Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          rVVmay3U9A73TeWTUYTEuYbMTOy0txR4BfJ3kCNF5+M=
Subject key identifier:   4D:DA:A0:91:06:20:B9:9C:D6:D9:4E:98:1B:53:4F:78:CC:CF:1D:11
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019A21AE160B13DE02CC3663D1EC3552F4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          1716
Signing time:             Sun 26 Oct 2025 18:00:48 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:48 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:48 +0000
Files and hashes:         1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=)
                          2: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=)
                          3: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: f/F5R8BbwZFn7KX+ioRm6lf1XOx1fPwvr6qRcFeI2tU=)
                          4: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=)
                          5: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=)
                          6: RPNVta1i_68ETzE6TtaaOFHYjFg.roa (hash: FJ6/94/8Wm2f6M9BRBCD4vKtrBrwPPP4N1wQnShAIwQ=)
                          7: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
                          8: aZPp_cV5jr5aukOafXhVZHLOxO8.roa (hash: HiVo5n2AfzX/D2YKvojUG77iVNrUKo2LAmIGlr0XbVQ=)
                          9: goiFRwOZl4s-9eBS6-ty9Aa39xg.roa (hash: v1XADcYkOBOq2ag0EAvzsyypI+irjQ9kDOaWYQtUUzg=)
                          10: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=)
                          11: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=)
                          12: kpBZgUoI5SVEvkUD2itySup6KcI.roa (hash: XeEaX76YfLu7oqRet3KoyuM4S4TCuYJpZv/8fGXU5lk=)
                          13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=)
                          14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=)
                          15: xqrG1-afUyLJs-76v_kaVff1bzQ.roa (hash: qv2oTeJPi+2iZxHlxw+NMd9cTjH6NJtDH3DW5nEIJZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:16:0b:13:de:02:cc:36:63:d1:ec:35:52:f4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Oct 26 18:00:48 2025 GMT
            Not After : Oct 27 18:00:48 2025 GMT
        Subject: CN=4ddaa0910620b99cd6d94e981b534f78cccf1d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:3b:af:cd:c4:ca:28:5e:5a:31:00:b4:11:
                    61:6d:b0:88:06:62:a4:f5:19:56:2a:50:bf:87:b1:
                    50:b7:45:3c:c4:62:ba:c7:cd:76:a3:91:89:ae:1c:
                    01:1b:32:b7:d1:bd:54:57:6d:9b:44:7f:65:a6:f3:
                    ab:46:0c:28:f0:39:54:8a:37:a0:1e:51:0a:2d:74:
                    64:79:cf:be:c9:c9:25:1a:88:cb:c8:74:0d:31:f3:
                    f7:b8:86:c1:27:47:6b:71:10:0c:05:55:8f:e3:59:
                    1a:76:ba:b6:7e:b6:29:80:4a:06:74:49:01:a1:d4:
                    98:53:ed:c1:fc:85:b1:c6:fb:6b:31:c2:30:ce:cc:
                    43:69:dd:6b:06:be:6f:d9:14:db:5f:14:c1:41:fe:
                    95:46:cf:4f:9b:62:4d:7d:1c:13:80:c5:c2:89:04:
                    9a:de:e8:c0:9f:9b:8f:e1:26:77:8c:ce:9b:5e:8e:
                    46:83:73:91:a9:1e:2f:4c:63:f4:40:29:92:d2:44:
                    77:3f:97:b6:43:98:77:42:dc:7e:1d:2e:08:d8:be:
                    00:07:7b:fd:a5:45:8e:dd:f0:f0:2a:5e:fd:16:73:
                    1a:97:70:23:8e:d1:ad:93:d0:2c:ff:52:33:00:e0:
                    83:5c:48:67:ec:c9:92:3b:a9:27:ad:b9:d1:94:e9:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:A0:91:06:20:B9:9C:D6:D9:4E:98:1B:53:4F:78:CC:CF:1D:11
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:e8:2c:da:32:c6:c0:0b:90:d5:58:52:a5:29:a5:cb:46:
         2c:f6:44:97:e9:43:df:15:71:31:63:bb:09:48:33:80:c8:af:
         b3:75:f1:20:13:a6:4f:52:4b:34:24:ab:3f:1a:87:cc:64:c9:
         8a:6a:36:99:15:28:eb:91:0f:f8:6b:09:b6:79:78:3d:4c:80:
         94:bf:5c:77:55:cd:cd:3d:95:cd:69:db:10:bf:75:62:96:9c:
         16:5b:13:1e:b0:92:ee:56:ca:57:12:3f:7f:74:79:c5:f1:ca:
         a0:96:ae:07:de:78:24:fd:45:08:b8:aa:06:59:cb:6e:10:6b:
         a3:5d:3d:8b:5e:c7:4a:5a:00:36:7f:a3:38:d6:62:d1:a0:95:
         48:4e:ea:39:1a:cb:7f:b5:32:b8:21:4c:01:f1:70:ef:ef:0d:
         2f:15:5b:59:cf:c9:c7:b8:fe:94:13:04:7b:48:cd:f1:5d:9e:
         88:85:1f:3a:0b:2e:6d:15:23:a2:20:77:23:12:ee:62:5d:90:
         e1:f1:32:36:a6:ac:97:6e:88:46:cc:1f:84:14:2f:10:35:1e:
         e5:ea:a7:9c:1a:85:8b:74:d7:f6:41:02:be:f7:95:4e:fa:5a:
         a1:75:5b:b7:14:53:cf:cd:18:ac:ed:e8:be:67:78:7e:2e:03:
         b7:da:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:23 2025 by rpki-client