Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          I7rIPSqmo4/8TIREYTYFvyKMCDTJYc2PM0US6hYs0O8=
Subject key identifier:   B6:70:7D:C8:DD:12:7C:CD:B9:C7:B3:7F:B2:DE:DC:02:8D:6B:C9:21
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019A24AF061635447A1C4C3D638F7388EC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          16F7
Signing time:             Mon 27 Oct 2025 08:00:41 +0000
Manifest this update:     Mon 27 Oct 2025 08:00:41 +0000
Manifest next update:     Tue 28 Oct 2025 08:00:41 +0000
Files and hashes:         1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: kuOeQEPsPL048PWqHJcwwHoc+6H95U5yD30cVebBtaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:af:06:16:35:44:7a:1c:4c:3d:63:8f:73:88:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Oct 27 08:00:41 2025 GMT
            Not After : Oct 28 08:00:41 2025 GMT
        Subject: CN=b6707dc8dd127ccdb9c7b37fb2dedc028d6bc921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:a4:0b:6c:64:58:fe:d7:ef:ad:90:05:75:
                    a2:02:94:ad:76:ac:d9:65:b2:e2:73:1e:4a:e5:d5:
                    8f:95:e3:ee:83:11:82:99:fe:72:22:cd:14:9f:06:
                    38:89:46:04:74:19:72:9b:04:37:a3:2a:03:81:c8:
                    e0:6b:82:f2:1d:2f:e2:4d:de:12:66:c0:49:89:0c:
                    20:55:84:ca:75:e8:6c:7c:bd:9c:3d:b3:30:ca:a3:
                    cd:f7:97:1f:e3:a1:0a:2a:78:49:b4:6a:39:de:44:
                    d4:be:bc:a4:f6:aa:e6:c4:76:a5:f7:19:46:65:6f:
                    10:02:a9:d4:19:f0:5f:12:a1:6a:30:35:99:7b:6d:
                    43:94:9f:0a:a2:b5:41:6f:d8:31:5d:7e:dd:de:cb:
                    2f:d9:9b:0f:43:c5:8f:8a:b6:5c:ee:f1:e9:52:d5:
                    b7:9a:0a:52:90:62:94:3d:d4:0f:5b:90:da:37:94:
                    db:98:73:e2:ed:9c:38:29:1d:71:42:7c:05:4a:a5:
                    00:be:29:dc:c9:39:30:21:7d:c9:fc:e2:a7:9f:43:
                    ad:ab:81:37:a7:25:52:46:c9:41:5a:6a:bc:02:a0:
                    c0:b4:07:7a:6e:43:62:7e:8e:a7:dc:79:f4:32:5c:
                    ce:50:8b:e6:d3:e1:ea:04:44:b3:3a:f6:db:9d:53:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:7D:C8:DD:12:7C:CD:B9:C7:B3:7F:B2:DE:DC:02:8D:6B:C9:21
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:6c:dc:ed:aa:c7:45:1b:4b:59:ba:78:e7:e8:58:f2:3c:
         d2:6e:42:bb:81:52:45:bd:24:31:e1:ba:26:1c:65:67:f2:a0:
         78:e2:b9:8d:fb:13:7f:74:bb:12:fc:21:05:d0:40:23:03:9a:
         62:38:55:8a:14:34:44:76:0b:8f:61:1e:2d:5e:a5:30:d7:89:
         8a:0c:ad:ee:b4:59:ad:15:a0:7d:9c:6c:e8:ce:1e:fd:df:aa:
         b1:31:f4:34:fd:fd:23:a0:31:1e:0d:00:e5:ce:d7:22:68:1e:
         e7:71:37:29:27:28:c1:52:70:a4:a7:da:50:00:c6:88:4c:a3:
         bc:c2:ba:ef:86:d7:e5:14:89:34:5b:d4:63:85:bd:57:95:86:
         c5:86:67:ce:63:e9:82:9e:0b:53:15:1e:11:02:e1:da:f4:ea:
         48:dc:57:f6:60:b7:57:a5:7f:67:fb:1d:2e:68:8b:03:60:65:
         6c:25:c9:2d:f7:5f:4a:cb:3f:cf:0d:9a:2b:b2:7d:f7:a6:33:
         e4:46:72:f1:05:fe:1b:98:44:da:74:08:82:ed:67:06:a7:08:
         18:1f:9d:39:fb:f4:86:59:0a:20:e2:08:95:7e:1a:bd:79:a5:
         38:17:b7:3b:bb:5e:e4:d5:7b:dc:7b:1b:7f:43:e3:25:fc:fc:
         44:0a:89:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrwYWNUR6HEw9Y49ziOyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw
N2Y4YzIwHhcNMjUxMDI3MDgwMDQxWhcNMjUxMDI4MDgwMDQxWjAzMTEwLwYDVQQD
EyhiNjcwN2RjOGRkMTI3Y2NkYjljN2IzN2ZiMmRlZGMwMjhkNmJjOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTykC2xkWP7X762QBXWiApStdqzZ
ZbLicx5K5dWPlePugxGCmf5yIs0UnwY4iUYEdBlymwQ3oyoDgcjga4LyHS/iTd4S
ZsBJiQwgVYTKdehsfL2cPbMwyqPN95cf46EKKnhJtGo53kTUvryk9qrmxHal9xlG
ZW8QAqnUGfBfEqFqMDWZe21DlJ8KorVBb9gxXX7d3ssv2ZsPQ8WPirZc7vHpUtW3
mgpSkGKUPdQPW5DaN5TbmHPi7Zw4KR1xQnwFSqUAvincyTkwIX3J/OKnn0Otq4E3
pyVSRslBWmq8AqDAtAd6bkNifo6n3Hn0MlzOUIvm0+HqBESzOvbbnVN0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZwfcjdEnzNucezf7Le3AKNa8khMB8GA1UdIwQY
MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt
YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm
LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFORs3O2q
x0UbS1m6eOfoWPI80m5Cu4FSRb0kMeG6JhxlZ/KgeOK5jfsTf3S7EvwhBdBAIwOa
YjhVihQ0RHYLj2EeLV6lMNeJigyt7rRZrRWgfZxs6M4e/d+qsTH0NP39I6AxHg0A
5c7XImge53E3KScowVJwpKfaUADGiEyjvMK674bX5RSJNFvUY4W9V5WGxYZnzmPp
gp4LUxUeEQLh2vTqSNxX9mC3V6V/Z/sdLmiLA2BlbCXJLfdfSss/zw2aK7J996Yz
5EZy8QX+G5hE2nQIgu1nBqcIGB+dOfv0hlkKIOIIlX4avXmlOBe3O7te5NV73Hsb
f0PjJfz8RAqJQg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:36 2025 by rpki-client