Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          fogXVjtZR4mVLPboGPVn/VHkHxBYxJ7p6k8Vc4UprHk=
Subject key identifier:   DE:2C:D5:C3:CA:DD:AB:21:70:FD:85:26:62:EE:67:67:25:D7:05:47
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       019A560918846C1A561E0A2082F3C3BC0A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          126D
Signing time:             Wed 05 Nov 2025 22:00:27 +0000
Manifest this update:     Wed 05 Nov 2025 22:00:27 +0000
Manifest next update:     Thu 06 Nov 2025 22:00:27 +0000
Files and hashes:         1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
                          2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
                          3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
                          4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: N0T0Hew5itPrkaUvlEQHklBd9tG2IWP/SGAzx7MUTZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:09:18:84:6c:1a:56:1e:0a:20:82:f3:c3:bc:0a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Nov  5 22:00:27 2025 GMT
            Not After : Nov  6 22:00:27 2025 GMT
        Subject: CN=de2cd5c3caddab2170fd852662ee676725d70547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:e3:e1:36:cd:06:1c:f3:d5:43:8f:65:8d:
                    92:3a:31:1c:b4:0c:00:5a:5b:b8:cc:0f:cd:af:d9:
                    0b:70:a9:ea:de:60:36:db:9c:86:b3:ba:24:f2:7a:
                    bb:87:ca:70:4c:c3:f4:92:13:45:1f:26:f1:e0:44:
                    ba:3c:a9:1a:50:51:4d:3a:32:53:9a:cc:ab:12:75:
                    d5:0d:1b:94:34:a8:25:a6:d9:f9:80:12:f3:38:c3:
                    5e:8c:49:d8:6e:54:f0:02:7c:85:7d:d4:ad:35:1b:
                    ea:a1:7e:f8:fc:76:67:02:57:e5:6d:bd:de:c0:79:
                    2f:78:c6:b9:40:59:86:ae:7d:6c:4e:5d:71:5f:28:
                    ea:94:b1:ff:66:32:c0:ee:8e:9c:41:fa:09:46:6f:
                    26:4b:94:60:bb:7a:4a:d1:31:38:fc:3d:95:34:81:
                    39:15:aa:e0:6c:a3:45:be:85:42:37:dc:34:06:0b:
                    cd:9f:9c:66:7a:12:0b:9c:e0:76:0c:8a:f6:78:12:
                    9c:50:a1:19:c5:54:7d:7b:d1:72:f8:9a:5c:a8:5b:
                    04:b8:49:21:a9:98:0e:6e:94:24:4c:fd:88:d5:34:
                    d2:a9:22:bd:73:b0:27:b4:b5:87:cc:4b:e0:1e:1c:
                    85:15:42:24:6a:4f:4d:67:34:2a:ff:03:3b:b0:6f:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2C:D5:C3:CA:DD:AB:21:70:FD:85:26:62:EE:67:67:25:D7:05:47
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:29:18:c7:b6:4f:4a:95:ba:3b:20:77:43:bb:91:53:68:69:
         1f:95:4e:d1:4c:a9:25:5f:b1:29:2a:96:5b:b5:38:ea:66:fa:
         cc:c9:01:2d:dd:62:62:b7:69:4a:35:61:a1:88:ba:9c:16:b6:
         0b:f0:b7:d4:25:07:d3:52:6e:2e:15:a4:83:14:ed:f9:84:b7:
         8d:d5:1a:34:ef:7f:a5:00:5e:46:bb:8e:13:a2:b2:3c:f4:9a:
         cc:26:cf:a8:47:57:4e:56:1d:2c:d8:75:a6:a4:ad:8f:61:36:
         81:57:b1:51:bd:f9:f5:47:86:aa:51:14:0f:c9:a3:61:db:a7:
         ab:17:05:11:78:38:86:dd:d7:c7:26:2c:ab:ed:9d:12:88:a5:
         25:e6:9c:7a:9d:77:39:77:3f:50:41:87:cc:42:70:41:23:05:
         46:d0:03:0f:13:c5:2e:c0:c9:05:da:99:64:2c:e6:96:b1:ca:
         cb:98:c1:bc:16:34:73:28:6f:7a:b6:fe:76:91:6a:de:d8:12:
         b9:14:f7:0a:2e:5b:9d:76:b6:c8:05:68:0a:c6:a0:c8:65:05:
         30:71:98:7d:3a:c1:42:36:88:e6:76:86:7b:64:fc:4d:b4:6e:
         b9:46:ba:aa:3f:a2:33:20:d1:f5:f5:ac:3b:eb:ac:f3:8c:aa:
         63:17:02:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWCRiEbBpWHgoggvPDvApoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjUxMTA1MjIwMDI3WhcNMjUxMTA2MjIwMDI3WjAzMTEwLwYDVQQD
EyhkZTJjZDVjM2NhZGRhYjIxNzBmZDg1MjY2MmVlNjc2NzI1ZDcwNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1jj4TbNBhzz1UOPZY2SOjEctAwA
Wlu4zA/Nr9kLcKnq3mA225yGs7ok8nq7h8pwTMP0khNFHybx4ES6PKkaUFFNOjJT
msyrEnXVDRuUNKglptn5gBLzOMNejEnYblTwAnyFfdStNRvqoX74/HZnAlflbb3e
wHkveMa5QFmGrn1sTl1xXyjqlLH/ZjLA7o6cQfoJRm8mS5Rgu3pK0TE4/D2VNIE5
FargbKNFvoVCN9w0BgvNn5xmehILnOB2DIr2eBKcUKEZxVR9e9Fy+JpcqFsEuEkh
qZgObpQkTP2I1TTSqSK9c7AntLWHzEvgHhyFFUIkak9NZzQq/wM7sG82mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4s1cPK3ashcP2FJmLuZ2cl1wVHMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgikYx7ZP
SpW6OyB3Q7uRU2hpH5VO0UypJV+xKSqWW7U46mb6zMkBLd1iYrdpSjVhoYi6nBa2
C/C31CUH01JuLhWkgxTt+YS3jdUaNO9/pQBeRruOE6KyPPSazCbPqEdXTlYdLNh1
pqStj2E2gVexUb359UeGqlEUD8mjYdunqxcFEXg4ht3XxyYsq+2dEoilJeacep13
OXc/UEGHzEJwQSMFRtADDxPFLsDJBdqZZCzmlrHKy5jBvBY0cyhverb+dpFq3tgS
uRT3Ci5bnXa2yAVoCsagyGUFMHGYfTrBQjaI5naGe2T8TbRuuUa6qj+iMyDR9fWs
O+us84yqYxcCwQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:12 2025 by rpki-client