Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          espt5auFyRSiBly2UoBLbpJFfNVMKFSVrQYc/DF9ZQ8=
Subject key identifier:   41:9B:62:93:41:2E:51:80:B6:65:49:C0:7D:E4:17:F0:1C:21:0B:CB
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019A5119A68480932069D20F129EF947CD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 23:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:26 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: Dqj/m9XQASEZajBIcoch63WiRWbHWNtGoBn2//zmlCw=)
                          2: EmhpSnj7iLgC2d70P5qJqnThSpI.roa (hash: CX+fHnUOAwNmcRoAT7+5woe0kC9yhVErQMUO/t7HIGw=)
                          3: G5KEY8PdolTgfVn5492nGIzQ_a0.roa (hash: 76KL/k0StmhsymXof8zQcgzmSlTCz8pQoee6lM9qOu4=)
                          4: VtgYimUcjc2XeGilZ2hUu6vRmiU.roa (hash: +YSUo5c/6CRbW0eW7UeYX8AGd5VxClS9jGWd6D5ZdZY=)
                          5: go_3y1bgA8-3JogrkPCJfivjGfI.roa (hash: sD0zwjqxa6jKAzdmYzjIQYsG/miMaGsajOJ2iWvOUZg=)
                          6: xD2UD_5NoLtd0VK4LndF2pETSBk.roa (hash: VjvfcStj2ykMEo8Ecd88j1JXnEvqtzpee6oBEje6v9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:a6:84:80:93:20:69:d2:0f:12:9e:f9:47:cd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Nov  4 23:00:26 2025 GMT
            Not After : Nov  5 23:00:26 2025 GMT
        Subject: CN=419b6293412e5180b66549c07de417f01c210bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:9c:fb:0d:32:35:fb:5c:3a:b4:7b:a0:2f:
                    99:47:8d:5c:f6:6a:f3:23:b4:71:c8:22:d4:0e:ae:
                    12:65:c8:9d:02:30:1f:41:75:4f:ee:50:89:b4:75:
                    b4:7f:6a:2e:f3:40:97:b9:7f:ec:fe:b2:a9:b1:0f:
                    d8:02:77:c1:87:05:3c:97:13:3d:16:29:95:c3:e4:
                    8f:f6:e1:5a:11:7a:1e:ff:2b:83:24:7c:18:94:42:
                    f3:54:2a:a1:11:81:ca:7e:c6:09:18:82:be:56:65:
                    58:17:f0:39:92:c6:f9:ad:be:fd:eb:c8:b9:fa:da:
                    ab:83:94:ce:07:65:7a:7a:f7:60:92:3d:e7:8c:89:
                    3d:e5:1e:a3:b8:29:ec:93:b9:25:ec:6d:ce:82:7b:
                    1c:17:29:43:2b:fc:25:d9:7c:1b:be:a5:d3:f0:63:
                    59:4d:e7:00:a1:0c:ad:c0:d6:24:7a:63:c8:ed:57:
                    74:07:a6:3f:f6:60:3a:9a:da:87:50:6f:2e:26:fa:
                    40:6c:f0:18:17:56:ab:50:b0:08:92:96:71:1f:d7:
                    61:02:3f:74:87:47:8f:ec:92:86:b7:82:cb:0f:a6:
                    50:0f:73:2c:b0:81:ec:25:6f:46:5d:99:80:c3:a8:
                    ed:49:df:fd:c4:03:87:77:9e:2e:65:b9:07:d3:78:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:62:93:41:2E:51:80:B6:65:49:C0:7D:E4:17:F0:1C:21:0B:CB
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:cd:d4:e8:ab:ee:43:4d:ca:2f:e7:5b:54:ff:99:bf:11:
         85:cd:63:2f:46:1b:9b:3c:38:4a:cc:9c:07:33:ae:d4:b5:ba:
         9a:d4:33:e1:9d:93:48:e8:05:bb:72:30:ed:fc:32:85:2b:bc:
         8d:59:36:c0:cc:75:ef:bf:27:b2:d8:57:01:c6:16:09:92:09:
         f7:b7:bf:a9:9d:96:3b:2b:37:a4:18:b2:a7:49:f7:b2:bb:aa:
         9c:5e:ce:ac:8d:bd:37:a4:3b:d2:73:ec:97:5d:95:50:68:cf:
         ae:60:17:c4:7f:a5:03:ca:73:da:b6:ef:16:8a:b3:85:f1:67:
         a3:1f:39:b3:46:d6:c0:7d:29:04:00:04:77:d4:76:5d:55:da:
         b1:64:56:e6:a8:89:44:9f:30:c6:4b:68:b6:a6:a9:65:c2:fa:
         8d:bc:69:ff:ec:c3:ce:e8:95:79:71:4c:90:33:70:4a:f9:2b:
         50:10:f5:10:2d:f8:2e:85:a5:04:0a:13:ff:cd:ad:83:03:39:
         b3:20:e9:6c:6f:cb:67:d2:49:c3:67:2a:e8:e4:0a:c6:7c:8b:
         84:01:39:0e:6e:06:22:11:bf:b3:88:ec:8e:c3:9f:6c:c6:ce:
         ea:60:f9:be:56:5c:17:e9:b3:38:3e:6f:dd:28:7d:f3:2f:38:
         e1:95:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:58:47 2025 by rpki-client