Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          IsVPzg2VFtfXwjDJmQNTnDHZFcQAPn9zoUhklJ8y5E4=
Subject key identifier:   F3:2C:D0:56:01:ED:D8:B2:9C:A8:F1:00:52:97:B1:8C:28:8E:6B:59
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       0199C4575116BDD921C4AA7FA0AE11FCE547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0681
Signing time:             Wed 08 Oct 2025 15:01:20 +0000
Manifest this update:     Wed 08 Oct 2025 15:01:20 +0000
Manifest next update:     Thu 09 Oct 2025 15:01:20 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: 4o+QZhGSAhmoYtMMIEYE4/lkAk+Gqf6v/71MQnWcBjo=)
                          2: Vrgx7vIvsF8zYOaGSae4akirA8E.roa (hash: ui7bIuQdVcdRVDf8eIFg2mfVrPzlEX+6v4UZ3XVxNiQ=)
                          3: fuvY2x3HsIO6gagsFqqITiQ_yGw.roa (hash: SuZo82ra513kqunDJrOE76D6k1ULI5qVhzPv0+Hxb8s=)
                          4: lhlKvmvkFsIW7BjWsR3tP1Wy7Fk.roa (hash: eyvbVaWDQgudnxbH2Wpb3cZMxMIr13klVBOw1VQYwwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:57:51:16:bd:d9:21:c4:aa:7f:a0:ae:11:fc:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Oct  8 15:01:20 2025 GMT
            Not After : Oct  9 15:01:20 2025 GMT
        Subject: CN=f32cd05601edd8b29ca8f1005297b18c288e6b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:52:c7:b8:2c:6f:31:e0:e1:5e:db:f8:7b:
                    23:7f:3d:64:c7:2f:77:89:6e:11:37:ad:b9:40:b4:
                    e0:f3:c7:a1:e7:e7:fe:1a:b8:5a:8d:5a:5c:41:5e:
                    fd:64:98:bc:a7:53:5e:8c:f2:6e:91:55:85:c4:8c:
                    53:95:1a:59:5f:d8:c4:18:59:76:33:82:94:c7:3f:
                    5d:4e:9e:b4:74:b1:59:43:22:a2:cb:f7:39:fb:da:
                    bc:bd:9f:ca:cd:2b:d0:cf:39:62:c8:3f:a2:23:27:
                    fa:cf:17:41:f8:56:a9:fa:12:1d:06:18:29:4d:b4:
                    10:f4:f9:f4:a5:84:30:15:78:69:09:98:c8:77:2d:
                    95:52:cb:60:d9:83:87:64:d6:78:95:01:a9:a3:af:
                    06:10:64:b9:97:13:e8:49:71:cc:5d:8d:e3:91:8d:
                    56:fb:22:1d:fa:ec:04:52:62:d0:af:bf:b8:16:72:
                    af:e7:b0:d8:75:da:db:95:70:42:ed:1c:0e:5c:31:
                    6b:87:1f:e7:90:51:61:46:e4:2d:6e:19:f8:a9:75:
                    a9:0d:a5:53:7b:f3:ff:80:92:a6:1c:96:85:4c:87:
                    db:37:66:44:82:0c:21:5c:84:1d:a5:65:1e:ad:46:
                    be:c8:01:d0:ec:27:a8:38:1f:33:51:49:09:49:14:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2C:D0:56:01:ED:D8:B2:9C:A8:F1:00:52:97:B1:8C:28:8E:6B:59
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:7f:02:87:5b:9e:63:98:0f:31:46:3e:b3:b4:ca:8a:bf:
         81:49:f3:02:ba:87:74:6b:dc:13:80:e9:09:79:64:53:8c:75:
         c3:71:e4:7e:07:79:7e:be:eb:86:67:58:3b:13:e4:ff:8e:f1:
         fd:1e:7e:34:99:df:46:19:77:c2:c3:9b:25:b3:e8:03:ef:6c:
         11:df:ff:25:39:24:95:9b:ee:81:a0:8e:01:61:b3:73:13:83:
         25:92:3e:7c:e0:e1:f7:9f:1d:18:da:e1:de:73:a3:43:58:94:
         5b:91:f5:08:c4:dd:f7:9a:e1:4d:38:94:b9:dc:e9:d2:76:4f:
         23:77:66:76:e3:5b:f5:d8:44:3f:96:24:4b:59:1b:42:7c:aa:
         e5:49:ec:f6:5d:47:1a:e2:4e:0c:fb:2a:5f:9e:73:48:1a:a3:
         1a:c8:eb:5b:55:7a:1c:dd:97:b8:24:f0:9e:dc:31:79:d4:ff:
         7c:c2:15:a7:2a:f7:ff:81:b7:2b:c1:45:59:5b:2b:68:8f:c0:
         14:ce:cc:72:77:2e:18:25:d0:a9:a7:8c:a5:a8:cf:59:46:dd:
         84:12:a4:d8:55:c3:fc:1f:50:23:36:37:1d:d4:c7:2d:96:3a:
         8a:a0:c5:1f:68:67:66:3a:04:92:f5:89:0f:06:a1:15:77:3a:
         19:a5:38:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEV1EWvdkhxKp/oK4R/OVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4
NDFjOTYwHhcNMjUxMDA4MTUwMTIwWhcNMjUxMDA5MTUwMTIwWjAzMTEwLwYDVQQD
EyhmMzJjZDA1NjAxZWRkOGIyOWNhOGYxMDA1Mjk3YjE4YzI4OGU2YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZBSx7gsbzHg4V7b+Hsjfz1kxy93
iW4RN625QLTg88eh5+f+GrhajVpcQV79ZJi8p1NejPJukVWFxIxTlRpZX9jEGFl2
M4KUxz9dTp60dLFZQyKiy/c5+9q8vZ/KzSvQzzliyD+iIyf6zxdB+Fap+hIdBhgp
TbQQ9Pn0pYQwFXhpCZjIdy2VUstg2YOHZNZ4lQGpo68GEGS5lxPoSXHMXY3jkY1W
+yId+uwEUmLQr7+4FnKv57DYddrblXBC7RwOXDFrhx/nkFFhRuQtbhn4qXWpDaVT
e/P/gJKmHJaFTIfbN2ZEggwhXIQdpWUerUa+yAHQ7CeoOB8zUUkJSRQ7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMs0FYB7diynKjxAFKXsYwojmtZMB8GA1UdIwQY
MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt
NDY1ZDIyM2IyMzJlLzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl
LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgB/Aodb
nmOYDzFGPrO0yoq/gUnzArqHdGvcE4DpCXlkU4x1w3Hkfgd5fr7rhmdYOxPk/47x
/R5+NJnfRhl3wsObJbPoA+9sEd//JTkklZvugaCOAWGzcxODJZI+fODh958dGNrh
3nOjQ1iUW5H1CMTd95rhTTiUudzp0nZPI3dmduNb9dhEP5YkS1kbQnyq5Uns9l1H
GuJODPsqX55zSBqjGsjrW1V6HN2XuCTwntwxedT/fMIVpyr3/4G3K8FFWVsraI/A
FM7McncuGCXQqaeMpajPWUbdhBKk2FXD/B9QIzY3HdTHLZY6iqDFH2hnZjoEkvWJ
DwahFXc6GaU4yw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:44 2025 by rpki-client