Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          br2lPrDxV9HHeWqO/6c4mxG6CD58e57ZqEiESPkPcI0=
Subject key identifier:   DF:D0:E4:AB:18:7A:DE:3D:89:FC:8D:DC:B3:B0:F4:94:C7:56:F0:A0
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       019A53AC9469EA6616CC7C552B69D069BB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          1713
Signing time:             Wed 05 Nov 2025 11:00:10 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:10 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:10 +0000
Files and hashes:         1: 2NXfzQOX2yzR_1PZmnB4_Blj3Qs.roa (hash: Ak/GG6l8wter3UNq3QplQdRhCDB/vDLztI0yd4qCSKk=)
                          2: 53KqbajJkABxQADjbHVlPygTcKc.roa (hash: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=)
                          3: 5UkoSBgwT2Qf3aFassiPq3Vf9Jg.roa (hash: t3qUJPhi+Poc2aWmH2JZX3lQ8LuDxwy2KrfiHtXlPiA=)
                          4: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: yO2BCoUHJFZStDF+qiGkUWH4K1rO6sc37e6tpuwkBhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ac:94:69:ea:66:16:cc:7c:55:2b:69:d0:69:bb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: Nov  5 11:00:10 2025 GMT
            Not After : Nov  6 11:00:10 2025 GMT
        Subject: CN=dfd0e4ab187ade3d89fc8ddcb3b0f494c756f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:0f:09:b5:2b:aa:4d:3b:e5:3f:16:72:5d:
                    a9:ed:aa:a8:6d:f4:e9:b5:98:37:c2:81:68:bf:22:
                    9d:67:f4:76:aa:a3:20:2c:0e:cf:a4:f4:f1:eb:bc:
                    d1:4a:bd:27:51:39:05:0a:14:33:1a:15:68:43:1b:
                    88:e8:29:f8:d0:02:91:b9:07:5e:c9:52:2e:4c:6b:
                    cc:d6:61:2e:08:3a:46:9a:69:12:a3:5e:59:d6:31:
                    70:27:32:b2:c6:38:e8:1f:a5:38:ff:ee:bb:54:b9:
                    e1:e4:06:9b:b3:73:82:f5:1b:92:46:9f:f1:02:96:
                    25:c5:26:8b:f3:cb:91:37:11:bb:3c:d0:40:89:0b:
                    cf:38:d2:df:51:15:32:5a:b2:ba:65:1b:56:1c:29:
                    9e:1b:05:cc:a4:28:e7:b0:d6:30:e5:ef:8f:35:52:
                    2b:cf:30:44:36:81:99:a3:51:93:ef:5c:78:be:c1:
                    28:cb:cc:b9:28:5b:ee:78:46:b2:29:d3:28:8f:34:
                    d6:fb:40:6f:e2:8b:c2:7c:8b:ed:e9:9a:fd:2f:c3:
                    dc:b9:47:c3:b8:bc:56:32:f7:a2:12:d3:ee:13:7d:
                    88:d6:46:62:c6:1e:a5:7f:61:67:66:4e:f4:db:18:
                    b4:1c:c7:2d:e4:67:28:f8:4d:70:3b:d7:ef:d6:06:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:E4:AB:18:7A:DE:3D:89:FC:8D:DC:B3:B0:F4:94:C7:56:F0:A0
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:47:dc:d3:bf:e9:72:34:55:63:fb:1a:41:b7:3c:ce:4a:23:
         0f:8d:8f:2e:45:ef:d9:a9:77:b7:ad:0e:2c:e3:f5:2e:73:8e:
         b4:9b:fa:57:79:73:3a:11:97:57:91:d7:6b:90:76:b3:e9:93:
         80:48:f4:0a:1f:2b:f3:28:71:b7:83:9e:4f:5d:68:ef:45:04:
         cb:23:b0:d1:3b:60:1e:03:47:3d:b7:a4:82:7e:66:2e:55:33:
         12:71:a1:d1:ea:91:e7:e6:1d:0d:4e:6b:49:06:29:35:7f:a5:
         0d:e4:ad:0c:65:f9:c8:63:2e:44:71:92:e0:be:cb:b3:aa:f4:
         36:6a:fa:be:2b:6c:52:94:75:d1:11:f5:8a:a1:dd:63:6b:49:
         75:1d:81:87:ce:69:53:c8:31:7d:25:96:59:83:69:9b:42:fe:
         04:f6:27:1b:9a:4a:13:3a:e4:86:62:60:db:37:b0:88:c4:41:
         3e:72:91:67:54:7c:1c:16:66:4c:d7:97:2d:12:3d:85:1a:d3:
         38:18:a0:2b:5f:3a:c9:de:e3:8b:ea:4f:e9:9e:af:94:6d:db:
         11:27:9c:ff:2e:9e:17:38:2b:16:d5:28:9f:e4:63:75:88:70:
         53:c7:56:b0:a3:29:8a:b6:00:ec:ff:48:7f:9d:09:97:76:98:
         02:99:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:10 2025 by rpki-client