Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
File:                     6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json)
Hash identifier:          g04bDB0o5lV6iIoFLsPyBMaR/NxDoibYzMkRAw7zQKY=
Subject key identifier:   96:3B:2A:B0:A5:55:EF:17:56:54:C6:45:07:9A:76:C8:AD:F9:0A:BB
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Certificate issuer:       /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial:       019A54C00104BEE251F021AF4E7E625E7BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
Manifest number:          1478
Signing time:             Wed 05 Nov 2025 16:01:00 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:00 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:00 +0000
Files and hashes:         1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: L8E+JL4ii+8pBRk2HMXHKMEXPaPjj81AVmzhiboTxSQ=)
                          2: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (hash: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:01:04:be:e2:51:f0:21:af:4e:7e:62:5e:7b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
        Validity
            Not Before: Nov  5 16:01:00 2025 GMT
            Not After : Nov  6 16:01:00 2025 GMT
        Subject: CN=963b2ab0a555ef175654c645079a76c8adf90abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:7e:51:a2:cc:93:a4:66:56:6d:60:3a:78:
                    bb:f9:15:b1:2a:d8:60:46:95:1d:75:95:62:f9:ea:
                    9e:39:30:31:08:b9:34:fc:22:93:b6:08:7f:88:c2:
                    f7:37:9d:64:85:23:1e:a2:31:d4:ea:99:b2:e4:88:
                    e9:cb:ec:24:98:18:2b:3c:e9:55:38:fc:77:3f:80:
                    d9:e2:f2:4f:07:72:97:66:ad:54:83:8e:48:c9:96:
                    ae:fc:60:1f:38:e6:8b:09:cc:6d:5b:52:5c:05:3d:
                    79:2d:e6:8e:9c:74:6f:45:9a:b1:06:1c:99:0d:4a:
                    b8:53:bb:45:e8:0e:99:eb:a7:51:19:23:3b:99:8c:
                    17:da:df:69:61:d4:06:2e:58:a5:29:ba:9b:b0:4d:
                    7c:ed:63:f6:ae:70:02:18:35:b2:6d:d1:39:28:b1:
                    a6:15:c6:f9:41:e7:09:ab:bc:e7:ae:53:f6:9d:06:
                    77:2d:d3:ff:25:76:67:b7:33:15:95:44:72:ad:e7:
                    6e:ab:d9:2f:ae:af:18:7f:81:88:7e:eb:c5:9e:ec:
                    1a:be:c4:d4:f2:09:8d:40:a3:4b:cc:be:c8:b0:d7:
                    2c:0e:f7:46:72:c6:eb:cd:57:97:df:de:26:12:fb:
                    8d:7e:2f:72:4b:7e:ce:49:b5:70:64:62:4c:83:ec:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3B:2A:B0:A5:55:EF:17:56:54:C6:45:07:9A:76:C8:AD:F9:0A:BB
            X509v3 Authority Key Identifier:
                keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e9:f3:57:98:ad:60:2f:d7:2f:db:38:bb:55:11:32:9e:98:
         b8:92:78:db:16:3b:f6:16:41:6f:9d:90:1c:ce:c3:d0:32:e6:
         17:4a:39:70:48:b1:10:4a:b3:cf:91:9f:08:59:84:9c:36:93:
         72:9f:cc:3e:ee:c4:65:6a:cd:a8:b0:27:ae:79:e2:91:d2:a9:
         ab:06:ab:88:67:f5:0a:8b:89:de:cb:2a:d1:9c:bb:cc:12:42:
         5b:1f:57:d2:87:b5:08:10:2a:d3:82:75:11:56:7d:e7:6a:7c:
         a5:bd:50:e9:7d:fa:63:de:ce:30:a5:e7:04:4b:89:49:01:dd:
         60:db:d5:21:3b:4d:b7:f5:d9:0e:e9:c3:1f:c0:34:7f:c0:11:
         2f:3c:ee:a0:d9:1b:a9:f4:b9:a2:d5:84:68:b7:fc:3d:ec:73:
         28:88:84:d8:73:76:04:7e:75:98:e5:64:ea:ba:0f:2f:ab:80:
         d6:93:93:84:95:4e:27:97:e4:41:eb:8e:84:3d:31:df:e2:56:
         c2:ae:61:bc:a4:c6:6d:d8:88:4e:69:8a:60:5b:8c:11:c1:41:
         aa:96:2f:ed:cc:cb:9d:d2:ab:dd:ec:47:cb:5d:d5:4a:52:c2:
         a9:f0:65:84:0a:70:a4:60:ac:2f:04:c0:6c:1b:52:00:c1:f0:
         f3:98:13:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwAEEvuJR8CGvTn5iXnv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMGQ1M2M4NzA3MTQ4NDk3MWFlZGZkOTBjYTZlY2M2NTZh
OTZlNGMwHhcNMjUxMTA1MTYwMTAwWhcNMjUxMTA2MTYwMTAwWjAzMTEwLwYDVQQD
Eyg5NjNiMmFiMGE1NTVlZjE3NTY1NGM2NDUwNzlhNzZjOGFkZjkwYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprl+UaLMk6RmVm1gOni7+RWxKthg
RpUddZVi+eqeOTAxCLk0/CKTtgh/iML3N51khSMeojHU6pmy5Ijpy+wkmBgrPOlV
OPx3P4DZ4vJPB3KXZq1Ug45IyZau/GAfOOaLCcxtW1JcBT15LeaOnHRvRZqxBhyZ
DUq4U7tF6A6Z66dRGSM7mYwX2t9pYdQGLlilKbqbsE187WP2rnACGDWybdE5KLGm
Fcb5QecJq7znrlP2nQZ3LdP/JXZntzMVlURyreduq9kvrq8Yf4GIfuvFnuwavsTU
8gmNQKNLzL7IsNcsDvdGcsbrzVeX394mEvuNfi9yS37OSbVwZGJMg+ykhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY7KrClVe8XVlTGRQeadsit+Qq7MB8GA1UdIwQY
MBaAFOsNU8hwcUhJca7f2Qym7MZWqW5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0Mjct
ZDYzOTgxODM1MjVkLzEvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0MjctZDYzOTgxODM1MjVk
LzEvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+nzV5it
YC/XL9s4u1URMp6YuJJ42xY79hZBb52QHM7D0DLmF0o5cEixEEqzz5GfCFmEnDaT
cp/MPu7EZWrNqLAnrnnikdKpqwariGf1CouJ3ssq0Zy7zBJCWx9X0oe1CBAq04J1
EVZ952p8pb1Q6X36Y97OMKXnBEuJSQHdYNvVITtNt/XZDunDH8A0f8ARLzzuoNkb
qfS5otWEaLf8PexzKIiE2HN2BH51mOVk6roPL6uA1pOThJVOJ5fkQeuOhD0x3+JW
wq5hvKTGbdiITmmKYFuMEcFBqpYv7czLndKr3exHy13VSlLCqfBlhApwpGCsLwTA
bBtSAMHw85gTLg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:41:46 2025 by rpki-client