Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          d349OSdlr+rFcSL67+oCU1upc1OmQLSWf1Oyb2NjNKQ=
Subject key identifier:   EC:8F:23:2A:FF:33:DE:11:46:0F:25:80:F6:11:B7:35:99:0B:33:CF
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019A5150E62368D56DCBE03C4EC3CD919497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          032A
Signing time:             Wed 05 Nov 2025 00:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:47 +0000
Files and hashes:         1: AkYoHCkYkqYJ4e6zgOpT_d4rAcc.roa (hash: DnY6vZRN7L3S7U3NUI/WYv9ICvZ75py/lkvoFGjOBWo=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: 9y+2xuze0e0fVRek6uMq2OMYpONr5vWId8i4hBTaCNY=)
                          3: K_uU63IUWkuBSdujRaZVJyYDuQA.roa (hash: c36gCPnGo7y/i+lTuAsqFsR3biz87ULqS+Id7LIKINM=)
                          4: OXvCW8MMgkF4QZALyfIeJNaaoXA.roa (hash: /PcXdkDQ/rrC5eLGBEhuLOwRqaBJEq8rOAtu2iNHHtg=)
                          5: QZFqMpUTlcgeboKANl58QufnsKQ.roa (hash: NRvFYfoNhNqi7BWM2zeDShfUo2m9RhNxfQeL6DGdAxA=)
                          6: SXkpqaXeErUr75MdUiQzroIG9Oo.roa (hash: xM+1yL5RuBInEIVQwffofhGJw/eL/kHP90mqlK8dxFE=)
                          7: s9gMsCeIUPKFPmlu1v4Lg4j8vGA.roa (hash: Kzy+iwZJ+TEqTOb757p2g/mLDgJAR1tV9cYhl1pM100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:e6:23:68:d5:6d:cb:e0:3c:4e:c3:cd:91:94:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Nov  5 00:00:47 2025 GMT
            Not After : Nov  6 00:00:47 2025 GMT
        Subject: CN=ec8f232aff33de11460f2580f611b735990b33cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:c2:44:f2:f9:3e:a3:cb:a7:09:01:df:f6:
                    d0:ff:66:8d:78:21:53:45:7e:86:c1:77:73:c0:52:
                    e8:19:93:01:f5:7a:e8:c1:c5:93:46:38:b4:22:89:
                    ac:7a:3d:23:39:4d:df:30:5f:b2:b5:09:64:60:2a:
                    cf:57:e5:29:00:c0:b4:10:e3:ed:32:a1:8b:d8:2a:
                    07:a8:42:70:c7:ec:67:e9:a0:1c:0d:67:59:63:89:
                    91:13:b4:0e:bd:49:ba:9c:4a:82:12:2d:07:af:c8:
                    c4:2b:a9:6c:9e:5d:dd:ed:b5:8d:43:f0:12:a6:92:
                    70:42:1b:d9:83:47:e8:4f:a5:62:da:70:92:6d:a2:
                    5a:1b:63:7c:8a:a9:08:5f:66:e4:e1:f9:04:f0:7e:
                    44:c9:53:d3:96:67:39:24:48:9b:c5:c2:2e:6d:cd:
                    9a:44:db:43:b1:f8:da:71:3b:21:ba:45:6d:34:8a:
                    7d:3a:fd:f4:7b:92:86:a9:a5:fc:da:cb:ab:a4:20:
                    7f:7e:53:d5:9f:3e:dc:49:00:78:32:fd:6d:34:21:
                    10:21:70:7f:b2:7b:ab:c7:47:14:cf:4c:e8:09:a7:
                    3c:5b:91:3b:ec:19:4a:12:a6:4b:d0:81:c5:c8:38:
                    b7:bc:ae:c9:6d:29:99:80:58:63:0d:5a:67:76:09:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:23:2A:FF:33:DE:11:46:0F:25:80:F6:11:B7:35:99:0B:33:CF
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:ae:91:f5:2b:07:05:a9:d8:0c:31:bc:ec:b7:7c:36:b1:
         15:4d:71:0f:c7:51:5f:50:aa:b1:ee:dc:a8:ef:82:ad:fa:2d:
         b2:69:1a:1e:b8:e5:8b:6f:42:e5:2a:fe:b4:55:33:ab:b9:54:
         d0:c5:70:9f:31:6f:45:36:4f:8a:29:eb:4e:e0:6b:32:f1:bb:
         9d:11:a6:2a:76:f4:16:21:31:84:80:27:44:11:ae:ae:cd:07:
         c3:df:6b:90:cf:da:63:aa:98:a0:b9:6b:50:0a:f1:53:9e:a6:
         36:d1:57:12:5c:a5:ed:0f:c1:d2:5a:b7:b2:11:44:09:47:de:
         a8:2d:99:a2:ea:f9:73:9b:bb:49:a1:b6:a5:60:55:83:c1:36:
         ee:30:ba:14:49:5b:96:2c:db:3e:82:85:08:81:a8:f5:40:cd:
         28:85:71:0b:8b:92:b0:fb:5c:c6:2c:29:80:3d:0d:22:28:79:
         8c:20:f7:1c:7c:e8:06:90:b4:57:3c:0e:c3:9d:62:b0:d3:17:
         76:df:e9:b0:4b:67:f3:5e:66:02:f5:1a:d4:e6:21:9a:a3:64:
         60:77:14:30:47:7c:05:33:bd:bf:99:80:ab:4f:e1:82:fa:dd:
         3e:f8:b4:2c:79:24:81:c8:f2:42:bf:fd:66:6c:54:c0:28:86:
         7b:c9:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:37 2025 by rpki-client