Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          ZC4rBN31kGNJWb8ux5U0G+7vcEVFmlyCCQFg2ldPsdU=
Subject key identifier:   C9:3F:4F:65:71:93:2C:24:51:D2:A7:A9:77:03:A1:16:1D:93:4B:9B
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019A4F6272541D73BDBF84AEC04F90FCE7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          0329
Signing time:             Tue 04 Nov 2025 15:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:43 +0000
Files and hashes:         1: AkYoHCkYkqYJ4e6zgOpT_d4rAcc.roa (hash: DnY6vZRN7L3S7U3NUI/WYv9ICvZ75py/lkvoFGjOBWo=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: I0JvW+Q0Fq6Q2+IGkatgSr0E4OHSNmWNJBvgnSP1Awg=)
                          3: K_uU63IUWkuBSdujRaZVJyYDuQA.roa (hash: c36gCPnGo7y/i+lTuAsqFsR3biz87ULqS+Id7LIKINM=)
                          4: OXvCW8MMgkF4QZALyfIeJNaaoXA.roa (hash: /PcXdkDQ/rrC5eLGBEhuLOwRqaBJEq8rOAtu2iNHHtg=)
                          5: QZFqMpUTlcgeboKANl58QufnsKQ.roa (hash: NRvFYfoNhNqi7BWM2zeDShfUo2m9RhNxfQeL6DGdAxA=)
                          6: SXkpqaXeErUr75MdUiQzroIG9Oo.roa (hash: xM+1yL5RuBInEIVQwffofhGJw/eL/kHP90mqlK8dxFE=)
                          7: s9gMsCeIUPKFPmlu1v4Lg4j8vGA.roa (hash: Kzy+iwZJ+TEqTOb757p2g/mLDgJAR1tV9cYhl1pM100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:72:54:1d:73:bd:bf:84:ae:c0:4f:90:fc:e7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Nov  4 15:00:43 2025 GMT
            Not After : Nov  5 15:00:43 2025 GMT
        Subject: CN=c93f4f6571932c2451d2a7a97703a1161d934b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:db:e2:26:9a:f9:62:51:10:bd:1e:90:49:
                    39:3b:0e:da:a2:df:f2:e8:e8:a3:7b:ed:29:30:b2:
                    e2:2b:17:94:d9:72:b9:bd:bd:2f:30:dd:98:9c:a4:
                    d8:c0:3d:97:de:83:17:ca:9a:8c:ff:e7:91:80:2f:
                    c5:08:8c:49:3f:e2:87:94:51:92:22:6d:27:17:28:
                    12:1f:ff:29:3c:4c:b1:b2:cb:92:d4:e7:7d:cb:6c:
                    dc:9b:e2:39:0e:9c:da:92:95:a4:ea:3d:c6:78:6a:
                    2e:58:7c:ae:46:6b:9d:4d:db:94:d3:a0:cd:31:75:
                    4f:77:63:2b:39:4d:c0:92:3b:21:83:a3:ea:9b:75:
                    d5:95:ed:24:c0:fe:6e:70:8c:3e:f9:d3:a6:77:5a:
                    0d:97:7a:27:cc:42:2c:d1:f7:62:01:f4:d5:fd:d7:
                    b6:7b:d5:9b:40:c8:70:15:62:8c:ff:d7:73:a3:1a:
                    be:2d:10:57:37:f9:dc:01:90:b6:ba:56:d7:03:a4:
                    87:2e:de:a4:40:8b:34:95:6a:28:88:f1:5b:aa:13:
                    1e:c7:3b:f3:82:8d:2d:ae:57:40:30:7b:22:9d:22:
                    ee:9b:78:c7:99:ce:12:2d:9d:5c:e3:c6:25:6a:8f:
                    28:69:03:c7:6a:7e:8a:bf:cd:27:25:28:d8:1e:7f:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:4F:65:71:93:2C:24:51:D2:A7:A9:77:03:A1:16:1D:93:4B:9B
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:65:90:95:38:c3:86:30:28:c1:ff:a6:bf:a0:b0:0b:63:
         90:c2:c2:93:88:6f:20:5b:02:4b:32:da:4f:66:3a:20:c6:8d:
         22:a5:a9:3b:0d:8c:b6:dc:a8:82:d3:3f:34:ca:4c:b9:72:60:
         ea:ff:2d:a9:44:69:e6:47:5b:ae:f2:51:bf:ff:1f:66:ef:1c:
         3c:01:7f:fc:4e:20:cf:1f:e9:27:a3:fb:eb:17:1e:a0:0f:f9:
         51:df:bb:5e:03:93:0e:f6:d0:d8:23:8d:e1:4b:12:c5:30:4e:
         1f:2c:ff:fb:e9:fb:74:bf:d2:ed:8d:d0:af:a1:23:88:ec:7c:
         86:c3:fe:b4:01:fc:c9:48:25:ca:fb:03:d8:41:03:aa:98:85:
         14:40:ea:ea:46:2c:d4:cb:08:94:df:aa:42:12:7a:e3:ca:84:
         fb:c3:eb:59:2e:3f:2c:77:42:78:ce:5b:99:77:33:10:77:da:
         d1:26:f5:69:d2:ce:87:bd:58:fc:5e:b3:df:f9:e9:f0:39:f8:
         53:ca:bc:6c:9d:76:24:aa:48:4e:b2:c9:2d:00:fb:de:e5:2e:
         71:95:c8:a6:dc:b2:ca:68:8b:bf:cd:1b:0b:b7:67:61:6f:79:
         08:71:e2:fb:c0:bf:c1:39:36:bb:5c:b1:2a:70:f2:a4:23:ee:
         42:8f:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:53:56 2025 by rpki-client