Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          kwYH15IPIPuVoUzNICO46g8LknX9Ja9Sr1A7DH/Iwa4=
Subject key identifier:   DB:C8:F4:6A:43:1F:16:65:39:AD:67:AD:04:4C:4B:62:A0:05:40:C3
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019961D8D2EF3BB7DAD024F517282EB1216F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          16AC
Signing time:             Fri 19 Sep 2025 12:00:23 +0000
Manifest this update:     Fri 19 Sep 2025 12:00:23 +0000
Manifest next update:     Sat 20 Sep 2025 12:00:23 +0000
Files and hashes:         1: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          2: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          3: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: 5h5YV/E+AOeHZkgT+huejv/z9rVtcmEE+1cYQ/h2bDw=)
                          4: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          5: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          6: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          7: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          8: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          9: fjtFOz4IlAaEAQnySY7OoN_tT9k.roa (hash: +Sr0IAWH0Sl8SJhZIIslWSKF0Gz1QtZzH2BHIKdnR6Y=)
                          10: fxLVOtxbdEZY_Ccn6zMREPPjZRE.roa (hash: M+/2IpBj+tzWJPCLsoNsEgw9yALeS53u+bYWq4zQbpg=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:d8:d2:ef:3b:b7:da:d0:24:f5:17:28:2e:b1:21:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Sep 19 12:00:23 2025 GMT
            Not After : Sep 20 12:00:23 2025 GMT
        Subject: CN=dbc8f46a431f166539ad67ad044c4b62a00540c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:fe:49:26:5c:7c:72:2c:f5:08:c4:61:22:
                    03:48:4a:66:5d:55:df:d7:7d:90:19:53:da:64:78:
                    d3:ab:70:d7:ee:25:5c:af:18:d4:a9:d0:ac:d6:a9:
                    6b:21:d9:71:d3:50:af:f0:56:ba:e6:66:44:c5:e4:
                    8b:3d:d2:6f:54:b5:3c:38:8f:b7:cb:f9:68:24:01:
                    da:71:4f:b8:34:2b:c7:30:44:1d:e3:81:e4:32:cd:
                    cd:5a:0e:4d:be:cb:7b:e2:33:e7:a2:00:b6:09:58:
                    0f:30:31:f5:06:b6:88:4c:ee:8b:de:7c:a3:ea:5c:
                    b5:6d:a6:31:6f:e8:dd:33:f2:3d:0a:6d:d4:1d:4f:
                    7a:4f:cf:9a:4c:34:f1:56:3c:45:da:0d:12:e4:19:
                    52:b8:2d:26:fb:f7:68:44:1a:b0:db:5c:79:87:1e:
                    bb:0c:2d:fd:45:05:fd:c6:48:3d:86:a3:58:50:3e:
                    aa:77:31:42:6e:ac:8e:e7:21:e4:55:df:53:9b:45:
                    4b:ff:2d:49:7a:e7:d0:2c:cf:bd:42:e9:db:d7:e5:
                    90:0c:8e:ba:e9:45:13:4e:d2:b0:ef:0c:3b:33:09:
                    f4:49:d8:22:1a:6b:4d:39:9b:78:19:3b:69:2a:66:
                    29:4f:0f:a0:27:13:b2:89:d6:85:49:af:51:d2:e2:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C8:F4:6A:43:1F:16:65:39:AD:67:AD:04:4C:4B:62:A0:05:40:C3
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:45:8e:02:ec:9a:84:b9:bc:9c:a6:40:59:51:6b:b7:ed:
         da:f8:44:cb:a0:94:44:7a:b0:4e:8a:dd:5b:6d:cc:ee:94:19:
         4b:33:c1:48:ec:a9:04:a4:c1:c4:a9:93:67:fe:d6:c1:47:92:
         44:5d:bd:89:72:f3:d0:a0:3b:58:68:89:be:02:76:68:fb:f6:
         6a:27:69:f7:92:bf:c8:8b:76:74:55:a3:7c:e9:4b:25:d1:8e:
         3e:a1:6c:5b:6e:1c:dd:65:d5:70:3c:17:24:18:30:bd:48:59:
         5e:f2:c9:3b:84:7b:35:26:cb:ae:24:e5:91:f6:02:ae:53:87:
         b9:c6:18:e7:85:e7:1b:b1:7b:14:19:35:42:75:d2:50:ab:cb:
         42:5c:76:f8:40:90:61:16:a9:85:2c:42:fa:d9:ba:08:80:06:
         f4:a8:80:5b:89:1c:16:77:59:ad:25:3b:00:98:f9:c9:e0:77:
         2d:93:2b:11:eb:d6:bb:30:8d:0e:5e:e2:4f:4f:91:3b:ae:40:
         7d:ff:d2:03:99:91:e9:e9:30:98:e8:21:f0:86:91:21:89:2f:
         cd:c5:09:f4:fc:91:68:0c:24:67:68:ce:89:69:86:d1:d5:29:
         a3:e0:dd:9b:23:ca:59:7f:59:53:60:95:d6:d8:b4:15:fa:36:
         ee:2b:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:42:30 2025 by rpki-client