
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          VxO8BhZ0dj92spyq/HTh+/bR15xryk6hXuuNP8a1gWY=
Subject key identifier:   48:7C:E5:37:3B:BE:90:72:33:79:78:DC:68:1B:F8:13:C5:75:5F:CD
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019A4D73C976658420B80B648E69EF888510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          1727
Signing time:             Tue 04 Nov 2025 06:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:25 +0000
Files and hashes:         1: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          2: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          3: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: 0cW7Jz29BLrk/1Uekl4TeLWJVEJgq3rfRJhkYkQ0bkM=)
                          4: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          5: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          6: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          7: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          8: VpUO8FztHwErwqX-N9UX_EYZh7A.roa (hash: KoW1E0hQQXw+2PHPNCjmoEVjfKo8T8cI7h2RXMqdk48=)
                          9: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          10: fjtFOz4IlAaEAQnySY7OoN_tT9k.roa (hash: +Sr0IAWH0Sl8SJhZIIslWSKF0Gz1QtZzH2BHIKdnR6Y=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:25 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:c9:76:65:84:20:b8:0b:64:8e:69:ef:88:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Nov  4 06:00:25 2025 GMT
            Not After : Nov  5 06:00:25 2025 GMT
        Subject: CN=487ce5373bbe9072337978dc681bf813c5755fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:97:14:1a:d4:2f:3f:7b:63:67:09:93:b3:
                    07:89:87:15:e0:36:ce:23:41:91:5b:b5:7c:e3:fe:
                    8c:c4:22:6c:cf:af:2b:61:9e:b8:1c:36:39:3c:5d:
                    69:5f:f4:01:6b:b2:d8:e1:e3:79:67:3a:bd:ca:18:
                    f8:18:9a:73:30:52:3c:e5:b0:e0:dc:78:29:b4:c4:
                    fd:81:d2:1f:d8:8d:d7:56:91:2a:87:fd:49:e0:73:
                    de:23:f7:a4:9c:67:7d:57:44:85:fc:13:6c:60:78:
                    a0:b9:0a:85:3f:6e:b6:64:08:00:f6:40:59:5b:89:
                    eb:c8:80:31:cb:b2:7a:c3:b9:4d:2c:d1:d5:cb:7a:
                    f0:0b:46:0d:f2:cc:80:d7:31:12:ff:e7:45:37:62:
                    d6:88:b8:d5:25:61:31:78:1e:86:11:fc:7f:2b:54:
                    44:a0:f6:4e:90:35:35:99:0f:2d:45:72:e8:a4:3e:
                    4f:c6:4e:81:71:96:7f:4a:8e:c0:40:b2:14:ad:c8:
                    01:7b:8a:17:bd:bf:4f:93:46:a5:cc:f2:ec:84:b9:
                    99:68:51:25:c6:bb:93:03:94:bb:a2:f2:1a:69:4c:
                    8a:ee:34:48:ba:ff:f5:b1:8d:f5:0f:e6:4b:61:82:
                    4e:e7:4e:12:74:35:9a:96:5a:63:ea:7f:d9:2f:98:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:E5:37:3B:BE:90:72:33:79:78:DC:68:1B:F8:13:C5:75:5F:CD
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         37:b9:82:2a:31:d2:bd:31:61:ec:7d:f7:dc:f6:65:f9:cd:ba:
         b1:2c:93:05:20:25:76:2b:91:f8:bf:1b:54:52:e1:7f:55:2b:
         52:bd:26:f2:ef:96:17:bc:1c:b9:f6:09:a0:cb:41:03:3d:aa:
         4e:70:b8:b3:0e:70:50:dc:e5:d2:2b:70:69:05:e8:4d:37:8f:
         90:a2:ef:f1:3e:fd:a3:02:c5:96:a9:22:7c:b0:d1:69:4c:c9:
         b9:58:16:94:67:8b:aa:c3:e9:61:7e:24:3b:eb:1a:2a:7a:b6:
         a4:c9:96:05:a0:a9:29:96:31:ef:26:f1:01:7e:bf:63:a8:b8:
         df:9c:47:36:07:9c:d3:84:00:cf:cf:3c:18:21:8b:a9:8a:f9:
         c1:05:9c:cc:c6:43:4c:65:00:81:0e:2b:83:f6:fd:2b:d9:0d:
         39:51:39:4b:37:f3:e8:28:a2:b2:14:81:db:58:d6:10:19:1a:
         c0:75:a3:01:34:35:3c:af:ad:76:6e:ca:a2:96:73:00:df:cd:
         f3:c0:1c:49:cd:17:fd:cb:85:9c:fa:db:fa:f2:93:33:28:e2:
         42:0a:21:68:de:b5:0e:41:9b:c8:f3:fb:7f:48:a0:5d:a4:dc:
         2a:29:d7:f0:e4:b2:11:39:ba:80:73:1f:f1:5b:6d:39:b1:82:
         65:63:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:02:44 2025 by rpki-client