Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File:                     bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier:          upn2nez4Cx3dnb2RGZcBo8pxezqjJHH+Yx2LQQqaYg8=
Subject key identifier:   44:9A:7E:B8:A4:48:2A:F6:78:22:4E:93:50:3B:5B:5A:B5:4F:5A:A8
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer:       /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial:       019A571C373DB46937C18297171B8657BFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number:          017C
Signing time:             Thu 06 Nov 2025 03:00:58 +0000
Manifest this update:     Thu 06 Nov 2025 03:00:58 +0000
Manifest next update:     Fri 07 Nov 2025 03:00:58 +0000
Files and hashes:         1: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (hash: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=)
                          2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: Rw3AnIwlcOADf5QasLY2fFrmQCQUiAL+j5Qze1i7BBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Nov 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:57:1c:37:3d:b4:69:37:c1:82:97:17:1b:86:57:bf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
        Validity
            Not Before: Nov  6 03:00:58 2025 GMT
            Not After : Nov  7 03:00:58 2025 GMT
        Subject: CN=449a7eb8a4482af678224e93503b5b5ab54f5aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:b6:3a:8a:e5:a4:90:c3:c6:88:d9:bb:09:
                    53:aa:aa:70:8d:e4:12:5f:31:fc:f1:27:e9:50:5a:
                    69:f4:1e:65:b2:65:15:15:6e:6c:5b:85:0a:e5:3c:
                    fa:1a:1f:b4:d9:67:da:36:dc:1e:75:4e:26:ee:e1:
                    76:90:67:7e:83:ad:1c:f9:ba:9d:b6:5e:21:3e:c6:
                    7e:80:8b:ce:b6:18:a7:70:a3:63:10:08:20:98:43:
                    37:ab:3f:45:25:10:fd:a1:31:73:36:b5:79:b7:a0:
                    39:8b:e3:01:50:53:b5:0e:1a:c4:a6:3d:13:8e:c4:
                    79:4e:0f:3b:26:a2:00:47:14:57:ec:2a:7b:26:fb:
                    e6:4a:e8:82:42:cf:00:9d:9d:c0:ad:f6:4e:46:e7:
                    a8:29:48:4a:a6:a7:4f:d7:6f:e7:42:f5:e7:0f:9f:
                    59:d0:a2:8d:98:93:a9:5b:4d:07:bd:f4:91:24:66:
                    0b:0b:d4:48:04:16:8c:af:ca:03:79:36:17:54:79:
                    fc:ad:6b:4b:a2:40:a6:6f:86:0b:0d:04:03:73:2e:
                    4d:88:ea:38:30:20:d8:2c:59:84:29:e8:2d:ac:25:
                    89:95:23:94:95:f5:db:6b:57:f9:81:b0:48:04:d5:
                    fb:e2:b7:ee:08:df:ff:38:06:03:b8:2b:7c:c0:00:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:7E:B8:A4:48:2A:F6:78:22:4E:93:50:3B:5B:5A:B5:4F:5A:A8
            X509v3 Authority Key Identifier:
                keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:89:71:a5:20:ac:c1:fb:6b:c6:f2:93:c5:49:a6:92:62:b9:
         c7:1b:5b:34:91:2f:12:c0:19:ce:6c:73:cb:3e:69:02:16:74:
         d6:61:b4:ac:fb:6c:b2:0f:8b:36:41:bf:dc:84:8f:da:a2:a7:
         bb:f5:05:b4:45:3f:16:b9:5f:4d:b4:77:cd:a5:1c:60:93:87:
         31:18:c6:57:48:ea:38:f4:c5:4d:9f:b1:1f:ed:d2:59:59:4d:
         e8:83:e9:f8:af:8d:b9:71:a4:6a:34:c9:fd:26:d4:10:02:ba:
         26:64:8a:f0:1d:a7:75:6f:3d:0c:5c:1b:95:70:95:69:6b:14:
         51:f5:23:af:cb:93:ff:dd:e9:94:df:b1:09:3c:9d:9d:16:1f:
         dd:77:63:ea:2f:fa:cf:2b:1b:0f:74:39:c1:1a:55:25:5f:af:
         49:6f:80:5a:ef:85:d1:d1:d1:75:9f:c8:1e:60:7f:0c:da:83:
         80:16:3a:0f:3b:f0:b9:de:47:ff:7a:bc:14:5f:16:cc:75:b1:
         a4:7b:94:a6:58:3a:e1:b6:b9:e5:2b:1e:1f:7d:e5:9e:7c:92:
         8b:a5:18:b8:14:a4:86:e3:7e:65:2f:62:0c:77:7b:41:15:31:
         e3:af:d0:54:64:46:af:51:49:63:48:55:40:e4:4b:02:c3:5d:
         46:15:b5:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXHDc9tGk3wYKXFxuGV7/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3
NzQ2ZDkwHhcNMjUxMTA2MDMwMDU4WhcNMjUxMTA3MDMwMDU4WjAzMTEwLwYDVQQD
Eyg0NDlhN2ViOGE0NDgyYWY2NzgyMjRlOTM1MDNiNWI1YWI1NGY1YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD+2OorlpJDDxojZuwlTqqpwjeQS
XzH88SfpUFpp9B5lsmUVFW5sW4UK5Tz6Gh+02WfaNtwedU4m7uF2kGd+g60c+bqd
tl4hPsZ+gIvOthincKNjEAggmEM3qz9FJRD9oTFzNrV5t6A5i+MBUFO1DhrEpj0T
jsR5Tg87JqIARxRX7Cp7JvvmSuiCQs8AnZ3ArfZORueoKUhKpqdP12/nQvXnD59Z
0KKNmJOpW00HvfSRJGYLC9RIBBaMr8oDeTYXVHn8rWtLokCmb4YLDQQDcy5NiOo4
MCDYLFmEKegtrCWJlSOUlfXba1f5gbBIBNX74rfuCN//OAYDuCt8wADAwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESafrikSCr2eCJOk1A7W1q1T1qoMB8GA1UdIwQY
MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt
OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi
LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYlxpSCs
wftrxvKTxUmmkmK5xxtbNJEvEsAZzmxzyz5pAhZ01mG0rPtssg+LNkG/3ISP2qKn
u/UFtEU/FrlfTbR3zaUcYJOHMRjGV0jqOPTFTZ+xH+3SWVlN6IPp+K+NuXGkajTJ
/SbUEAK6JmSK8B2ndW89DFwblXCVaWsUUfUjr8uT/93plN+xCTydnRYf3Xdj6i/6
zysbD3Q5wRpVJV+vSW+AWu+F0dHRdZ/IHmB/DNqDgBY6Dzvwud5H/3q8FF8WzHWx
pHuUplg64ba55SseH33lnnySi6UYuBSkhuN+ZS9iDHd7QRUx46/QVGRGr1FJY0hV
QORLAsNdRhW1xg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 11:10:02 2025 by rpki-client