Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          kZ4Gi3q+JwWIxSnRbNqHmLhVrS7W3dY26u77TPpML70=
Subject key identifier:   3D:C3:98:1A:48:97:A4:07:D7:7B:0A:AE:31:2D:D6:53:93:6B:C8:9B
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       019A51F55F7099E4EAEB1352319D9DC3A6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          115D
Signing time:             Wed 05 Nov 2025 03:00:26 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:26 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:26 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: ONcrM9KjB2DLaevgaSnR1kgPgdjSHn/TQyTyOSpiJGk=)
                          2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
                          3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
                          4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
                          5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
                          6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:5f:70:99:e4:ea:eb:13:52:31:9d:9d:c3:a6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Nov  5 03:00:26 2025 GMT
            Not After : Nov  6 03:00:26 2025 GMT
        Subject: CN=3dc3981a4897a407d77b0aae312dd653936bc89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:cc:5c:60:88:72:d9:dd:67:3d:8a:36:09:
                    07:f7:be:78:eb:dd:08:c8:50:cb:55:b1:2b:34:97:
                    10:74:08:cb:33:c4:7a:cc:bf:91:ed:81:b7:28:98:
                    89:8d:7d:93:a9:45:e7:16:77:59:f7:00:87:87:84:
                    f0:50:ca:b2:f0:4b:8e:09:be:13:fb:3a:59:aa:59:
                    0a:ff:d9:cd:aa:5f:e5:29:0d:63:64:3e:21:dd:f5:
                    82:4a:77:db:65:0e:15:49:4c:16:29:d5:06:be:76:
                    b5:82:b3:f4:43:bf:e6:81:86:dd:ff:b9:38:2a:e4:
                    24:2d:8d:a4:ab:c4:7d:85:bb:ff:96:7a:3f:d4:d6:
                    25:b4:95:1f:b5:9d:45:69:2b:de:11:72:72:f5:21:
                    76:f0:48:7b:6f:58:7b:36:1c:c3:c5:68:78:55:43:
                    ab:22:52:ac:5b:3d:2d:87:d6:76:31:46:67:17:b7:
                    06:d6:c7:95:e1:1d:d8:88:d0:32:95:03:9f:44:da:
                    30:3b:6b:73:44:e9:b8:99:e7:6c:bb:7b:27:f0:f8:
                    ff:b4:07:0f:26:8e:52:f0:3d:bf:c1:8e:c5:2d:72:
                    fa:45:b9:fe:88:ff:c8:97:f7:37:75:ee:43:b6:2f:
                    47:45:bd:60:0e:05:5b:bc:b5:36:16:bc:70:78:20:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C3:98:1A:48:97:A4:07:D7:7B:0A:AE:31:2D:D6:53:93:6B:C8:9B
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:28:01:1b:5a:6a:b1:5e:ad:61:2d:2f:dd:47:72:b8:6b:
         92:b4:4d:b7:2d:72:ed:d1:c4:36:f5:54:46:89:e1:39:bc:2a:
         a4:55:6b:bb:a8:b4:a8:be:06:3c:c6:3c:6d:2f:ae:13:15:9c:
         c5:fa:f3:6d:b1:ef:60:fc:14:4a:7c:30:78:5a:29:c5:c8:17:
         c5:15:b0:c5:39:74:76:80:34:f1:0e:14:a7:a6:b3:2a:09:47:
         89:c7:75:d6:88:12:90:e3:59:87:35:a6:81:99:ae:18:1c:cd:
         8b:28:dd:92:27:30:75:5f:28:1e:f7:a6:75:65:49:29:86:1e:
         e0:96:3e:d5:a8:e2:b3:d9:c2:bd:00:cb:ed:43:02:c1:c9:3f:
         f8:08:d0:54:d8:b0:e1:91:4d:04:db:d6:d1:47:f9:e3:73:9f:
         cd:eb:64:35:e9:ad:fd:43:0e:77:d8:55:6d:74:87:6b:17:6a:
         9f:ea:33:b6:7f:f4:f5:74:64:4b:f2:f8:c3:c6:1a:42:11:32:
         7f:09:57:e1:fa:2f:ec:f4:41:42:4a:22:65:49:8a:27:89:03:
         f2:1f:ba:71:a3:45:d5:e6:14:2c:47:d9:e4:1d:1d:bb:51:3f:
         c5:e2:bb:04:4d:d4:3a:2e:c3:6e:f3:34:89:ad:f8:80:d4:e0:
         4a:07:55:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9V9wmeTq6xNSMZ2dw6bhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjUxMTA1MDMwMDI2WhcNMjUxMTA2MDMwMDI2WjAzMTEwLwYDVQQD
EygzZGMzOTgxYTQ4OTdhNDA3ZDc3YjBhYWUzMTJkZDY1MzkzNmJjODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXLMXGCIctndZz2KNgkH9754690I
yFDLVbErNJcQdAjLM8R6zL+R7YG3KJiJjX2TqUXnFndZ9wCHh4TwUMqy8EuOCb4T
+zpZqlkK/9nNql/lKQ1jZD4h3fWCSnfbZQ4VSUwWKdUGvna1grP0Q7/mgYbd/7k4
KuQkLY2kq8R9hbv/lno/1NYltJUftZ1FaSveEXJy9SF28Eh7b1h7NhzDxWh4VUOr
IlKsWz0th9Z2MUZnF7cG1seV4R3YiNAylQOfRNowO2tzROm4medsu3sn8Pj/tAcP
Jo5S8D2/wY7FLXL6Rbn+iP/Il/c3de5Dti9HRb1gDgVbvLU2FrxweCDKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3DmBpIl6QH13sKrjEt1lOTa8ibMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvooARta
arFerWEtL91HcrhrkrRNty1y7dHENvVURonhObwqpFVru6i0qL4GPMY8bS+uExWc
xfrzbbHvYPwUSnwweFopxcgXxRWwxTl0doA08Q4Up6azKglHicd11ogSkONZhzWm
gZmuGBzNiyjdkicwdV8oHvemdWVJKYYe4JY+1ajis9nCvQDL7UMCwck/+AjQVNiw
4ZFNBNvW0Uf543OfzetkNemt/UMOd9hVbXSHaxdqn+oztn/09XRkS/L4w8YaQhEy
fwlX4fov7PRBQkoiZUmKJ4kD8h+6caNF1eYULEfZ5B0du1E/xeK7BE3UOi7DbvM0
ia34gNTgSgdV4Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:36:14 2025 by rpki-client