Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          vmfhi6Jh8DkSbuLN3K6As6nI63j2m3XnzEGxCUslR2Y=
Subject key identifier:   90:E8:E9:F7:FD:13:9F:EC:2A:6E:A0:43:DE:1C:02:A1:96:12:28:2B
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019A71EED471E15D389A3BE2475AD53F7FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          171E
Signing time:             Tue 11 Nov 2025 08:01:08 +0000
Manifest this update:     Tue 11 Nov 2025 08:01:08 +0000
Manifest next update:     Wed 12 Nov 2025 08:01:08 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: SDFMd0YgT5IdDMk40TA9FbaqqKYxroYkeoe3bSwjLlQ=)
                          2: EmhpSnj7iLgC2d70P5qJqnThSpI.roa (hash: CX+fHnUOAwNmcRoAT7+5woe0kC9yhVErQMUO/t7HIGw=)
                          3: G5KEY8PdolTgfVn5492nGIzQ_a0.roa (hash: 76KL/k0StmhsymXof8zQcgzmSlTCz8pQoee6lM9qOu4=)
                          4: VtgYimUcjc2XeGilZ2hUu6vRmiU.roa (hash: +YSUo5c/6CRbW0eW7UeYX8AGd5VxClS9jGWd6D5ZdZY=)
                          5: go_3y1bgA8-3JogrkPCJfivjGfI.roa (hash: sD0zwjqxa6jKAzdmYzjIQYsG/miMaGsajOJ2iWvOUZg=)
                          6: xD2UD_5NoLtd0VK4LndF2pETSBk.roa (hash: VjvfcStj2ykMEo8Ecd88j1JXnEvqtzpee6oBEje6v9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:d4:71:e1:5d:38:9a:3b:e2:47:5a:d5:3f:7f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Nov 11 08:01:08 2025 GMT
            Not After : Nov 12 08:01:08 2025 GMT
        Subject: CN=90e8e9f7fd139fec2a6ea043de1c02a19612282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:46:42:e6:73:9f:13:80:1b:79:bc:46:df:
                    03:b3:c5:c2:58:cc:07:76:42:2b:25:fb:00:e3:17:
                    fe:36:2a:ce:15:c1:50:5f:3f:2e:9e:b6:20:6c:e7:
                    aa:6d:07:0e:6e:ea:28:f5:16:ef:38:3f:da:59:f2:
                    33:07:44:35:61:76:e9:5c:20:49:91:4e:91:9d:86:
                    46:52:97:cb:c6:36:22:55:3b:ba:89:09:b0:49:06:
                    8c:ac:47:4a:31:91:45:18:1d:9d:a8:36:53:b7:a2:
                    ed:84:1d:67:c0:d7:20:20:02:2b:0c:fd:25:84:52:
                    3f:3c:c0:f2:7d:4d:26:8f:2b:5c:a2:d9:cd:48:c0:
                    eb:6b:d0:f7:fa:39:d4:4e:c7:b6:ef:ed:09:f6:98:
                    79:08:24:89:90:38:81:76:07:92:b6:94:2d:1b:3c:
                    2c:0d:d8:a1:ee:d7:9a:5b:fd:35:e9:23:16:87:cb:
                    b7:e8:12:1c:8b:fa:5f:b6:bf:c0:6c:10:e0:f4:62:
                    d2:9f:bb:c8:81:b7:7b:90:3f:4c:79:06:57:0a:dd:
                    c6:15:3b:ad:b3:45:86:c7:c8:1f:a9:c2:d8:a7:ee:
                    c9:8b:e7:eb:27:98:95:1a:fc:2b:21:02:f9:83:33:
                    6a:2e:a5:10:bf:05:c3:27:8e:56:08:8c:6b:18:98:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E8:E9:F7:FD:13:9F:EC:2A:6E:A0:43:DE:1C:02:A1:96:12:28:2B
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:a4:08:e8:7f:2e:22:90:df:4d:cc:67:8e:d6:6e:81:bc:
         71:a5:8d:d9:51:2a:f0:49:36:34:99:d5:06:c1:50:87:3d:90:
         80:1a:e3:b3:3a:d7:6d:bf:65:51:95:ca:b3:a6:6d:5c:e1:df:
         8f:1a:3c:83:28:2c:3c:66:0e:9a:32:e9:94:b2:25:92:f9:22:
         a9:5f:8b:cc:8c:8a:e4:58:bf:5f:71:2f:93:c3:77:84:80:3b:
         0f:e8:9f:c7:8e:dc:24:b0:32:7f:57:fc:2a:dc:64:13:e5:4f:
         2e:ab:2e:47:20:cb:f1:fe:3d:b8:61:c3:3c:da:bc:5a:ad:73:
         06:4f:d6:21:3a:63:00:77:55:5a:cd:2e:82:1f:9f:75:d7:95:
         d8:e7:02:47:31:76:aa:c5:f7:b3:1a:d0:8d:84:63:f2:7a:a6:
         db:72:95:9c:35:5b:00:2f:81:c8:5e:d1:73:20:4f:c4:5d:b2:
         56:63:50:0d:b8:0c:52:4b:93:52:8c:7f:88:47:2c:1a:2f:94:
         63:ed:c2:6f:d3:e7:bb:33:c5:45:cb:61:e0:9f:81:f8:00:97:
         20:ba:cb:50:34:37:a1:f9:ba:f2:26:cd:a0:71:d4:64:48:88:
         3d:16:62:c5:8d:a2:98:72:89:a6:3c:aa:3c:97:ea:82:3e:2f:
         97:44:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client