Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          hjNeNIq/fZBBW264mi53URTsA91OPwwh3Ffpvyq2cyY=
Subject key identifier:   35:30:FB:10:5E:72:38:27:26:CB:B8:1C:5D:F8:03:92:4C:E9:00:BD
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       019A4E4FB0D8D45036068FC318656BF72EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          0389
Signing time:             Tue 04 Nov 2025 10:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:36 +0000
Files and hashes:         1: 2tQqGK4g82dy1c5SML4akqkLzQs.roa (hash: 0ihiDi+ydh24SGVwQxglY4r4t8f0Ij3xsuV5NeDNJgU=)
                          2: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (hash: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=)
                          3: I1LQw1CBlPzdRK1ZEvgFu8378uI.roa (hash: iIDM1s8e551CHIuxRBUaodgRmli45m1JLpfi8ps3uPQ=)
                          4: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
                          5: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=)
                          6: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: zsg68abugKFGgVmZWwWQlGnIIhw3LBG1pX/Uh5X1rYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:b0:d8:d4:50:36:06:8f:c3:18:65:6b:f7:2e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Nov  4 10:00:36 2025 GMT
            Not After : Nov  5 10:00:36 2025 GMT
        Subject: CN=3530fb105e72382726cbb81c5df803924ce900bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:2b:e3:fa:8f:bc:47:48:a5:ae:d7:5d:34:
                    b0:28:4a:86:df:61:de:fe:d6:b4:7c:a7:49:47:30:
                    be:21:06:37:30:37:ea:77:df:1b:af:77:28:a9:25:
                    a2:89:c3:72:37:de:99:8f:0c:47:fa:04:6a:85:67:
                    c7:fe:67:5f:cb:13:43:6b:a9:65:bf:4f:31:c1:ad:
                    41:25:03:8a:2d:61:6c:0d:82:38:bc:d4:29:ce:77:
                    cd:b3:10:e4:d3:be:bc:df:bf:e6:5f:db:64:23:23:
                    4e:1e:9a:99:36:6f:71:03:86:35:b5:95:20:fd:b9:
                    d0:a8:71:dd:96:5d:02:1e:b2:35:4f:82:37:bc:d4:
                    a3:0d:c7:9b:2f:b7:45:8d:c1:3c:8f:48:ae:56:20:
                    cb:c6:2f:3d:b8:f9:e8:7a:f5:02:c2:39:81:ab:fa:
                    48:e9:bd:7d:c8:3a:d3:6d:a7:95:aa:70:bc:fe:59:
                    c4:ac:0a:4f:72:12:c1:60:46:6d:86:5c:f8:83:60:
                    5b:c3:df:15:30:43:48:7c:4c:5f:e9:00:0e:8d:d4:
                    01:9b:1a:04:cd:0e:54:db:ed:6a:81:6f:51:e2:ed:
                    15:ef:0c:f4:70:18:a9:60:d6:2f:83:d9:c4:1a:89:
                    6d:e2:1e:7b:03:30:1a:3a:4e:22:67:04:1e:7e:78:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:FB:10:5E:72:38:27:26:CB:B8:1C:5D:F8:03:92:4C:E9:00:BD
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:11:20:2c:cd:b1:91:92:7c:38:ba:4e:39:c4:46:00:10:
         ea:da:ea:fc:9d:f3:7b:f0:6a:83:86:4b:b1:0f:3a:7c:38:ef:
         9b:66:84:e0:69:df:4b:8a:d5:99:7d:64:8d:7d:76:bb:6a:e3:
         e9:bc:74:91:2e:a1:03:a2:2f:c4:4b:b3:6c:69:cc:59:9c:6d:
         e9:6e:8b:76:85:e5:9a:22:73:5b:8b:07:ea:43:dc:f2:ef:5e:
         ed:eb:9e:3b:b5:81:ba:3a:37:d9:01:92:c0:f5:f0:4b:41:92:
         fb:50:2e:a6:6a:e5:dc:90:f3:ad:6b:ca:f0:13:04:29:a2:e4:
         b2:54:aa:2a:12:75:93:fe:8a:a3:57:35:50:1c:e4:52:7b:a1:
         42:56:9b:8d:1b:03:8b:d5:7d:20:b3:24:9f:0c:d8:1a:af:ed:
         9e:94:0c:e5:f4:cd:9b:3e:13:2c:dc:79:63:9c:67:24:a4:7f:
         13:5d:04:46:36:93:f1:3d:19:85:e3:85:d9:79:a2:6d:96:f0:
         ba:e1:d2:71:f4:03:98:97:b1:be:87:83:64:2a:34:17:fd:8d:
         f0:39:b0:d9:15:52:26:6c:55:89:1b:62:60:43:c5:8a:2f:43:
         66:67:1f:9a:e7:54:d7:fb:bc:e9:59:cc:38:d2:76:5c:22:92:
         06:21:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:15 2025 by rpki-client