Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
File:                     6eWwFOVpGG-4SiAklUzMyckbHj8.mft (raw, json)
Hash identifier:          tX2CnJcWj27hn8eaOi4GqbVEhOzwweleMG64wBfcgHY=
Subject key identifier:   85:88:E6:C5:25:2A:08:09:24:A2:36:CE:2A:48:A7:AB:E6:D4:40:68
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       019A1F1AD3BC67C6EEA0A234E1E3A9EB910A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
Manifest number:          170E
Signing time:             Sun 26 Oct 2025 06:00:43 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:43 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:43 +0000
Files and hashes:         1: 6eWwFOVpGG-4SiAklUzMyckbHj8.crl (hash: RIHkofQeSXgvVGm/anLxMCSdcm8rdDp+6b83QzJO79I=)
                          2: GqtAv_BuXbRPjKshxEHFb5Itkl0.roa (hash: zAxwEZuaHnGoxmpgPLKEa104VZbVYpZ2zpmLUtAi86U=)
                          3: IljESqcp7TKATE6l4ji1F86mvCw.roa (hash: laXPoIjJO3FRK8WP6Gx6U9UQM88anXeR9CUYfdnLKCM=)
                          4: OAvO94RPxpfjbpElzF3WC3cYyd8.roa (hash: qNMDfnWjPw8LtLYzmMD++L6T1Klk5i6kY22iXg/Gb4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:d3:bc:67:c6:ee:a0:a2:34:e1:e3:a9:eb:91:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: Oct 26 06:00:43 2025 GMT
            Not After : Oct 27 06:00:43 2025 GMT
        Subject: CN=8588e6c5252a080924a236ce2a48a7abe6d44068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:ea:91:a3:79:02:33:ef:e6:fe:31:0a:af:
                    e3:53:ae:a3:fa:36:0c:92:4b:60:a5:c9:a7:81:f3:
                    6d:99:0f:ae:83:16:7d:69:4e:87:46:cf:c1:48:dd:
                    8a:a0:5a:a1:cb:eb:9f:c3:c3:88:85:83:c3:1f:c0:
                    76:eb:22:f6:f4:97:1b:9e:07:22:eb:a6:19:a4:49:
                    04:68:33:47:c6:b0:a4:d9:c1:53:36:f4:05:bd:2b:
                    68:93:35:e7:d8:d5:51:1a:74:9b:25:f4:e6:f8:97:
                    e0:ea:a2:60:28:c5:96:1f:72:26:d8:b8:7e:81:fc:
                    a5:40:ed:a6:5b:00:96:8a:c4:79:61:21:98:a0:84:
                    05:cc:c9:5d:ec:eb:6e:10:bf:76:26:8c:dc:4b:27:
                    ca:21:0d:bd:f0:bd:bd:f4:2f:3e:5d:4b:88:7e:a7:
                    7b:4a:bf:f8:3e:a1:3a:8c:5a:d0:83:58:54:4c:b3:
                    7e:6a:72:58:2a:76:46:37:86:3b:22:59:af:b3:f5:
                    74:5c:f7:0f:b6:3b:26:56:25:89:ae:69:d8:4d:a8:
                    7f:d2:82:5f:54:6b:99:0d:a5:ca:63:7e:15:f4:fc:
                    9f:9a:a2:8b:3e:7c:19:9f:04:0c:08:40:dd:df:c3:
                    da:4b:d4:ce:d0:98:54:38:df:dc:08:2b:ef:27:86:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:E6:C5:25:2A:08:09:24:A2:36:CE:2A:48:A7:AB:E6:D4:40:68
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:56:91:c6:37:b5:a1:ee:2a:b1:d0:8c:94:11:27:71:2c:
         c0:20:6e:6b:17:16:ad:58:81:04:ca:83:c9:15:cb:24:5e:bb:
         f2:e1:b4:15:d0:cb:aa:c1:a0:27:25:e6:60:07:b6:e3:4a:ac:
         31:16:a7:46:e2:d9:a0:c3:5e:ab:d1:9b:3d:15:16:b2:30:84:
         e9:e5:70:89:e2:e1:29:a9:24:11:2d:0a:cd:59:c4:0e:d7:87:
         15:b9:12:99:48:8d:d9:1f:0c:de:fb:cd:d6:2c:c8:21:d9:7e:
         a1:53:d9:02:36:c6:16:54:6e:99:26:d5:cd:7d:ba:47:8e:28:
         50:54:e1:86:26:05:1f:c0:04:5c:19:ac:bd:c0:37:17:d8:1d:
         95:c5:4b:99:da:2b:02:5b:b1:eb:49:29:88:91:6c:8d:e1:ba:
         63:88:1f:c9:98:e5:33:30:ea:fe:0a:be:22:c1:95:5e:5f:27:
         8b:2a:46:e1:dd:9d:9a:ef:18:59:42:dc:22:43:a2:32:7b:9f:
         f1:7a:86:fe:ec:64:3b:81:20:65:28:1d:18:40:7a:f3:40:de:
         de:35:b0:ba:d2:e9:a6:f6:0d:cb:48:24:8c:30:da:6a:9d:b7:
         dd:e7:87:a4:99:2b:0e:d4:6c:c2:16:fb:16:ed:f8:fe:cb:a1:
         73:f3:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:30:21 2025 by rpki-client