Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          HwCj4dajVOcVvn1c3g2hAiTk3+G1ZKc0IQRu6tt9zw0=
Subject key identifier:   00:07:39:BD:CE:CA:6A:06:EA:DF:33:37:4C:05:8D:5F:5B:E1:5F:63
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       019A51F5DC6951D9EEE8022C751F7D671380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          170E
Signing time:             Wed 05 Nov 2025 03:00:58 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:58 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:58 +0000
Files and hashes:         1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: uux40f6JHYTwJGi9naIWRy5Xeu2zyynnPqftmX1kkPg=)
                          2: AIXAkzQ6j1H4vDys92DgTtbZMfU.roa (hash: L70XBA2ZYZMbs8rrHlsDFi4oq4yazeU/qamDAKsCZpk=)
                          3: ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa (hash: oc13tf5lv2iUwPb0W8XfA1fFyqRxMCHq6DS/PUWkQrk=)
                          4: lXE36GImgEjcIvll3Tsmm36DobI.roa (hash: 1XMrxaMNY7arjhfdTsQdkEwlFczG7UA5ws+6pLEfvQI=)
                          5: toyWhkRvkxKa6m966kQQ3xAkwaU.roa (hash: ISpJmO2wzvTIsH3h+7s+KHFt2K5Zecirs/zcr6D0Qtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:dc:69:51:d9:ee:e8:02:2c:75:1f:7d:67:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Nov  5 03:00:58 2025 GMT
            Not After : Nov  6 03:00:58 2025 GMT
        Subject: CN=000739bdceca6a06eadf33374c058d5f5be15f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:bc:5a:f7:0d:82:4a:34:12:7f:82:01:dd:
                    3a:61:8c:6e:91:90:99:a6:84:a3:9a:8b:fd:31:cf:
                    9e:28:7e:1c:8f:24:df:b4:aa:b8:a9:78:6a:9e:ec:
                    41:f4:28:25:81:f1:d8:d2:a4:45:80:45:a3:34:13:
                    36:77:a4:1e:04:c8:15:9f:03:57:2d:3a:b8:4c:72:
                    9f:f7:21:47:5b:e8:b7:f6:48:86:32:7c:92:dd:f0:
                    24:a0:b6:1f:76:02:85:f2:d4:89:e8:b2:d1:9e:cf:
                    21:8d:cb:f9:43:d9:3f:6b:d6:10:d3:93:45:51:13:
                    c1:9f:a0:d7:df:64:d9:66:95:24:a9:b1:f6:35:8b:
                    1d:9a:fb:9b:c1:81:30:12:6d:ea:6b:1c:a2:21:bc:
                    e6:0f:50:9d:05:94:69:63:50:73:4c:25:7e:f4:55:
                    c9:24:bc:cf:3d:9a:84:32:f4:67:87:3a:a3:25:ea:
                    72:71:4c:74:4c:95:3e:23:1b:e7:36:17:a4:ad:b8:
                    a1:1e:88:8b:35:7d:54:97:55:ac:43:7c:34:0b:4f:
                    4d:55:11:de:ea:76:c7:65:46:98:0b:5a:82:7e:15:
                    ba:4b:8a:0b:a4:ef:3b:4b:a0:5b:a1:2e:d2:2f:f4:
                    83:a1:6b:78:37:64:47:fa:3a:da:9d:8e:ba:8b:71:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:39:BD:CE:CA:6A:06:EA:DF:33:37:4C:05:8D:5F:5B:E1:5F:63
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:85:1d:78:e5:a5:2f:a3:83:b9:ca:40:cb:02:65:a6:3f:
         45:01:6b:6c:61:3c:07:f5:c5:ba:af:53:05:86:37:c8:fe:99:
         25:5d:06:00:a1:a5:53:2e:98:a6:c4:3c:c1:ae:b4:09:cc:c5:
         b5:fb:8d:dd:e9:51:7d:01:6c:44:84:8d:ef:26:47:55:40:bf:
         e9:83:af:4d:f4:05:eb:bc:07:ef:1a:93:ca:e2:5c:51:63:9f:
         90:fc:52:79:1e:3d:ee:cb:3a:79:64:9a:26:99:02:14:2d:2f:
         02:9b:f2:33:4c:fc:f8:54:8e:fd:08:6f:dc:fb:24:b2:fd:e4:
         8c:69:45:4f:6d:b9:b2:ac:4a:d7:92:31:a5:55:9c:a4:a9:83:
         33:d3:6c:a3:aa:f2:59:9f:20:7f:34:39:ba:6d:ba:fe:27:a0:
         3d:1b:6c:aa:e2:3c:7d:f9:0c:b7:54:91:dc:c9:d0:f3:77:e5:
         7a:95:1d:3f:f2:89:c5:0c:5e:6c:61:42:88:4b:ce:08:5b:69:
         fe:e5:6c:fd:e9:11:58:12:a9:62:29:fa:88:0e:64:66:a4:28:
         81:ac:09:9d:af:8d:b9:6d:c8:5d:65:85:ed:fb:e6:f2:48:d5:
         9e:b5:51:bd:89:6b:c1:8f:b9:04:08:23:a7:7e:20:6a:c6:81:
         87:9c:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:49:34 2025 by rpki-client