Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          FPhwEgnJl0yR6H7eqfqyX7gS3cl0bLM/QHw98J/mP0M=
Subject key identifier:   19:42:F1:89:8A:55:88:96:A1:6D:DE:48:CE:01:84:29:8D:B0:D3:05
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019A4F62B160AAEACA6CBB8C05D0A260B3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          1728
Signing time:             Tue 04 Nov 2025 15:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:59 +0000
Files and hashes:         1: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          2: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          3: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: D5nj7IT0DBEVbXqEUkYSDalefAWTmWvyN1yQV/GwxRI=)
                          4: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          5: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          6: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          7: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          8: VpUO8FztHwErwqX-N9UX_EYZh7A.roa (hash: KoW1E0hQQXw+2PHPNCjmoEVjfKo8T8cI7h2RXMqdk48=)
                          9: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          10: fjtFOz4IlAaEAQnySY7OoN_tT9k.roa (hash: +Sr0IAWH0Sl8SJhZIIslWSKF0Gz1QtZzH2BHIKdnR6Y=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:b1:60:aa:ea:ca:6c:bb:8c:05:d0:a2:60:b3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Nov  4 15:00:59 2025 GMT
            Not After : Nov  5 15:00:59 2025 GMT
        Subject: CN=1942f1898a558896a16dde48ce0184298db0d305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:6d:79:82:30:1d:f1:a1:27:d7:28:7b:22:
                    30:ec:c0:c6:46:d0:ef:0a:48:4a:9e:d8:47:65:3e:
                    c2:6c:67:75:b3:9a:66:d2:6e:49:c5:d7:39:ce:9a:
                    1e:f9:23:2b:ca:36:f8:e4:dd:f5:ef:b5:f9:bb:ba:
                    53:89:81:fe:ac:6c:57:a4:7f:eb:b9:1b:60:10:d8:
                    bb:26:35:67:2f:9f:3d:00:f1:b5:d2:3d:23:2a:e7:
                    93:5f:17:ce:1b:dd:bc:98:47:04:25:c9:2f:a1:c0:
                    56:eb:fa:16:cf:de:a3:fd:bc:e5:e4:c6:1c:60:25:
                    54:71:29:cd:fd:d6:fb:ec:33:2d:a3:59:2f:14:35:
                    b2:74:94:d3:89:15:4f:57:29:5c:ee:5e:86:8c:f4:
                    76:a1:82:f7:14:14:53:5e:3a:54:11:ac:42:0c:c5:
                    9f:01:e9:15:67:98:4e:5c:83:b8:be:3c:34:d5:17:
                    76:c3:d9:ae:5e:80:52:66:22:81:78:e1:75:7e:41:
                    18:bc:5b:fc:33:a8:72:e1:c3:68:60:5b:d0:f0:52:
                    58:2b:79:ad:56:6b:37:9b:25:61:ec:af:84:4a:4c:
                    41:29:11:04:98:dc:cc:b8:4b:5a:58:bc:6a:8b:cf:
                    a4:55:02:63:dd:f2:7f:2b:aa:6f:d7:78:7b:55:b2:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:F1:89:8A:55:88:96:A1:6D:DE:48:CE:01:84:29:8D:B0:D3:05
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:26:e7:81:24:6f:c0:5c:ac:e1:cf:9f:64:53:e5:35:f7:4c:
         0e:ab:e5:de:fd:fd:a6:79:2f:f8:4e:ba:e1:12:fc:26:67:7c:
         2d:f8:7c:39:8b:44:8a:b9:aa:22:58:a8:4e:d9:17:c8:15:26:
         d8:e2:48:6e:ca:91:2e:e8:21:bf:bd:c9:52:2b:c5:10:9a:c0:
         d1:2b:0c:8a:b3:01:08:38:59:a4:7d:fb:a1:e8:48:42:35:1d:
         b6:56:9d:48:16:25:6e:1a:7b:b2:60:2a:0f:83:0e:ff:c7:93:
         12:d6:03:3a:d4:8e:f7:48:dc:a2:f1:21:7b:21:b9:47:f8:4c:
         40:9f:18:c0:00:6e:77:65:6a:bb:8c:19:52:38:8f:1b:97:d6:
         6c:ee:72:10:1f:6e:bc:67:d0:a2:5c:6f:ef:b9:51:ca:48:3e:
         85:bd:20:e8:de:d2:33:26:fc:08:1d:68:55:0d:62:d4:ca:1e:
         0b:21:de:04:b4:17:b6:77:ac:4b:d8:60:6a:18:bd:2a:76:29:
         97:e4:50:f6:4f:64:16:b3:e3:55:4b:48:69:06:6b:17:c6:b1:
         38:5c:5d:62:65:16:38:ce:c3:29:b0:de:d8:06:30:80:fb:cd:
         79:b3:3c:22:5c:2e:31:46:92:60:40:32:cc:0d:da:43:78:79:
         51:64:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:07 2025 by rpki-client