Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          a+sNY7R+PHLV9FwSeivsJLy9TVaSTyucsH4ZQaGqY9E=
Subject key identifier:   6C:D0:4F:4E:43:61:80:77:04:D5:4B:18:55:71:AC:B7:FE:D5:4E:AF
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       019A4DE1FEF89BBCB582B7DD0C8A0098C09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          052F
Signing time:             Tue 04 Nov 2025 08:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:47 +0000
Files and hashes:         1: 0HIG1ASuHLhr_N0uq30-TDBCBc8.roa (hash: 6XjtwRNtlPXy9YkEKdFIZY+w3G0mQ1KL87tnA7eo10Y=)
                          2: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          3: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          4: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: 5ihpuFvl6GYGfiyTAMHxSsKNQLEQ2MdA14H+bGDIiNk=)
                          5: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:fe:f8:9b:bc:b5:82:b7:dd:0c:8a:00:98:c0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Nov  4 08:00:47 2025 GMT
            Not After : Nov  5 08:00:47 2025 GMT
        Subject: CN=6cd04f4e4361807704d54b185571acb7fed54eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:db:6a:4e:6e:e8:0c:df:06:ab:fb:cb:c7:
                    6a:40:2d:2b:39:2d:08:4c:de:d0:2c:84:eb:41:1c:
                    e8:b0:d0:f0:3c:ad:74:05:f5:da:28:6d:ff:6d:b3:
                    22:5f:1f:a7:0b:7b:10:6b:e7:8d:4b:62:10:b0:3b:
                    27:34:84:e4:9d:b3:61:95:fb:82:8f:5d:e6:e8:e2:
                    68:3f:ba:45:c2:b5:4d:a2:bd:ec:d9:1f:63:a2:68:
                    d5:91:8c:37:25:9e:f1:6d:f6:62:0a:a1:e4:e9:52:
                    de:02:f4:e4:ee:8d:38:66:b0:33:da:4d:2e:49:63:
                    41:0a:4c:06:8a:b2:53:a3:34:cc:a9:b5:c8:8f:51:
                    7e:28:63:87:ba:2a:6f:bf:d6:cc:e9:ff:8a:37:a7:
                    9c:91:9a:83:f3:89:a8:ca:41:35:61:d3:3e:f6:27:
                    35:0e:26:3a:d2:80:1d:13:c4:27:a9:63:ca:26:dc:
                    1d:35:f8:5d:80:02:25:09:2f:85:24:37:46:38:e1:
                    e6:3c:e0:92:11:fc:0d:bd:9d:4f:f2:e0:8c:f3:55:
                    ca:fd:5c:83:61:21:8f:94:ba:00:f3:07:89:5a:08:
                    01:a0:83:61:0e:49:96:a2:86:d0:6e:e0:86:05:d3:
                    11:8f:53:49:69:e6:fa:38:3f:8e:f3:7c:af:bc:d8:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:4F:4E:43:61:80:77:04:D5:4B:18:55:71:AC:B7:FE:D5:4E:AF
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:44:5e:63:dd:0d:29:64:28:10:30:bd:a6:a2:6d:99:d0:e3:
         8c:71:69:39:af:7f:0d:9b:90:6c:b5:6c:cb:de:dd:e2:34:0c:
         c3:86:71:29:e8:d2:38:ab:1d:9a:96:50:95:38:dc:91:44:cb:
         23:df:89:5a:48:43:31:04:b2:c2:2f:cd:cd:f4:f5:e0:85:e0:
         d1:fb:f8:1e:ba:9b:da:ae:bc:c0:cd:1a:76:bb:e8:d4:e9:8d:
         ff:97:eb:3a:5a:60:70:e9:a7:20:15:72:de:1f:4b:ac:e3:73:
         97:99:e3:c3:4f:19:d2:a4:e6:8d:3c:85:9b:d9:a6:56:ce:58:
         69:b7:5e:1d:93:83:3b:64:a2:37:0a:3c:a4:f9:1a:2f:b6:1a:
         be:3a:e8:98:34:0e:08:85:63:18:15:84:b8:be:59:e2:15:9c:
         95:b1:5e:ba:6f:0c:7a:5d:13:0e:e3:32:4b:a5:66:24:a9:4b:
         d0:7f:88:50:37:b9:6d:d7:f7:a7:9f:bd:2b:2d:17:98:83:00:
         52:13:74:18:2a:43:6d:ea:7f:34:ec:3c:e0:df:48:ad:68:f3:
         b3:99:ab:ec:ac:33:4d:19:f5:e6:9f:c6:b4:c2:7f:1d:aa:7b:
         32:84:b6:af:0b:ee:b7:9f:34:54:53:bd:e0:61:f3:13:05:7b:
         1f:68:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:17 2025 by rpki-client