Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
File:                     b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json)
Hash identifier:          qyr8hGQiaZKlzCEGVvgldRT5VE5smcqARR8HmMgAZPI=
Subject key identifier:   56:78:20:0C:DC:88:B6:66:8B:AE:99:35:B2:90:D7:38:87:CB:7C:92
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019A25C1C4CC98CBFAB989D1DE82DC98AC70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
Manifest number:          0E06
Signing time:             Mon 27 Oct 2025 13:00:47 +0000
Manifest this update:     Mon 27 Oct 2025 13:00:47 +0000
Manifest next update:     Tue 28 Oct 2025 13:00:47 +0000
Files and hashes:         1: 1-NiC19PFJdVr-VuE1N7tWrIBE9Q.roa (hash: 0HAHPWXREzbwDwtij8FRpFriyrnHpfOye4GKnuxuEBo=)
                          2: 6nWnFXyS5F1ASwTmxTI-OKrVInw.roa (hash: nIb7NvpCUlKnok0WYLAdZJHgh2sr4DtEdqaSpiUSP2U=)
                          3: JepVTVOXgV6-PNcYm4B25-og_Bw.roa (hash: VKqDemplzQ4s9jiGQQ+ztyQv75PYRo6TWHvEcx19U2s=)
                          4: MncpHd9QqX2ka0is5mCmp6Ls4EE.roa (hash: rNntJON3CyCfJy9LGsF58CLKoNGRCBJyCvrP9s3kE9g=)
                          5: PlNj2d6nJdCalfpN6r_rJytfYJI.roa (hash: 0wdTzkVtCGDZ5ADOoR8XnEMg9MH672ZEq8atlwavEHU=)
                          6: Vx78BtYZth8fkOAc3-R4JCOAWDQ.roa (hash: bCA21gOWhnMn30bvClWd1qAWHLtWkJnH/m+zGg0euus=)
                          7: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: xcG8pJ8ie3qwtipMFa/tPn35+MvD7bxycgz5vSfOzSw=)
                          8: eF9lTSZjCnQxVBcCyaZ2_iTyyL4.roa (hash: C2f9yp+5cS9RVlmylbg05LRT6roHKpucks8wQ6aDfQ4=)
                          9: irQ4JJMLztLa--PMkqbpzaYfTLY.roa (hash: yXyLGlncTibO9AJq9TJ+3eEQDyB/oRi2hPfsjF++iN0=)
                          10: tlinpnG0x8FYKHJRgnQl2MhzT9I.roa (hash: xcfqy/HROXDkvuMKBhdlM9zJKi6smcXuo63HPeYf4G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:c1:c4:cc:98:cb:fa:b9:89:d1:de:82:dc:98:ac:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Oct 27 13:00:47 2025 GMT
            Not After : Oct 28 13:00:47 2025 GMT
        Subject: CN=5678200cdc88b6668bae9935b290d73887cb7c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:b9:d8:2e:a8:8b:36:fb:b1:c4:fb:a1:4f:
                    f4:31:70:f9:44:34:77:ff:3c:e9:57:98:ea:8f:ef:
                    7b:06:a3:90:9c:08:78:fe:bb:e2:88:b4:3b:42:99:
                    66:4c:c5:5f:91:32:ad:e7:70:2b:34:b6:8a:ad:8f:
                    cf:8f:94:af:3f:c5:2a:ad:6a:0b:55:75:60:23:e3:
                    d7:5f:95:29:0b:11:e2:36:12:27:1b:49:d1:ec:ad:
                    82:90:fc:80:87:22:24:3c:e1:7e:a9:12:23:1d:df:
                    26:ab:dc:bd:d4:18:2a:2d:a0:ab:f4:eb:62:6f:00:
                    81:59:f0:3a:d1:de:b8:4d:76:46:ad:69:8f:28:02:
                    0c:73:90:33:1a:74:73:c2:5a:5e:14:e4:2c:6c:d5:
                    81:c5:ab:c9:b8:5e:17:7a:94:39:a8:4c:fc:e4:0a:
                    36:60:01:99:0a:8b:b0:b9:60:ed:73:07:cf:29:36:
                    6f:29:1b:c9:af:ca:5c:a5:0e:e9:9f:a3:c5:1f:5c:
                    b6:33:9d:1a:77:75:e8:39:81:e9:b2:5f:fb:d7:df:
                    20:a0:1d:bc:f8:49:44:01:b1:e7:ca:48:84:dc:bf:
                    93:80:72:3e:c9:18:c8:e9:44:4f:ea:c2:66:16:db:
                    45:c9:53:1f:e1:28:2c:ab:dd:52:cf:fb:54:00:32:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:78:20:0C:DC:88:B6:66:8B:AE:99:35:B2:90:D7:38:87:CB:7C:92
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:10:b5:57:92:bf:36:e9:84:f5:d0:d6:66:0d:96:e4:82:45:
         40:09:7f:99:60:0c:8b:ef:c2:20:40:9b:f6:cd:07:3d:5d:91:
         69:2d:ff:be:6c:6c:10:0e:38:cb:e9:4f:69:5e:1b:a8:03:59:
         61:24:7d:23:31:9c:36:ee:b7:43:91:7e:b1:a2:11:2a:55:ee:
         cf:ab:87:e6:0b:84:2b:c0:24:3b:d8:ea:b4:f5:b8:e0:d0:10:
         8f:54:28:77:ab:63:a5:80:e6:2b:36:60:0f:8b:f8:fa:58:74:
         52:69:86:14:95:11:2a:6c:0a:7e:b3:22:dc:9e:e5:0d:f9:1c:
         3a:b2:bd:fc:1e:9e:6e:83:cc:c7:c9:3a:0e:59:18:11:bc:ef:
         9e:ae:e9:62:41:0a:75:90:9c:c7:54:71:69:bf:50:1b:b3:72:
         43:e3:20:12:26:2b:43:3b:85:46:5d:70:10:5a:fd:bf:d7:c9:
         23:ae:9a:5d:ad:34:6f:69:12:0b:23:d7:bb:d1:94:d3:86:c0:
         97:54:99:68:7f:a8:91:f8:7f:15:bf:1b:2a:30:0d:7a:2f:ca:
         dc:62:07:fd:97:8d:3d:3a:fd:fe:6b:7d:a5:bc:fc:34:44:e5:
         a2:69:e6:43:0d:47:b2:a0:20:5d:ba:32:88:3e:e8:80:29:98:
         d5:48:91:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:51 2025 by rpki-client