Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File:                     6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier:          0hFkdjEp5kQLpRiJyYkaY7+CBubYEtxb+Vh7byBIAno=
Subject key identifier:   81:60:81:8E:F0:34:27:FA:C2:B2:16:0A:AB:EE:75:02:8D:06:6F:76
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer:       /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial:       019A4DAA76B2C9F5152FA02150F180F45E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number:          0C6A
Signing time:             Tue 04 Nov 2025 07:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:08 +0000
Files and hashes:         1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: ZBgM+Z/xDjSSA4xM5Dq7Ym6lmmthsbL5zdMS7I2b4KY=)
                          2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:76:b2:c9:f5:15:2f:a0:21:50:f1:80:f4:5e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
        Validity
            Not Before: Nov  4 07:00:08 2025 GMT
            Not After : Nov  5 07:00:08 2025 GMT
        Subject: CN=8160818ef03427fac2b2160aabee75028d066f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:ac:9c:7b:f0:02:b8:6a:d0:aa:33:d4:fa:
                    7e:de:e6:c4:5f:19:28:8a:1a:08:cb:d8:f5:96:8c:
                    75:bc:fb:e1:7c:1e:db:aa:c3:20:f3:8c:30:49:4d:
                    45:57:af:63:58:89:29:12:dd:c3:c7:2d:e8:ff:27:
                    bc:0c:94:ae:bd:6f:c1:eb:96:c0:d1:4d:e0:50:d1:
                    88:d8:de:ec:96:ff:b3:f8:9d:03:9a:1d:7c:8c:d7:
                    57:bc:c6:d9:6c:42:b0:f7:39:79:53:c9:73:61:40:
                    1f:ae:8f:ac:1e:90:7f:5b:b7:8f:b9:99:3e:74:2c:
                    73:3d:f0:f8:49:a4:5d:a4:23:48:2e:98:48:88:98:
                    1f:c0:45:09:c4:a5:c9:3a:b7:86:98:62:37:43:8d:
                    84:99:69:28:8b:1a:5e:24:1e:3c:13:82:f4:e5:dc:
                    9c:2f:40:b5:5d:af:3b:fb:96:89:38:3a:64:2c:db:
                    49:c3:bd:45:d2:8c:1e:68:63:21:d4:fa:92:f4:61:
                    aa:09:4f:54:35:23:6c:69:e1:63:01:83:26:1a:80:
                    ca:79:df:05:99:3e:68:97:0f:9b:45:07:11:c5:20:
                    6a:f3:33:e7:4c:35:98:02:2a:80:63:c9:05:e1:c9:
                    ef:51:a8:41:5c:6a:f6:5f:6c:48:5a:93:98:c0:27:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:60:81:8E:F0:34:27:FA:C2:B2:16:0A:AB:EE:75:02:8D:06:6F:76
            X509v3 Authority Key Identifier:
                keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:fc:0e:32:3f:7f:5a:84:7a:17:04:d0:ea:f9:7b:17:24:
         c5:1a:16:de:ee:9a:f7:8c:c0:8c:bf:73:a1:0d:b8:c5:57:03:
         0b:59:2f:42:b2:4c:5c:1c:04:3c:7f:4f:d8:4c:44:19:72:24:
         b4:4a:e9:44:98:c4:a7:b8:dd:da:52:2c:1c:38:1d:42:8e:44:
         6e:80:f5:a6:b8:54:cc:64:86:6e:58:36:95:d2:88:06:4e:b4:
         8a:34:b8:f0:b2:dd:3f:2d:f5:b8:c9:3f:ce:d2:00:86:16:d6:
         c9:9b:95:71:f8:3a:5d:22:fd:7b:90:37:90:87:8b:32:8a:83:
         65:00:39:70:3e:be:ff:6a:cd:a9:a3:94:ec:60:0e:49:ba:1a:
         92:8e:48:e5:4c:9f:23:a0:ba:72:d7:b9:5c:4a:e4:7b:a8:14:
         c6:cf:f7:3e:63:81:cd:d2:39:13:cd:ff:a8:e4:dc:d2:cf:d6:
         b3:8f:4e:63:1c:b8:ee:0e:7e:81:6d:fb:6f:3f:0f:c7:fd:e1:
         e2:18:99:1e:31:35:c4:eb:6b:9e:7a:d9:a9:5b:ba:ec:77:2e:
         91:41:6e:ee:d3:7d:3f:71:75:a2:b6:dd:e3:34:ee:00:99:ec:
         57:e8:02:af:fd:42:cf:6f:7d:ac:5c:90:3c:cc:d8:01:7d:35:
         6c:f2:f7:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqnayyfUVL6AhUPGA9F5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh
YzZlMDcwHhcNMjUxMTA0MDcwMDA4WhcNMjUxMTA1MDcwMDA4WjAzMTEwLwYDVQQD
Eyg4MTYwODE4ZWYwMzQyN2ZhYzJiMjE2MGFhYmVlNzUwMjhkMDY2Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I+snHvwArhq0Koz1Pp+3ubEXxko
ihoIy9j1lox1vPvhfB7bqsMg84wwSU1FV69jWIkpEt3Dxy3o/ye8DJSuvW/B65bA
0U3gUNGI2N7slv+z+J0Dmh18jNdXvMbZbEKw9zl5U8lzYUAfro+sHpB/W7ePuZk+
dCxzPfD4SaRdpCNILphIiJgfwEUJxKXJOreGmGI3Q42EmWkoixpeJB48E4L05dyc
L0C1Xa87+5aJODpkLNtJw71F0oweaGMh1PqS9GGqCU9UNSNsaeFjAYMmGoDKed8F
mT5olw+bRQcRxSBq8zPnTDWYAiqAY8kF4cnvUahBXGr2X2xIWpOYwCdofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFggY7wNCf6wrIWCqvudQKNBm92MB8GA1UdIwQY
MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt
NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1
LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBn8DjI/
f1qEehcE0Or5exckxRoW3u6a94zAjL9zoQ24xVcDC1kvQrJMXBwEPH9P2ExEGXIk
tErpRJjEp7jd2lIsHDgdQo5EboD1prhUzGSGblg2ldKIBk60ijS48LLdPy31uMk/
ztIAhhbWyZuVcfg6XSL9e5A3kIeLMoqDZQA5cD6+/2rNqaOU7GAOSboako5I5Uyf
I6C6cte5XErke6gUxs/3PmOBzdI5E83/qOTc0s/Ws49OYxy47g5+gW37bz8Px/3h
4hiZHjE1xOtrnnrZqVu67HcukUFu7tN9P3F1orbd4zTuAJnsV+gCr/1Cz299rFyQ
PMzYAX01bPL3YA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:04 2025 by rpki-client