Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          ANJ3Ffq3Vkcc4DF/MxplvABe73/V2cYFe82CZP1EkME=
Subject key identifier:   D4:C7:35:1B:33:07:78:FF:D8:4A:0F:B2:D6:40:B9:15:54:F7:46:06
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019A06DB731007F2C376B78304F82DF3E5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          16F3
Signing time:             Tue 21 Oct 2025 13:00:36 +0000
Manifest this update:     Tue 21 Oct 2025 13:00:36 +0000
Manifest next update:     Wed 22 Oct 2025 13:00:36 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: ZWNY0DDIJf80BiaVqzuhOa7qnQN6rA9IO0/5Sz1n0kc=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:db:73:10:07:f2:c3:76:b7:83:04:f8:2d:f3:e5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Oct 21 13:00:36 2025 GMT
            Not After : Oct 22 13:00:36 2025 GMT
        Subject: CN=d4c7351b330778ffd84a0fb2d640b91554f74606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:b2:78:e7:cb:38:ba:9c:56:1c:8a:1e:3c:
                    fe:02:87:9f:ad:85:90:68:f9:03:58:2f:f2:17:86:
                    60:12:90:73:0b:72:b2:b9:a1:e1:4f:28:d4:68:fa:
                    ef:d9:2d:e6:45:e5:8a:ef:d4:f3:cc:7d:a3:7f:7c:
                    e7:f9:6e:e4:3b:98:13:cf:53:97:2b:f0:46:c9:e8:
                    7e:f9:58:12:d4:e2:1b:eb:59:dc:6e:c3:78:0e:e7:
                    c4:da:2b:ff:dc:88:f9:8b:6c:2e:54:cc:16:e8:ee:
                    36:71:8b:92:73:68:d4:ad:85:d2:e1:89:af:fe:00:
                    ac:6d:1e:97:1f:7e:d6:d7:17:27:9d:21:fe:f5:21:
                    c2:ac:5b:b6:a9:36:df:15:e7:c7:c7:f1:3c:3b:65:
                    87:0b:97:aa:f8:64:04:e3:dd:06:24:ab:99:2c:cc:
                    c3:5a:be:96:4a:45:ae:91:7a:64:d6:74:2e:bc:bb:
                    06:d8:6e:4c:3f:a1:3d:29:4d:e9:3d:e9:ca:0b:84:
                    b6:59:22:80:a9:5b:63:56:70:b5:c0:c4:3e:63:fc:
                    2d:c2:5a:ef:80:28:85:fe:ec:7b:b4:48:ab:f4:65:
                    b4:0a:ac:fd:70:f9:7d:b8:c4:8c:aa:72:ba:e7:52:
                    a6:fd:f3:04:60:20:87:10:97:27:25:f0:d8:25:a0:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C7:35:1B:33:07:78:FF:D8:4A:0F:B2:D6:40:B9:15:54:F7:46:06
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:56:e1:5c:30:09:cd:b7:5c:f9:f1:e7:6c:fd:42:34:80:
         85:92:f9:28:f1:7a:56:5d:1c:b4:c4:c4:c3:e2:c3:9a:a0:b4:
         98:13:4e:f7:65:03:7d:5b:85:9a:b2:30:53:13:3b:a7:f9:0e:
         e2:89:9b:03:4e:5c:b1:d8:a0:af:57:5c:3f:81:3a:2c:22:65:
         70:3a:6f:02:d7:de:bf:fd:47:48:00:91:14:c0:0e:24:70:8e:
         10:dc:66:d1:98:0c:2c:2b:ac:84:bc:4d:2b:99:d0:6b:8e:86:
         ed:1d:fa:20:f5:8f:97:c2:2f:6d:6f:65:04:7e:94:06:56:af:
         ec:5e:f0:9d:98:3a:fd:a8:6b:4e:6f:ba:33:ba:d5:6d:2f:08:
         b6:54:8e:d7:5b:11:35:78:3f:bd:15:00:66:79:8e:5c:2c:49:
         6f:a0:bb:ae:35:b8:0e:41:79:05:d1:d0:25:f6:82:a9:da:9a:
         97:f5:4d:8c:ab:84:ed:b5:f5:4e:50:17:01:16:d4:41:b5:7e:
         ca:12:33:e2:04:11:e0:94:d9:9d:a6:cf:93:d4:37:17:30:16:
         70:39:85:b1:17:2d:bc:fd:e1:de:cb:53:93:8c:38:9a:3a:37:
         77:69:76:2a:96:af:31:7d:b2:9b:30:d3:34:42:60:07:9f:de:
         dd:31:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:28:38 2025 by rpki-client