Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          wcX1o2i38t8ukFyO3b5uNd/tKXAmkIebiWjKW07Gawk=
Subject key identifier:   AD:49:D2:61:2F:7E:14:77:33:8C:7B:44:27:9F:A3:C5:6F:75:8E:DC
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019A50E33774996F393948C1B75B8729E185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0AF6
Signing time:             Tue 04 Nov 2025 22:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:59 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: Uqi7E6S6UdoU4wXHkDEFc5F8ei+9nTIjD2csX7wiIoI=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:37:74:99:6f:39:39:48:c1:b7:5b:87:29:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Nov  4 22:00:59 2025 GMT
            Not After : Nov  5 22:00:59 2025 GMT
        Subject: CN=ad49d2612f7e1477338c7b44279fa3c56f758edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:9a:02:7f:26:07:f3:a0:93:e3:e0:5c:f2:
                    2f:93:ec:eb:9d:3f:f4:84:c0:39:a2:6f:e8:c3:78:
                    7f:b9:e9:d1:71:45:c6:f7:90:a3:0c:93:0e:53:43:
                    b8:7f:9f:40:25:4c:00:18:3b:de:df:77:d8:ca:3c:
                    f4:9b:cb:36:f2:92:0f:cb:5b:e6:22:e7:ea:fa:d6:
                    d1:04:8b:90:8e:05:f4:c8:c8:ca:6b:1c:b3:d1:38:
                    a5:78:ce:b8:0a:65:25:73:af:ee:8e:06:3e:46:fe:
                    00:e0:ee:f2:2d:ce:6c:0e:6f:07:29:a3:3e:db:f7:
                    ef:83:c4:9a:6e:c2:89:99:a3:59:f6:e9:25:2f:55:
                    af:0e:6d:58:67:4a:09:83:9b:f4:59:d2:51:cf:d4:
                    ea:bd:d0:9f:e8:cc:91:68:fb:95:91:e9:d5:8f:2e:
                    b5:52:c2:0d:0d:c2:db:4a:dd:68:a1:9e:38:bb:66:
                    b7:04:6e:7a:76:87:57:08:d6:7b:53:f7:b3:76:a4:
                    25:ad:a3:9c:ba:ab:99:dd:31:c9:fc:9e:dc:1a:53:
                    99:52:62:93:9d:3a:fa:a0:8c:4e:68:37:9b:53:07:
                    91:90:0c:9f:94:eb:46:46:5f:53:8c:52:c8:8d:46:
                    4c:3a:ce:3e:15:be:ed:ca:d3:bf:6b:60:60:c8:2e:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:D2:61:2F:7E:14:77:33:8C:7B:44:27:9F:A3:C5:6F:75:8E:DC
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:50:f7:06:9d:71:29:3f:8a:0c:71:10:42:77:a9:64:ad:5e:
         2e:73:e5:62:2a:72:76:40:33:83:5b:ad:63:a1:3a:1b:e8:f6:
         25:b8:da:74:2e:8d:34:2b:b9:97:49:ec:81:8a:66:75:f9:90:
         62:12:16:b7:72:ed:19:bc:81:44:3a:c1:c9:9c:af:f3:f2:0e:
         23:7f:6f:0c:e9:ed:64:8e:cb:99:b5:4d:d3:b0:5e:de:8d:6b:
         b5:b6:55:f7:0f:7a:88:bd:8a:6d:8b:d5:21:af:cb:8f:f1:b9:
         16:98:8f:fa:2d:e8:6f:dd:33:7a:93:34:5c:68:f7:3b:e7:04:
         1f:05:0c:13:ba:c7:a7:57:52:af:ac:e2:c6:7c:36:41:ea:7f:
         ea:c8:c7:9c:e8:34:c2:a8:bb:27:fc:79:29:80:ab:6a:12:fa:
         77:f7:c2:25:cb:ec:6f:9a:c2:08:6a:57:22:e4:98:e7:1f:af:
         ee:87:f0:1b:04:8c:20:4f:3d:e8:f1:40:f3:69:20:77:40:b7:
         1c:60:12:15:af:1d:98:cf:f0:e4:83:15:b2:2f:bf:68:78:9f:
         42:14:b2:2b:9a:a0:b1:ae:3b:6f:e9:93:bb:c7:97:88:89:05:
         07:d0:21:cc:3c:c6:49:d0:15:bf:57:99:af:88:46:fd:b1:5b:
         e2:25:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:16 2025 by rpki-client