Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          3sFahNcQFZIJbcX8HubgdUXge9nXlpjultQm/rw7F/Y=
Subject key identifier:   E5:2B:45:D5:FE:09:44:BB:6F:CC:3E:B1:F6:C9:65:38:DB:11:B8:66
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019A51F5C10C0C807C7DC3B7C10D53B6BA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          09B3
Signing time:             Wed 05 Nov 2025 03:00:51 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:51 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:51 +0000
Files and hashes:         1: 1-Q_tpIcGxIQN87_v5Q9yiTu9dYA.roa (hash: XfJwIAI7NcvwkO/KOOkHLNUW6PjQwjjvkoTrKUB4eK4=)
                          2: 2b9LvTP21iFo95hoRuJmbk14nB4.roa (hash: h50aMVaLA2P/YoV/aGBh8veA94OaJ1r/LnTS0SELFjo=)
                          3: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: 2snMlUcrysmH8ewobMFntk+lTMgvMz6BxClH9hpbuAs=)
                          4: IBYohiSfrdp01nVXXkVdPVwTXu8.roa (hash: xHDIvb8rjLO6em8S12Zcvhamk/oay8uBCC+89yrhRMg=)
                          5: KG0ELDyPHSkIQS-mg9gLAsQapjw.roa (hash: e+EZSd1IAWr6lFOaOhHRn/7FSXywEXsdZ12xJvEd9no=)
                          6: lRJP557P-ah_9W8ZheSmqCwj9zE.roa (hash: gieMZm91HbwHzADRLU0Wb4pj7bnfrsU9RpRwfF79zX4=)
                          7: seDSxzYBDi_CrZLkMdUaljzvmis.roa (hash: yQNwwzfFhPg6rcTmXnCejvtGGODhGwUh9kbGffGWogA=)
                          8: uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa (hash: FeYP7aaDi48jmb8v+wyHZazNXEJBqq9Kz30r2ZHOodg=)
                          9: z7XpKInxMUGGJ1-tIa9aZMIU0NM.roa (hash: eE8LFeccl/2KqXQm9lZ97GRHlNXsQ2CX2nj/+cj0tfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:c1:0c:0c:80:7c:7d:c3:b7:c1:0d:53:b6:ba:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Nov  5 03:00:51 2025 GMT
            Not After : Nov  6 03:00:51 2025 GMT
        Subject: CN=e52b45d5fe0944bb6fcc3eb1f6c96538db11b866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:22:1a:0a:a3:26:a2:be:fd:47:a5:2f:df:
                    ad:f4:ce:5c:ba:6b:79:1b:d4:e4:a0:39:fa:d0:4b:
                    3e:74:14:f8:37:db:8e:9f:16:c9:32:25:ef:3f:a5:
                    56:03:b7:ee:ee:c3:b3:ca:1c:74:49:d7:56:5f:d3:
                    1a:f3:86:db:5b:aa:65:9a:a2:cb:79:cb:ee:99:5d:
                    f6:85:62:11:d0:a0:37:a3:bf:3f:29:9a:3f:a5:b5:
                    f3:17:7a:d0:31:fb:c0:07:56:9c:89:3e:3a:72:ee:
                    80:36:41:1c:ed:95:f6:98:ee:74:12:9a:f1:64:2d:
                    a1:8e:35:e3:98:a9:8e:31:bb:6d:0b:47:15:3c:75:
                    d0:2c:ed:cd:36:13:83:51:24:bb:e9:22:34:19:52:
                    16:7d:46:82:1b:9d:c6:da:bc:43:3b:0d:e7:74:6f:
                    c4:84:ed:6c:90:4f:99:2f:45:19:44:e5:2a:a5:90:
                    8c:af:eb:65:ea:7b:4b:12:77:c9:07:da:92:4d:84:
                    c5:94:40:6d:cf:41:6f:50:9e:5b:c9:35:df:41:5b:
                    c3:c7:ac:0f:da:1b:56:0e:da:78:aa:04:d9:a4:43:
                    14:e1:05:eb:ea:f1:bc:c3:c8:ba:59:a9:c0:30:cd:
                    b6:49:ec:b8:85:fe:81:8b:0b:c1:fd:3a:e0:1d:e4:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:45:D5:FE:09:44:BB:6F:CC:3E:B1:F6:C9:65:38:DB:11:B8:66
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:57:2d:96:e3:0f:bd:7b:7f:1a:ef:31:15:19:04:cd:ef:52:
         4c:a6:cf:7f:6c:4b:b1:f8:ab:3b:bc:d0:37:7e:3c:87:7b:09:
         2e:3f:08:16:ac:9b:d6:09:a4:f3:84:c6:25:70:f8:16:ae:e1:
         9c:73:7f:95:60:8f:33:84:c7:44:1f:f8:ae:6b:86:7a:e2:e8:
         e3:da:cd:b3:37:a4:12:d2:57:bd:74:ab:ee:52:fa:77:4d:fb:
         7c:a6:70:31:44:60:ff:8e:5a:02:a9:fa:c1:b5:b1:6d:e2:0a:
         45:23:fb:ce:ca:0d:28:f7:8c:fa:81:40:68:68:34:2d:7d:ef:
         ec:5d:0d:6b:82:af:53:4f:ba:af:a3:11:b8:8d:17:c4:a7:b4:
         6e:35:fb:3f:e3:51:62:6b:80:16:e2:74:43:ef:9b:f2:b7:8d:
         50:02:f7:42:f3:56:38:e5:dd:f6:9c:4e:c6:03:1f:3e:3c:26:
         15:17:aa:87:8c:9c:fb:af:aa:c2:62:9e:31:0b:6f:3f:ea:9c:
         2a:fb:0e:a6:60:27:13:9c:ff:72:39:eb:ae:6a:fd:36:d0:15:
         1e:f0:a9:6e:e0:9c:f9:ef:3f:42:47:6c:ef:7f:d3:9a:37:43:
         0a:95:08:b8:48:92:32:b1:8f:9f:69:f8:73:b4:08:13:0b:6a:
         a8:d9:4d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9cEMDIB8fcO3wQ1TtrqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjUxMTA1MDMwMDUxWhcNMjUxMTA2MDMwMDUxWjAzMTEwLwYDVQQD
EyhlNTJiNDVkNWZlMDk0NGJiNmZjYzNlYjFmNmM5NjUzOGRiMTFiODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6AiGgqjJqK+/UelL9+t9M5cumt5
G9TkoDn60Es+dBT4N9uOnxbJMiXvP6VWA7fu7sOzyhx0SddWX9Ma84bbW6plmqLL
ecvumV32hWIR0KA3o78/KZo/pbXzF3rQMfvAB1aciT46cu6ANkEc7ZX2mO50Eprx
ZC2hjjXjmKmOMbttC0cVPHXQLO3NNhODUSS76SI0GVIWfUaCG53G2rxDOw3ndG/E
hO1skE+ZL0UZROUqpZCMr+tl6ntLEnfJB9qSTYTFlEBtz0FvUJ5byTXfQVvDx6wP
2htWDtp4qgTZpEMU4QXr6vG8w8i6WanAMM22Sey4hf6BiwvB/TrgHeSTIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUrRdX+CUS7b8w+sfbJZTjbEbhmMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFctluMP
vXt/Gu8xFRkEze9STKbPf2xLsfirO7zQN348h3sJLj8IFqyb1gmk84TGJXD4Fq7h
nHN/lWCPM4THRB/4rmuGeuLo49rNszekEtJXvXSr7lL6d037fKZwMURg/45aAqn6
wbWxbeIKRSP7zsoNKPeM+oFAaGg0LX3v7F0Na4KvU0+6r6MRuI0XxKe0bjX7P+NR
YmuAFuJ0Q++b8reNUAL3QvNWOOXd9pxOxgMfPjwmFReqh4yc+6+qwmKeMQtvP+qc
KvsOpmAnE5z/cjnrrmr9NtAVHvCpbuCc+e8/Qkds73/TmjdDCpUIuEiSMrGPn2n4
c7QIEwtqqNlNOA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:33 2025 by rpki-client