Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
File:                     C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft (raw, json)
Hash identifier:          1KYrKVakXGYSSFFNJ5OQUh7Z6qT7BurvzvdK9BwUp2Q=
Subject key identifier:   94:6E:1A:F1:8C:EF:B9:FF:7E:55:A4:3A:38:8D:5D:23:92:25:B0:42
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Certificate issuer:       /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial:       019A71B7798C49F45455A8399B973A8A6443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
Manifest number:          08D0
Signing time:             Tue 11 Nov 2025 07:00:40 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:40 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:40 +0000
Files and hashes:         1: C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl (hash: XdOh3EOwlqAEDsQLzroV2nENdBbPhQ3rtE0UZ9rQhD0=)
                          2: TivLjo1FQOCYPys-6PXg0sxsbgk.roa (hash: cOyTOfhMRVGrlkCzBgDz7G/M7TZAET9d2rVBDG9vbos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:79:8c:49:f4:54:55:a8:39:9b:97:3a:8a:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
        Validity
            Not Before: Nov 11 07:00:40 2025 GMT
            Not After : Nov 12 07:00:40 2025 GMT
        Subject: CN=946e1af18cefb9ff7e55a43a388d5d239225b042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:03:4b:f3:43:be:9a:84:23:9e:f4:ae:b1:
                    58:cd:b4:3d:38:85:b2:5b:54:df:46:06:44:65:57:
                    06:ce:d3:5e:53:0f:d5:3d:85:ef:73:bb:60:e0:9d:
                    de:47:1a:60:58:29:30:6d:be:95:7d:54:aa:60:7b:
                    2b:47:f9:4e:b0:bb:87:3b:90:33:fb:d7:f3:ed:b3:
                    b0:22:a0:16:dd:7c:d5:79:2e:d6:fb:2c:4a:2b:7f:
                    b1:49:b6:9e:cb:49:a6:dc:9e:1b:e3:6f:c5:4c:32:
                    f1:fa:d5:b0:32:a8:dd:b4:ed:30:de:c3:0e:0e:5a:
                    6b:90:d1:32:b1:99:39:b2:08:38:47:5a:6e:8a:4c:
                    cf:cd:1f:79:b7:6c:3d:55:51:c1:77:f5:fb:bc:96:
                    de:7b:60:e9:36:e1:6b:21:15:ee:7a:21:4f:03:33:
                    0e:de:21:a5:d0:2d:9e:cd:41:0f:94:4b:e3:cb:e0:
                    bb:d0:23:be:3d:4a:09:78:f2:b5:65:5a:81:3f:7e:
                    79:cd:ba:ce:64:14:c9:0e:76:dd:53:4e:27:e2:55:
                    be:ac:d6:18:00:6a:4f:14:16:3f:79:f0:94:48:5e:
                    32:de:66:6c:74:ac:9f:d3:62:b5:1e:34:e3:ca:47:
                    ad:20:6d:a4:b7:3e:97:04:46:b9:3f:f4:21:ab:79:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:1A:F1:8C:EF:B9:FF:7E:55:A4:3A:38:8D:5D:23:92:25:B0:42
            X509v3 Authority Key Identifier:
                keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:c5:4d:b6:73:f6:df:7c:70:46:15:32:03:1a:71:0a:a9:
         88:02:b7:84:05:56:d4:dd:04:d2:e1:a4:e1:0e:f4:2e:44:b1:
         a4:c9:46:9f:e0:b4:9b:8e:49:a8:e8:91:39:ff:15:42:b8:de:
         74:6c:e1:5e:06:e6:e3:0d:33:2e:66:f2:09:19:8a:2c:b8:04:
         3c:a5:ee:14:4a:c9:98:e5:2b:c5:40:b0:63:d8:08:02:8f:61:
         09:17:f8:93:5c:1a:1e:7c:7e:bf:08:35:40:9d:bb:19:d9:81:
         57:bc:16:04:36:55:8a:49:c3:93:b8:16:46:25:0f:72:08:f0:
         d4:a6:58:61:02:a0:e6:fc:e4:30:7a:5f:e9:40:8c:d5:e5:2c:
         41:56:ff:34:86:96:b1:66:e8:85:27:4f:c5:7d:6f:64:26:4f:
         6f:d3:30:65:f8:31:00:f5:55:2e:49:a7:05:d9:26:e6:0d:80:
         20:91:5b:aa:43:d1:74:20:e2:82:2b:10:37:40:83:9e:9f:cb:
         0a:82:46:a1:57:2b:b0:e9:59:72:e8:df:61:fc:11:d2:36:62:
         8e:67:35:d2:72:87:d2:fe:fa:f2:65:03:90:b7:27:57:dd:4c:
         48:0a:80:a5:46:eb:28:35:1f:e7:9b:50:20:81:bc:4b:85:89:
         0e:0a:c0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3mMSfRUVag5m5c6imRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWJmYjY3YTA5NzUzODRlZmI4YjdiN2NhODA3ZjcxNGY3
NWY4NGEwHhcNMjUxMTExMDcwMDQwWhcNMjUxMTEyMDcwMDQwWjAzMTEwLwYDVQQD
Eyg5NDZlMWFmMThjZWZiOWZmN2U1NWE0M2EzODhkNWQyMzkyMjViMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiQDS/NDvpqEI570rrFYzbQ9OIWy
W1TfRgZEZVcGztNeUw/VPYXvc7tg4J3eRxpgWCkwbb6VfVSqYHsrR/lOsLuHO5Az
+9fz7bOwIqAW3XzVeS7W+yxKK3+xSbaey0mm3J4b42/FTDLx+tWwMqjdtO0w3sMO
DlprkNEysZk5sgg4R1puikzPzR95t2w9VVHBd/X7vJbee2DpNuFrIRXueiFPAzMO
3iGl0C2ezUEPlEvjy+C70CO+PUoJePK1ZVqBP355zbrOZBTJDnbdU04n4lW+rNYY
AGpPFBY/efCUSF4y3mZsdKyf02K1HjTjyketIG2ktz6XBEa5P/Qhq3miawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRuGvGM77n/flWkOjiNXSOSJbBCMB8GA1UdIwQY
MBaAFAur+2egl1OE77i3t8qAf3FPdfhKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2Ut
YjRlNWNhZDBkYzUyLzEvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2UtYjRlNWNhZDBkYzUy
LzEvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrbFTbZz
9t98cEYVMgMacQqpiAK3hAVW1N0E0uGk4Q70LkSxpMlGn+C0m45JqOiROf8VQrje
dGzhXgbm4w0zLmbyCRmKLLgEPKXuFErJmOUrxUCwY9gIAo9hCRf4k1waHnx+vwg1
QJ27GdmBV7wWBDZViknDk7gWRiUPcgjw1KZYYQKg5vzkMHpf6UCM1eUsQVb/NIaW
sWbohSdPxX1vZCZPb9MwZfgxAPVVLkmnBdkm5g2AIJFbqkPRdCDigisQN0CDnp/L
CoJGoVcrsOlZcujfYfwR0jZijmc10nKH0v768mUDkLcnV91MSAqApUbrKDUf55tQ
IIG8S4WJDgrA+A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:15 2025 by rpki-client