Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          Rc7te0R6IW5Nl2IQ/hUtGfR87pyNwGEhMYwfltKON78=
Subject key identifier:   28:ED:57:76:2C:40:66:74:B4:5B:20:2C:F0:85:CC:30:D6:2B:A9:70
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       019A503E157604F0F475AFC83C05AB4EB139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 19:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:37 +0000
Files and hashes:         1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: ryWH7xdPbl83DWBGeHxxwlpyTQUeYait9J/Ivhigk0g=)
                          2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:15:76:04:f0:f4:75:af:c8:3c:05:ab:4e:b1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Nov  4 19:00:37 2025 GMT
            Not After : Nov  5 19:00:37 2025 GMT
        Subject: CN=28ed57762c406674b45b202cf085cc30d62ba970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:40:29:ca:8a:61:1d:46:d6:a3:83:af:99:
                    8f:f3:0d:af:01:0e:0a:af:9f:74:33:9b:7c:09:ae:
                    bc:33:80:0e:82:9b:b3:ef:56:70:34:16:68:6c:9b:
                    71:05:43:f1:05:a8:d0:6d:6b:79:64:55:38:7e:69:
                    25:72:37:6a:bb:60:91:23:33:10:60:c9:8a:b0:59:
                    22:d2:35:b7:1c:f5:0c:e1:70:d0:37:8a:45:c1:06:
                    20:e1:2b:be:96:ac:30:e4:61:2b:ca:f9:b9:77:f3:
                    e6:46:ef:02:07:90:9e:59:a6:67:e0:12:71:41:09:
                    3b:ec:32:22:e2:ab:a2:81:b0:00:86:12:b1:58:e5:
                    bb:c7:40:9e:97:b1:1e:99:c7:45:43:2b:61:29:21:
                    5e:a3:71:c8:a7:c3:56:9b:74:d7:34:2d:7c:db:ba:
                    0f:08:95:b4:b7:e5:6b:b2:eb:87:69:c6:9d:22:d6:
                    c7:32:56:70:67:ae:74:4e:ed:be:80:48:20:db:9d:
                    59:4a:47:f8:fd:6d:e8:5e:cb:b9:a5:3a:fa:a0:c4:
                    29:1a:1f:ff:89:7e:98:de:3b:02:67:05:f0:eb:2a:
                    b9:e7:39:ef:b0:82:7c:a0:70:ce:78:ca:9d:3c:63:
                    5d:ee:ad:fb:22:6c:a4:52:4a:bf:b6:b0:a1:4f:d5:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:ED:57:76:2C:40:66:74:B4:5B:20:2C:F0:85:CC:30:D6:2B:A9:70
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:69:4d:45:5d:04:0a:b7:f7:33:d0:d0:c7:30:c1:bc:78:
         42:9a:40:e4:1a:8f:b5:6c:5d:37:df:19:1c:b1:ef:b9:4a:02:
         d6:4d:81:d4:22:c5:49:4b:dc:4e:cf:af:bb:9e:cc:2a:b3:70:
         0f:1e:6e:d7:f1:c6:82:19:24:1c:b5:5d:9c:19:5d:dc:78:c6:
         00:fe:39:6b:da:30:2c:46:cd:e5:a7:f5:39:bb:47:b8:30:4f:
         34:c6:8f:34:59:71:db:4d:5b:66:21:c6:b3:e3:17:61:b9:38:
         75:99:87:e8:1c:ce:75:e1:e9:33:68:13:a4:e9:d5:e8:f8:3e:
         8d:a9:7c:67:62:2c:1f:df:33:35:ef:4f:53:fa:01:4b:7b:74:
         00:e7:f8:58:b4:f5:78:ea:a2:06:63:10:dd:5d:76:03:d2:82:
         18:06:2d:13:a7:c2:10:57:0e:58:4e:a7:95:2c:96:de:29:63:
         0b:6e:5a:18:8c:52:97:7d:5c:e4:5c:d2:6c:33:bd:90:b3:cb:
         e2:27:66:b4:8a:fe:32:6a:0f:00:b5:96:bd:d8:b4:cf:8f:07:
         30:a6:bb:8c:0d:b6:68:51:71:28:e5:78:80:98:ec:6b:21:90:
         00:f1:f2:2c:eb:e4:ab:63:a3:5b:47:4b:c8:b5:70:aa:06:54:
         b8:80:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:57 2025 by rpki-client