Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File:                     R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier:          tMIm+tbu8ns7yFQ9tnI0a2CSirjgnwf+XzoIGn1TXNg=
Subject key identifier:   BC:9F:E8:34:4D:10:56:5D:DA:5A:76:7A:90:53:6E:B0:EC:D9:25:F6
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer:       /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial:       019A4C98517D4EBA4164E13BF325C8E2C52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 02:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:41 +0000
Files and hashes:         1: HVMp3VvTMqSiiMvK8ekyUscXHKE.roa (hash: 5bZY9H0pxJFOXf0QcKTcd4xctzA8L1dqR59jUwC+mbk=)
                          2: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
                          3: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: pI6rXFMyhkkKNXP0nFkS8GME/nNVO+sowK5MOUHwKrc=)
                          4: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
                          5: YColBce1P8QV6dzwd3BQxfb0bW8.roa (hash: Y+U0uh0d0L8YbI91riCmE6Asc9FINzw4Y3Ujz9SWSEY=)
                          6: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:51:7d:4e:ba:41:64:e1:3b:f3:25:c8:e2:c5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
        Validity
            Not Before: Nov  4 02:00:41 2025 GMT
            Not After : Nov  5 02:00:41 2025 GMT
        Subject: CN=bc9fe8344d10565dda5a767a90536eb0ecd925f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:9d:88:95:c6:92:da:2a:83:98:65:46:dd:
                    77:2d:e6:23:6e:cd:22:54:4c:08:2f:9e:9d:2b:72:
                    6a:9e:b7:75:2e:45:dc:22:f9:c6:1f:7d:3e:98:a1:
                    41:a3:5e:2e:30:30:bb:ec:18:bd:c6:b2:83:a6:5e:
                    aa:a1:25:b3:7c:89:38:f4:68:9d:0f:59:9f:2e:21:
                    21:70:d1:99:2f:73:76:3d:8d:96:b7:b4:e2:53:1b:
                    86:03:2d:23:ef:11:76:3b:d2:1e:87:b1:e9:d7:8e:
                    da:29:45:75:ab:bf:cc:6a:b4:62:16:4c:d5:68:ac:
                    28:99:a0:1a:3f:6f:e4:22:df:ae:54:b5:56:cd:88:
                    2a:f3:45:99:f0:8b:b4:72:f7:5b:9b:a4:c6:8c:79:
                    85:f8:51:e6:20:4e:e1:8b:d1:ca:56:53:b4:e9:94:
                    18:17:2e:63:b1:d3:c2:14:3f:9d:2c:1c:b4:ec:a1:
                    bd:a6:5f:1e:2c:db:5b:6b:b3:4c:1d:38:a9:4d:27:
                    a6:72:ee:a3:38:6a:e2:08:92:c4:66:7e:ff:79:fa:
                    0c:67:60:9a:91:f6:5a:0b:a8:7e:25:24:c6:1b:d5:
                    44:33:36:0f:ed:79:25:d3:ef:40:a0:ea:27:5e:f4:
                    bf:38:18:dd:ad:0d:4f:ca:a5:49:f8:7f:8c:82:03:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:E8:34:4D:10:56:5D:DA:5A:76:7A:90:53:6E:B0:EC:D9:25:F6
            X509v3 Authority Key Identifier:
                keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:ab:8e:73:23:73:31:a0:c1:3f:45:12:35:56:51:53:5c:
         fd:02:57:d1:82:f0:8a:20:3f:43:ae:00:4f:1f:53:4b:bb:30:
         c2:02:93:2c:4b:d3:60:07:8f:e0:fb:ab:62:03:2b:f4:16:3d:
         19:4d:77:04:bc:3c:87:28:38:b5:8b:27:c8:2b:43:d5:43:d9:
         9e:4c:61:86:c3:39:c1:c1:97:f3:5d:d3:cc:c4:9d:da:96:23:
         44:73:23:5e:29:c1:20:50:fd:54:70:a9:1c:83:51:61:5a:b3:
         cb:53:ee:a3:c0:56:f3:ad:99:46:16:02:f5:b7:98:32:52:6f:
         4f:58:82:31:76:a6:44:c1:91:53:af:8b:b0:ff:d8:67:47:e3:
         7b:aa:8c:48:3f:50:0c:d3:8f:b1:4a:43:97:2f:ed:21:10:6f:
         a5:ce:98:0a:e7:df:17:c2:4c:d2:26:62:3f:1d:45:d9:2b:1a:
         37:52:c9:13:53:b2:6a:47:13:d3:3a:dd:06:fd:63:6e:49:57:
         38:40:7e:c4:54:c8:03:d5:16:5b:76:46:cd:0b:be:74:a4:5d:
         d7:a7:93:0a:b1:43:d7:65:c9:20:98:1e:24:49:e9:59:43:5c:
         69:aa:a5:1f:38:c7:57:91:31:43:dc:83:24:25:66:1c:fd:6a:
         af:4e:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:23:38 2025 by rpki-client