Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
File:                     6WTScFqbJv1IKpwQ6Sbq572kHps.mft (raw, json)
Hash identifier:          khH95RFSt8kPqzxGVA03hN9Xn6VmQzqSLLVMuSBZ5zs=
Subject key identifier:   7F:FA:06:F3:C8:C0:B6:F2:75:67:43:98:EB:7B:A0:5E:62:8A:BB:F1
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Certificate issuer:       /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial:       019A7149BA74E9FF2A5CF136EC90307EC9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
Manifest number:          0E28
Signing time:             Tue 11 Nov 2025 05:00:48 +0000
Manifest this update:     Tue 11 Nov 2025 05:00:48 +0000
Manifest next update:     Wed 12 Nov 2025 05:00:48 +0000
Files and hashes:         1: 6WTScFqbJv1IKpwQ6Sbq572kHps.crl (hash: yrtexst0Eplijmq71OcmcUXXPg1+LKtmMvuL/JT5l1I=)
                          2: qE5CKR1beI5QzGXctw8hwUZF3kQ.roa (hash: GJQ9ToPtMxv6IDjV2YJ/S2be8eseM+f65LcvwP6vzp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:49:ba:74:e9:ff:2a:5c:f1:36:ec:90:30:7e:c9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
        Validity
            Not Before: Nov 11 05:00:48 2025 GMT
            Not After : Nov 12 05:00:48 2025 GMT
        Subject: CN=7ffa06f3c8c0b6f275674398eb7ba05e628abbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:80:a7:a7:5b:d7:51:a2:ce:5e:24:ec:4e:
                    b8:c9:66:c2:80:38:79:b6:12:f0:2f:70:ec:aa:c5:
                    fe:b7:03:7b:b2:76:03:d7:50:97:4b:6b:9a:b3:3f:
                    79:b4:64:36:0e:ac:f1:ee:22:0c:7c:3f:7b:27:b5:
                    8b:aa:17:2b:02:28:2f:29:49:bf:1d:af:dd:2f:67:
                    35:40:2d:52:71:c2:13:69:63:da:e5:c1:77:81:12:
                    81:c8:10:99:83:ab:a0:61:fe:21:da:ae:41:cf:38:
                    ed:4c:a2:7a:ac:ae:62:53:03:3a:8a:71:4f:5a:8c:
                    78:ca:04:9d:59:da:d2:ac:d3:87:fa:79:cf:59:2d:
                    ba:75:35:0d:52:06:02:43:f1:47:ec:e4:5a:2b:05:
                    39:74:25:4e:5a:6b:a2:3b:74:a6:6c:e3:8d:0c:a0:
                    ab:3f:86:b5:e9:c3:79:ca:f5:dc:97:33:72:f2:90:
                    3a:74:fe:8f:d8:94:b2:5c:eb:73:71:0c:f0:83:a5:
                    06:df:73:fe:a4:6d:ed:eb:ac:cc:4b:37:5d:f0:56:
                    c2:a8:64:f2:89:bc:0f:78:63:43:e9:f2:5d:91:8d:
                    53:49:71:97:5b:58:1d:a3:f9:16:34:3c:e2:2f:7e:
                    a8:a9:ae:c2:e9:d6:0a:cf:50:df:8a:8e:a0:9a:f1:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FA:06:F3:C8:C0:B6:F2:75:67:43:98:EB:7B:A0:5E:62:8A:BB:F1
            X509v3 Authority Key Identifier:
                keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:97:ae:50:53:f2:d0:a0:8e:71:f9:3a:a8:1f:cf:19:0b:
         f9:6a:02:7c:93:06:04:01:f3:37:e2:2e:1b:4a:27:f3:1b:dc:
         a3:1a:1e:71:bb:f2:bb:21:ab:fa:a5:09:b1:eb:20:cd:cd:49:
         98:52:e4:ad:98:0f:21:79:0a:af:92:f0:76:7c:54:2d:68:5d:
         20:db:9a:88:5f:f6:7e:85:5e:6b:bd:73:a7:af:c2:cc:af:5b:
         96:9a:a3:9d:c8:71:6a:50:98:fd:cc:0e:38:79:44:45:62:ad:
         68:93:a2:c6:ee:bf:ef:55:02:9c:db:21:3b:c0:70:91:4d:cc:
         87:43:d1:64:69:0e:6d:9e:e2:12:b6:2e:3c:18:89:cc:59:60:
         28:59:aa:58:83:89:f8:30:bb:e1:0e:8b:12:48:25:ae:06:53:
         b6:a4:88:9a:1c:98:b3:eb:bc:7e:db:e3:ec:8b:f7:af:c8:f3:
         17:7b:83:34:3d:59:98:c4:95:fb:cf:de:8a:9f:e5:58:1a:7b:
         12:f4:ba:fb:91:6d:71:ad:4d:6b:11:e9:6a:9c:24:e9:60:1d:
         cc:5b:1f:e1:20:f4:c4:58:b8:5f:1c:23:9b:f1:fa:a6:0a:0a:
         00:02:d7:db:6c:c8:04:1d:97:bb:8c:49:e5:ce:60:78:89:1b:
         82:f1:6e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSbp06f8qXPE27JAwfsmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NjRkMjcwNWE5YjI2ZmQ0ODJhOWMxMGU5MjZlYWU3YmRh
NDFlOWIwHhcNMjUxMTExMDUwMDQ4WhcNMjUxMTEyMDUwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZmZhMDZmM2M4YzBiNmYyNzU2NzQzOThlYjdiYTA1ZTYyOGFiYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFGAp6db11Gizl4k7E64yWbCgDh5
thLwL3DsqsX+twN7snYD11CXS2uasz95tGQ2Dqzx7iIMfD97J7WLqhcrAigvKUm/
Ha/dL2c1QC1SccITaWPa5cF3gRKByBCZg6ugYf4h2q5BzzjtTKJ6rK5iUwM6inFP
Wox4ygSdWdrSrNOH+nnPWS26dTUNUgYCQ/FH7ORaKwU5dCVOWmuiO3SmbOONDKCr
P4a16cN5yvXclzNy8pA6dP6P2JSyXOtzcQzwg6UG33P+pG3t66zMSzdd8FbCqGTy
ibwPeGND6fJdkY1TSXGXW1gdo/kWNDziL36oqa7C6dYKz1Dfio6gmvECYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/6BvPIwLbydWdDmOt7oF5iirvxMB8GA1UdIwQY
MBaAFOlk0nBamyb9SCqcEOkm6ue9pB6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2Mt
ZjRlMzYxZTRkYTJkLzEvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2MtZjRlMzYxZTRkYTJk
LzEvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMmXrlBT
8tCgjnH5OqgfzxkL+WoCfJMGBAHzN+IuG0on8xvcoxoecbvyuyGr+qUJsesgzc1J
mFLkrZgPIXkKr5LwdnxULWhdINuaiF/2foVea71zp6/CzK9blpqjnchxalCY/cwO
OHlERWKtaJOixu6/71UCnNshO8BwkU3Mh0PRZGkObZ7iErYuPBiJzFlgKFmqWIOJ
+DC74Q6LEkglrgZTtqSImhyYs+u8ftvj7Iv3r8jzF3uDND1ZmMSV+8/eip/lWBp7
EvS6+5Ftca1NaxHpapwk6WAdzFsf4SD0xFi4Xxwjm/H6pgoKAALX22zIBB2Xu4xJ
5c5geIkbgvFuGg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:22 2025 by rpki-client