Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          M6fdwL1PJgOcZVC/RCl2UrwpzPxu5htAbiAdc+OUvE4=
Subject key identifier:   06:38:BE:CA:82:CA:2D:EA:A1:F0:38:5F:C5:D9:05:52:21:C3:01:EB
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019A51BE346DEB04E90B9D0C633509F485F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          01E4
Signing time:             Wed 05 Nov 2025 02:00:10 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:10 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:10 +0000
Files and hashes:         1: 2PO56c07BT5UqW7VHJgEtBZRuc4.roa (hash: j6nnqb1GzOx8EAgfl33x3DbOrwgUFnv8OKDrDXb3GYE=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: i7ANrVv0XClY+1kDkTI6WELJAvFCr5wr42N9ZE2Ec54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:34:6d:eb:04:e9:0b:9d:0c:63:35:09:f4:85:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Nov  5 02:00:10 2025 GMT
            Not After : Nov  6 02:00:10 2025 GMT
        Subject: CN=0638beca82ca2deaa1f0385fc5d9055221c301eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:53:7e:41:88:28:22:82:1c:1e:b4:67:a4:
                    d6:36:66:5b:0c:6c:4f:21:67:46:db:41:e8:09:3f:
                    9a:ed:9a:0b:14:2e:87:e2:de:0e:81:ac:4a:72:fc:
                    f0:04:83:e3:9e:e9:d5:ab:fd:c2:b6:9f:93:b0:a8:
                    48:91:26:f1:aa:be:94:d8:c4:8c:73:65:df:26:52:
                    ad:d6:5e:a8:74:2e:12:17:07:2c:eb:62:c2:b7:f5:
                    02:8c:c8:d1:09:93:c9:69:8d:b9:18:50:48:0e:4d:
                    f5:4e:7f:48:2b:6e:82:28:24:2b:ba:7b:7d:d9:38:
                    5c:64:e9:4c:17:b5:bf:0e:db:44:15:10:49:bb:d5:
                    38:dd:f0:2a:88:73:09:bc:89:93:20:e5:80:9e:fb:
                    06:76:43:cf:9b:48:a3:68:b9:91:db:ea:ad:8e:24:
                    9a:17:f4:51:d7:88:3a:48:03:e7:dc:ce:a5:ca:5f:
                    72:1a:47:13:71:dc:50:b4:ff:a7:7c:37:56:3c:70:
                    f8:4f:47:65:38:9c:57:e0:f7:4d:e4:57:46:c6:6d:
                    b7:7a:98:14:4f:bf:9a:af:70:d7:0a:55:fa:dc:db:
                    6e:d2:ea:97:49:f4:cf:22:25:57:a0:10:40:15:d3:
                    ec:e5:92:7b:fc:a5:a4:aa:9c:f0:42:c6:c1:f7:8a:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:BE:CA:82:CA:2D:EA:A1:F0:38:5F:C5:D9:05:52:21:C3:01:EB
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:de:e7:ff:fc:e9:a6:12:52:0c:6d:b5:49:a7:e7:94:d4:
         c9:50:5a:0b:b9:7b:17:bd:1d:aa:bc:9a:21:74:09:11:81:e0:
         e5:1d:3a:76:02:bb:0d:6f:12:f8:a7:72:1a:e8:a7:ee:f7:f3:
         a0:5d:f7:88:c1:8b:fc:5a:17:c1:f8:05:ae:55:ce:f0:41:b2:
         11:12:f6:a5:64:8c:22:46:09:68:99:5a:bc:dc:d6:d8:e4:8b:
         65:ba:68:e0:96:c6:a9:78:dd:0a:ca:49:fb:d3:33:52:0b:e3:
         d6:f6:7e:99:71:11:7b:4c:04:27:d5:c4:56:83:4d:9d:64:29:
         44:fd:c0:70:83:da:2b:37:d6:a8:40:05:55:bf:64:07:93:59:
         76:9d:fd:11:33:34:1d:c4:3d:9b:8a:32:9e:3d:66:8a:a8:25:
         a3:b6:36:ca:32:bd:2a:21:41:bd:fa:49:a8:23:8e:4e:5f:ec:
         ac:1e:5d:d1:90:1c:90:ac:bd:33:ad:b5:f0:c9:c9:69:c0:85:
         19:15:38:7f:31:d7:44:39:f9:14:24:ad:1a:83:63:ad:47:bc:
         fb:af:d2:a6:6d:5a:82:e9:b9:99:95:c3:cb:de:e6:2b:7a:d2:
         c9:ef:90:f6:ef:11:72:2e:29:1d:76:8a:33:27:65:22:4d:aa:
         81:e1:5f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvjRt6wTpC50MYzUJ9IX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWJmZWUxZDdjOGNjODc2MDczMzMzYzRjYWE4ODFhMzdi
MzZjOTEwHhcNMjUxMTA1MDIwMDEwWhcNMjUxMTA2MDIwMDEwWjAzMTEwLwYDVQQD
EygwNjM4YmVjYTgyY2EyZGVhYTFmMDM4NWZjNWQ5MDU1MjIxYzMwMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYJTfkGIKCKCHB60Z6TWNmZbDGxP
IWdG20HoCT+a7ZoLFC6H4t4OgaxKcvzwBIPjnunVq/3Ctp+TsKhIkSbxqr6U2MSM
c2XfJlKt1l6odC4SFwcs62LCt/UCjMjRCZPJaY25GFBIDk31Tn9IK26CKCQrunt9
2ThcZOlMF7W/DttEFRBJu9U43fAqiHMJvImTIOWAnvsGdkPPm0ijaLmR2+qtjiSa
F/RR14g6SAPn3M6lyl9yGkcTcdxQtP+nfDdWPHD4T0dlOJxX4PdN5FdGxm23epgU
T7+ar3DXClX63Ntu0uqXSfTPIiVXoBBAFdPs5ZJ7/KWkqpzwQsbB94pigwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY4vsqCyi3qofA4X8XZBVIhwwHrMB8GA1UdIwQY
MBaAFOqr/uHXyMyHYHMzPEyqiBo3s2yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAt
YjdjZDUyNzAzZThkLzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAtYjdjZDUyNzAzZThk
LzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIre5//8
6aYSUgxttUmn55TUyVBaC7l7F70dqryaIXQJEYHg5R06dgK7DW8S+KdyGuin7vfz
oF33iMGL/FoXwfgFrlXO8EGyERL2pWSMIkYJaJlavNzW2OSLZbpo4JbGqXjdCspJ
+9MzUgvj1vZ+mXERe0wEJ9XEVoNNnWQpRP3AcIPaKzfWqEAFVb9kB5NZdp39ETM0
HcQ9m4oynj1miqglo7Y2yjK9KiFBvfpJqCOOTl/srB5d0ZAckKy9M6218MnJacCF
GRU4fzHXRDn5FCStGoNjrUe8+6/Spm1agum5mZXDy97mK3rSye+Q9u8Rci4pHXaK
MydlIk2qgeFfDg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:58:37 2025 by rpki-client