Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
File:                     6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft (raw, json)
Hash identifier:          QWY9t6+ahsvCCE9MMKVD9eSr5b7bhRcfZ478XOcVJIw=
Subject key identifier:   BE:11:A5:A4:B8:67:A2:8E:8E:CC:00:3A:A0:55:70:44:E3:27:D7:BF
Authority key identifier: EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
Certificate issuer:       /CN=eadf80048d2032ec224364a773fe81d23fa914e0
Certificate serial:       019A72265C86050C071EFC660FBA768ABCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
Manifest number:          171D
Signing time:             Tue 11 Nov 2025 09:01:47 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:47 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:47 +0000
Files and hashes:         1: 4SEG_Ka9SsxVgfqJ8rFxskdB8YM.roa (hash: miw1wyF1xISaDKZpbc8ZdU1Lhb432CZTgpXO4KMVEZA=)
                          2: 6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl (hash: JOXWcFjrDdwqIY7R8LGreQGWEPsv4qtfBmrg94N9P1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:5c:86:05:0c:07:1e:fc:66:0f:ba:76:8a:bc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eadf80048d2032ec224364a773fe81d23fa914e0
        Validity
            Not Before: Nov 11 09:01:47 2025 GMT
            Not After : Nov 12 09:01:47 2025 GMT
        Subject: CN=be11a5a4b867a28e8ecc003aa0557044e327d7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:26:e5:e6:97:cc:f9:4b:45:f8:2d:4f:a1:
                    e1:35:97:68:d1:08:23:58:de:32:b3:8f:b5:81:83:
                    d3:c3:4b:e3:3e:e1:ee:47:72:fb:33:ae:5f:0a:43:
                    90:fc:63:0b:81:aa:0b:9a:c1:22:22:6b:f9:5b:a2:
                    8d:dc:b9:47:8a:10:f8:d3:36:72:0d:ae:84:ff:c7:
                    76:3d:1d:61:5f:34:fa:fe:6c:d0:a1:db:e8:9f:d3:
                    0b:1a:1c:e8:6a:62:2c:13:af:39:4f:e6:51:8a:1c:
                    f1:20:15:cd:f0:a9:2e:7d:a2:e1:52:00:28:ed:ce:
                    69:32:56:f1:a7:99:f1:26:9a:06:76:99:d6:76:85:
                    3b:75:98:95:b2:bd:3f:3d:22:ad:24:93:6b:69:82:
                    46:7b:4a:0f:e7:4c:1c:fb:2c:fb:c4:8a:45:6f:0f:
                    8f:90:fd:70:8f:f1:84:64:d8:a4:18:a6:ef:43:8d:
                    0f:08:9b:b3:dd:31:cb:64:f2:3c:1d:66:7e:d3:6e:
                    a7:c6:53:e9:c2:c1:f6:db:05:24:66:05:18:2d:50:
                    09:eb:af:15:e8:bc:61:6d:cb:25:0e:be:4d:b5:75:
                    9d:ae:8a:a5:a8:4a:8f:32:94:6a:d8:62:3f:1f:f7:
                    bd:08:25:3a:da:2d:f2:c5:7b:e7:dd:62:b9:64:e2:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:A5:A4:B8:67:A2:8E:8E:CC:00:3A:A0:55:70:44:E3:27:D7:BF
            X509v3 Authority Key Identifier:
                keyid:EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:90:ce:77:1c:f7:f9:ae:e3:d7:c3:0b:fa:89:c8:0d:97:
         8c:45:70:6b:38:14:cd:96:ec:fe:d6:a3:d8:95:d4:f2:c1:0f:
         01:0c:e9:9c:e1:02:4a:97:03:e0:57:42:78:d8:42:c7:7c:fe:
         37:ac:6c:bc:61:db:07:dc:d9:7a:e3:42:64:93:94:21:60:df:
         d8:1e:af:bb:d5:8d:c5:da:34:74:06:10:c8:b1:61:23:27:29:
         91:a5:8d:56:77:57:e9:0b:ea:0f:be:67:8c:b2:b0:20:51:61:
         12:df:2b:b4:3a:4a:a2:27:22:f3:b4:5d:ed:30:df:43:6e:97:
         cd:d3:3d:50:75:fd:42:8d:e3:ee:ca:f2:e6:87:d6:bc:52:30:
         b4:c7:c1:cf:c3:76:73:49:14:b6:eb:91:00:bc:3f:bb:ae:44:
         8e:91:f0:88:26:fd:1b:05:db:ff:05:2c:bf:75:79:9b:19:9d:
         8e:2b:cc:98:8e:29:c1:65:4f:8d:d1:bd:c5:5e:a1:2c:13:3a:
         56:8c:14:c5:0c:ea:a2:b0:57:1c:e3:0d:78:f9:4a:b3:8f:0d:
         a7:6f:8e:12:b5:9b:83:6e:b6:fe:6f:e1:2a:d1:c3:ca:0a:9f:
         55:12:6d:a5:ce:a1:e0:e3:95:ec:7b:fe:20:56:ec:18:96:4a:
         66:fc:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:00 2025 by rpki-client