f:6a:60:af:08:b3:47:01:7f:d0:63:d9:b6:64:4a:
                    fe:be:bc:43:75:ba:fb:9a:0a:40:6d:94:cb:88:77:
                    b9:cf:77:83:ec:aa:24:e7:eb:08:5d:eb:b5:71:70:
                    56:a1:99:03:77:4c:96:76:82:c5:ea:7c:a4:bc:b0:
                    83:9a:54:8c:1f:2c:0f:c7:47:63:b2:45:1f:31:bf:
                    48:62:fa:6b:e7:13:fa:14:42:6d:02:b4:68:98:eb:
                    0b:cb:14:ce:fd:73:3f:a7:02:7a:bc:9f:1c:fb:5d:
                    1a:f0:0f:03:98:74:81:c5:24:cb:13:27:99:c1:71:
                    d3:20:de:7a:78:36:3c:82:a1:d5:6a:d1:1b:7f:a1:
                    02:a1:40:0d:64:a6:fa:15:18:0d:75:2c:1c:d1:e3:
                    ae:24:04:4c:a4:cb:fb:c8:d1:16:2e:ce:1c:ab:4a:
                    8c:70:4c:87:66:b8:3f:70:b1:07:85:e4:06:db:19:
                    4e:bc:92:21:d6:16:73:26:c5:49:d1:f3:50:d3:b3:
                    f1:5d:ae:f6:7a:cb:04:86:2e:08:6b:66:53:e4:0d:
                    6e:da:2a:5f:54:0b:4d:60:5d:61:c4:e1:e9:5d:79:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CF:58:8F:C3:D8:C0:18:B8:37:A3:F3:2C:E3:7C:31:62:AC:2B:71
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:c0:fc:83:c8:1b:1b:3f:8f:a8:89:1f:01:19:68:0f:3d:
         ad:a6:c5:c5:01:5e:2a:7c:14:d3:7d:2a:2e:82:1d:81:08:b8:
         95:37:59:bc:75:f4:07:09:fb:8d:e7:85:e8:4a:b5:c6:04:d0:
         ad:53:0c:39:c3:9f:a8:57:9d:7e:33:17:e8:4a:24:2b:6f:c4:
         fe:70:1b:34:44:30:68:ec:b2:29:7c:79:f0:1b:86:16:d6:f7:
         76:41:33:a4:f5:39:0d:1d:eb:83:d1:db:7d:2e:8f:a8:5e:3c:
         2d:20:1b:41:b3:87:3d:85:fe:4c:db:4b:38:51:55:0e:9a:38:
         58:c1:c7:30:09:25:8c:bd:7d:54:a6:7d:f6:c7:f9:c5:ec:c2:
         b1:04:dd:60:77:d3:08:e4:41:63:1f:3d:ab:1d:1d:30:13:aa:
         6e:fc:4c:58:0c:d8:48:8d:a8:8c:13:97:8e:74:0e:09:6c:8c:
         7c:73:a2:75:1d:ec:fc:12:28:d9:a1:82:20:77:28:61:a4:e5:
         9b:cc:4b:d5:11:72:99:b3:f7:15:41:73:f8:92:db:12:dd:3f:
         c1:c4:6c:73:23:4f:c2:7c:9a:44:06:9f:93:7d:13:37:c2:21:
         13:ad:f6:9e:9d:a6:95:bd:9d:d9:ee:ba:de:2c:15:c3:b2:6e:
         35:1f:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:50 2025 by rpki-client