Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          hJWCH5wDAQ27AsISmOFD3sBG7+TF3nlRAmduWhvCGho=
Subject key identifier:   AB:36:A7:4E:37:D7:C9:B5:B9:81:EF:7C:1F:57:64:5B:73:55:E3:7C
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019A503DD0B5632B5BE74D7C674845F7AB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          1719
Signing time:             Tue 04 Nov 2025 19:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:19 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: nJ/lCftmX4H4RStBJA2x+CRRN3d2Pn2+YESXIxWGImY=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:d0:b5:63:2b:5b:e7:4d:7c:67:48:45:f7:ab:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Nov  4 19:00:19 2025 GMT
            Not After : Nov  5 19:00:19 2025 GMT
        Subject: CN=ab36a74e37d7c9b5b981ef7c1f57645b7355e37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:aa:62:23:ce:88:80:6b:a1:33:f0:ca:33:
                    b1:8d:8f:f9:85:b7:7e:90:f1:63:20:8d:41:45:b7:
                    c6:fe:ac:5a:25:33:d5:bc:17:9d:f0:30:88:db:0b:
                    44:0b:29:47:af:c1:97:0c:f2:fa:0c:24:e6:87:80:
                    42:9b:31:98:73:7f:cc:26:1b:e6:a8:b2:a2:03:1d:
                    02:6f:92:5a:08:48:0f:08:f1:3e:a2:6a:2f:b4:54:
                    d2:9b:e0:51:4c:63:09:85:d8:f9:03:fe:37:84:73:
                    6d:fe:22:e1:19:b4:ce:30:61:07:cf:ba:83:e7:91:
                    63:53:60:cd:9d:54:cf:13:c2:f8:4c:91:81:3d:4d:
                    bf:07:4e:24:88:b2:cb:5f:d7:65:95:27:fa:0d:5a:
                    4a:7c:60:b7:c6:48:88:21:3a:bd:2f:7c:37:ae:bf:
                    5d:68:3d:0b:09:38:40:90:89:67:40:b4:3a:ba:8b:
                    76:8c:42:df:d6:83:05:d0:37:81:7f:d9:12:e7:cd:
                    8e:6f:58:1c:5a:c9:77:cf:7b:21:63:47:fb:67:1a:
                    bb:e0:c3:e3:dd:c9:f5:99:4d:fa:bc:ee:ab:4a:66:
                    8b:13:bc:0b:aa:f4:be:f8:93:33:5c:37:83:d3:c5:
                    11:9f:80:52:2d:de:e6:e5:79:db:1c:75:ff:f2:4c:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:36:A7:4E:37:D7:C9:B5:B9:81:EF:7C:1F:57:64:5B:73:55:E3:7C
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:14:e9:36:0b:9c:55:44:81:ce:95:e1:10:b8:21:15:c6:
         1b:a8:11:98:16:ed:cc:42:5f:7c:62:63:9c:c9:dc:9e:ad:63:
         53:ae:c4:16:b6:06:74:51:e3:eb:03:bc:24:ce:c0:9b:5d:cf:
         48:72:38:f8:1b:8e:73:80:f6:72:09:13:7f:a8:ba:81:bb:b4:
         8b:71:dc:87:66:f8:ed:14:a2:ad:65:99:17:fc:06:af:e3:c6:
         c5:76:0f:34:7e:14:f8:e9:fc:1c:69:e4:49:48:d2:c5:a7:71:
         bc:18:1c:53:de:31:18:b0:42:4f:fd:50:10:d7:a9:9e:e9:9a:
         61:eb:81:84:63:8c:3c:8f:c5:50:e3:85:13:66:2a:38:7f:7f:
         78:7a:d5:75:3d:b1:bd:26:c0:8b:37:95:3a:be:a3:27:7b:07:
         30:4b:bf:b2:94:06:f6:55:05:6e:54:c4:eb:97:09:20:6d:4e:
         d1:ad:6f:28:a0:32:90:55:7c:df:d9:d8:a8:8e:39:3b:a5:22:
         3e:af:cd:6c:2d:26:12:c2:d9:18:a2:17:3f:c6:00:25:15:e5:
         bd:20:91:52:f8:12:b5:d3:42:53:47:7f:6c:ff:2a:ce:02:1c:
         d9:fa:a0:6a:87:58:fc:d7:72:14:17:68:90:d8:bf:54:f0:c2:
         5e:4c:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:58 2025 by rpki-client