Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File:                     iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier:          AvlNTyGbC2v9Hdfc57f+LudnqkfkT5c1LiihpVyLrBQ=
Subject key identifier:   6D:7B:FE:59:CD:AB:ED:65:36:62:76:53:F9:0F:B6:92:DB:49:57:E9
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer:       /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial:       019A4D3CE37D2A8FDE8EDAB41E3AF71CB048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number:          141B
Signing time:             Tue 04 Nov 2025 05:00:27 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:27 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:27 +0000
Files and hashes:         1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
                          2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: /rv3g1iVcclW8o/0whZ1PX1Dy/U9M7bZnBkrYeWM2Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:e3:7d:2a:8f:de:8e:da:b4:1e:3a:f7:1c:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
        Validity
            Not Before: Nov  4 05:00:27 2025 GMT
            Not After : Nov  5 05:00:27 2025 GMT
        Subject: CN=6d7bfe59cdabed6536627653f90fb692db4957e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:3d:46:88:a1:2a:24:49:f2:87:f1:5c:56:
                    02:ac:dd:28:6a:a5:3f:57:75:81:02:c3:5e:87:3e:
                    c3:cb:44:f9:71:3c:d0:63:77:e0:15:a2:aa:68:e8:
                    4e:d4:9a:fa:4a:9a:a0:d6:16:54:e9:53:75:04:5f:
                    c7:3a:cc:bc:82:12:b3:78:54:7b:e4:b9:b2:cf:a1:
                    f0:e1:36:c7:99:c4:cc:28:e6:66:51:bc:9e:65:ae:
                    f8:ce:14:21:5f:60:82:42:9f:59:8d:48:06:f4:1a:
                    a6:77:5c:dd:9f:f9:8b:41:52:52:d3:f8:31:39:0f:
                    d1:fd:d6:18:df:01:cc:5a:9f:dc:d1:39:b7:3c:46:
                    db:62:15:41:67:15:04:f5:2c:ba:49:fb:f4:21:fc:
                    97:67:6b:62:44:18:a1:30:f6:fd:65:da:5a:bd:ed:
                    d8:d5:d3:6e:38:62:cf:4e:58:1a:19:e5:84:98:a2:
                    e3:9d:5e:fb:ae:4f:31:f8:24:2a:26:03:e4:67:9c:
                    c4:d5:c3:2b:c0:c3:96:a4:97:9a:57:8e:86:4e:08:
                    96:e9:34:3c:56:a7:65:ad:18:e4:02:1c:18:7c:f9:
                    4b:57:2f:a4:bb:56:e4:87:f9:32:08:8f:c6:a4:6e:
                    98:b6:ab:6f:50:e3:4a:0c:0d:ee:fd:fb:d2:dd:92:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:FE:59:CD:AB:ED:65:36:62:76:53:F9:0F:B6:92:DB:49:57:E9
            X509v3 Authority Key Identifier:
                keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:2b:d8:c9:14:2b:63:72:e3:0f:69:37:19:3b:52:5c:95:
         a9:2a:62:c0:62:31:ba:87:7d:3a:48:9b:1f:ab:de:ca:29:50:
         8a:a0:2f:28:42:c5:4c:a7:4e:92:95:0f:1f:58:9f:1d:32:ac:
         cb:a9:28:73:f1:c0:28:dc:c7:70:a2:70:13:d9:f2:cd:9f:98:
         7c:d7:54:84:82:38:af:b7:0d:81:57:18:a0:01:1d:51:d7:ed:
         39:3f:be:ef:40:57:aa:c5:3a:42:d7:2a:c0:75:eb:9b:d4:32:
         dc:4c:05:5c:29:ed:84:8d:af:f9:3d:b4:27:a8:6a:59:ee:75:
         2a:61:10:f7:5b:d7:ec:20:b1:83:be:61:63:81:ce:f1:9d:81:
         07:c1:44:20:58:f5:69:57:33:c3:e0:a6:7a:8f:c8:83:b7:05:
         ed:9a:e1:76:01:0c:fb:8f:6c:c5:83:1f:8c:72:64:dd:02:74:
         bd:0a:64:32:7d:81:2d:bb:a4:e7:d0:8c:96:73:51:31:85:4e:
         be:11:22:7b:93:9f:53:35:1c:22:ca:1c:91:fa:14:00:3f:80:
         c9:80:d2:33:47:b9:89:9e:ce:03:8f:93:e6:79:8a:e5:09:74:
         64:89:fc:3d:98:0e:df:b3:31:de:b8:0a:cc:69:53:72:9b:c6:
         0c:f1:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:36 2025 by rpki-client