Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          vR89GRka0XfJ93u892vqMgtACJzZ9vS0mdjAawnuwFY=
Subject key identifier:   EB:2F:C0:56:49:FC:B2:53:15:11:BF:B1:99:B7:D1:CC:BE:60:1E:D1
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019A4E4FC6827F1B0AD06A5A6F1054A2D977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          1141
Signing time:             Tue 04 Nov 2025 10:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:42 +0000
Files and hashes:         1: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: k0sC4X9gz9Ic+4/JR4axIgW2gknoe5jlkwHkbvE2rIA=)
                          2: CqElUduaScHUfUXZ9oxVz_D7LwU.roa (hash: 3e+PiLGHJw3mA6A8DCEuv3cyH3r4LQ3GYaMPKoRjmZw=)
                          3: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (hash: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=)
                          4: Ia6V3oQfJDjO1qZ0unwCn8VGfRI.roa (hash: YjJMnYScrGxfBSd345nAAnlIHFqBVMEk1HrKUwbMEtQ=)
                          5: McMTko8bQr91a0JpNrnKOvBDV0I.roa (hash: +aOn0BT18FMcBHp4FqjXhcnRXA0IZ5BQanHigZZPPho=)
                          6: Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa (hash: hbZpJJlkwNtwiNGl+GRL8rkQ+0B/zJwYAf2+pY47R10=)
                          7: UgN0cKNW9dNdHdWelhpwDBynnFs.roa (hash: d596rMSRxVyDkNR+qvNV44FN3LGE81IKqHNAerm5Jfc=)
                          8: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (hash: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=)
                          9: ohfoQ6PMXyCRqvXL697wq32N2IE.roa (hash: 4Ftq9cImGTnlsG/GFrSW+NEOcfqwWC5dS24FmwyqHJQ=)
                          10: tVnuMHg38Y2y8DClEzJcg-BhRZI.roa (hash: 2bCfD0mgqb/6Lcsm2AyIQ8y1K+w9/t9hgqU4lqbYazg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:c6:82:7f:1b:0a:d0:6a:5a:6f:10:54:a2:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Nov  4 10:00:42 2025 GMT
            Not After : Nov  5 10:00:42 2025 GMT
        Subject: CN=eb2fc05649fcb2531511bfb199b7d1ccbe601ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a1:e2:ee:2d:6b:97:43:32:03:af:cb:39:a1:
                    97:f7:9a:3a:a3:98:e8:2b:d4:45:25:5e:ba:d8:17:
                    2d:83:da:31:27:b5:f5:93:73:1e:82:5a:c5:ce:05:
                    3c:b6:88:0e:b5:bc:fe:12:4e:36:67:17:3b:d9:3b:
                    03:93:f8:c2:6c:c6:61:b6:d2:66:aa:c3:c8:56:87:
                    2f:ec:2b:05:26:9b:ea:a3:6b:46:ae:f1:44:29:6e:
                    ff:a3:4b:08:c3:f9:a6:64:70:8e:83:3f:ec:39:19:
                    1a:e9:06:99:c5:15:b3:55:01:cc:3f:bb:92:18:e1:
                    0e:42:d9:0a:b6:55:80:dd:e9:45:38:46:e2:86:72:
                    ac:9f:80:7c:b4:03:f9:d4:23:ad:57:15:ff:37:e9:
                    f7:92:05:c6:f7:86:62:af:26:62:23:ab:6e:ce:66:
                    e7:85:11:52:0f:97:dc:be:37:76:57:5e:ff:fa:6f:
                    62:48:01:d7:08:3c:6a:50:e6:84:69:f3:85:02:95:
                    8e:21:2c:14:61:a8:8c:c9:c3:32:28:a8:7f:52:53:
                    39:d6:eb:a4:e9:28:cd:26:c5:7c:6e:a2:9a:62:c4:
                    a1:1a:cb:0f:46:d2:38:75:9a:5c:66:da:db:c1:18:
                    e7:0a:e5:85:5e:3d:7f:23:f0:10:2d:6b:e9:bd:ed:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:C0:56:49:FC:B2:53:15:11:BF:B1:99:B7:D1:CC:BE:60:1E:D1
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:22:29:97:f2:0b:13:e9:73:2e:24:a5:ee:10:20:b7:1d:61:
         72:fa:6e:08:00:d9:b1:51:a1:75:e6:26:55:bc:4a:63:03:2f:
         a7:27:82:65:9c:ff:56:17:a5:e6:7f:66:17:16:e7:8d:85:03:
         09:5a:88:cf:a3:db:ea:fb:98:d6:7a:30:ca:4d:4d:8d:1b:74:
         62:4d:4a:e0:8e:ae:fe:d6:9a:7d:4b:a2:73:d5:94:bf:ba:07:
         65:02:1f:8e:7d:3e:e3:21:ba:ca:70:a2:6c:b2:4c:8e:a9:8b:
         41:40:8f:e5:c9:99:d5:f4:d3:6d:e8:dc:44:40:a9:84:ac:fa:
         c4:a4:69:3c:01:75:f4:74:35:a2:3a:8a:43:7a:3d:ce:be:f3:
         4c:cb:f9:17:3b:4f:e7:6a:75:3e:3f:9c:4a:58:f3:28:b9:35:
         6a:7c:ca:12:3d:d4:41:c1:30:93:f1:d4:43:c6:fe:3b:78:5c:
         b3:0b:f8:b9:3a:02:80:93:9d:a4:0d:57:26:54:1d:06:6e:20:
         7f:7e:cf:ef:30:a3:67:82:0b:42:d0:f6:d1:40:ad:bb:2d:fd:
         df:98:c0:09:99:96:f7:ab:b9:7a:04:8b:41:c2:8f:ba:e2:f6:
         0f:b4:31:8e:5d:41:af:b3:b7:2e:9f:79:e6:b8:18:96:c6:f3:
         05:34:a8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8aCfxsK0GpabxBUotl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
EyhlYjJmYzA1NjQ5ZmNiMjUzMTUxMWJmYjE5OWI3ZDFjY2JlNjAxZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KHi7i1rl0MyA6/LOaGX95o6o5jo
K9RFJV662Bctg9oxJ7X1k3MeglrFzgU8togOtbz+Ek42Zxc72TsDk/jCbMZhttJm
qsPIVocv7CsFJpvqo2tGrvFEKW7/o0sIw/mmZHCOgz/sORka6QaZxRWzVQHMP7uS
GOEOQtkKtlWA3elFOEbihnKsn4B8tAP51COtVxX/N+n3kgXG94ZiryZiI6tuzmbn
hRFSD5fcvjd2V17/+m9iSAHXCDxqUOaEafOFApWOISwUYaiMycMyKKh/UlM51uuk
6SjNJsV8bqKaYsShGssPRtI4dZpcZtrbwRjnCuWFXj1/I/AQLWvpve1GywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsvwFZJ/LJTFRG/sZm30cy+YB7RMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCIpl/IL
E+lzLiSl7hAgtx1hcvpuCADZsVGhdeYmVbxKYwMvpyeCZZz/Vhel5n9mFxbnjYUD
CVqIz6Pb6vuY1nowyk1NjRt0Yk1K4I6u/taafUuic9WUv7oHZQIfjn0+4yG6ynCi
bLJMjqmLQUCP5cmZ1fTTbejcRECphKz6xKRpPAF19HQ1ojqKQ3o9zr7zTMv5FztP
52p1Pj+cSljzKLk1anzKEj3UQcEwk/HUQ8b+O3hcswv4uToCgJOdpA1XJlQdBm4g
f37P7zCjZ4ILQtD20UCtuy3935jACZmW96u5egSLQcKPuuL2D7Qxjl1Br7O3Lp95
5rgYlsbzBTSomw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:31 2025 by rpki-client