Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          IdN6iu0xOrwWWT9bB7Fap8XzkqPPMut4JtJZN6nzAL0=
Subject key identifier:   30:68:63:70:73:5F:63:7F:EA:B3:3F:A2:AE:61:CA:98:C9:34:2E:85
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       019961D9D255CB8318A64B1B66C3F288D410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          09B6
Signing time:             Fri 19 Sep 2025 12:01:29 +0000
Manifest this update:     Fri 19 Sep 2025 12:01:29 +0000
Manifest next update:     Sat 20 Sep 2025 12:01:29 +0000
Files and hashes:         1: Iy0rHic_3PT8I4SllQOcj0rP21I.roa (hash: 1k4b/DPKi2PAqgzyxoLR8dS4rCq9uyypxDCl+6BFsrg=)
                          2: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: 1qiAdKdVfQXqSeX9zwZyhn6K09OclwA0OVOCTh7bqDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:d9:d2:55:cb:83:18:a6:4b:1b:66:c3:f2:88:d4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: Sep 19 12:01:29 2025 GMT
            Not After : Sep 20 12:01:29 2025 GMT
        Subject: CN=30686370735f637feab33fa2ae61ca98c9342e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:fc:1c:9d:fa:f6:40:0c:c0:c0:f0:de:60:
                    0f:1c:13:4b:ca:5a:86:ce:45:19:3b:61:97:32:e3:
                    dd:5e:7a:13:47:46:82:6a:53:e4:8e:8e:2d:f8:aa:
                    cd:c7:5d:ef:9f:8c:73:66:d8:a7:b5:7c:d2:90:71:
                    c5:6c:d7:a3:3a:7d:65:31:b8:54:04:fc:8b:68:a0:
                    d8:18:4d:a7:5a:cb:84:c6:05:c3:38:55:76:62:b3:
                    af:ff:65:df:b4:af:08:2b:25:58:d5:67:b2:d0:77:
                    5c:78:91:a9:11:3a:3d:dd:0b:8e:09:28:99:3b:9b:
                    16:b0:fd:03:26:cf:12:20:8f:0a:0e:ac:b7:93:87:
                    a9:e2:85:db:eb:23:e6:1b:e6:a2:a3:e1:be:7a:e8:
                    32:67:24:2e:f0:01:40:2a:18:96:cd:27:db:31:9a:
                    9d:b7:73:08:b9:6e:58:e9:80:54:de:4b:86:b5:ea:
                    6b:66:d5:0a:27:c1:88:67:f8:18:54:02:55:1a:50:
                    ac:c2:8f:61:d7:9b:32:7e:8f:ad:22:9e:d7:a2:19:
                    d8:ad:ea:19:f0:16:b4:67:be:3b:cc:9c:90:cb:b6:
                    63:da:af:e0:a5:ed:09:94:48:90:e7:9a:2d:03:f8:
                    85:cc:86:61:95:02:0f:85:3b:8e:34:75:44:64:73:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:63:70:73:5F:63:7F:EA:B3:3F:A2:AE:61:CA:98:C9:34:2E:85
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:d8:83:c3:a6:70:ff:5a:b4:d9:a1:2a:2f:ef:d5:0d:7e:
         3e:d8:9e:f9:dd:a3:c8:0a:eb:e7:99:9c:09:45:b6:e5:5c:98:
         e7:97:0c:3b:f0:4e:79:76:5a:43:63:bd:9b:74:3f:af:a0:04:
         ce:1e:5b:2a:0f:85:23:68:fe:f5:3c:43:86:5a:eb:9e:c9:9b:
         b5:dc:f1:1a:07:04:45:53:db:56:9a:a4:4c:3f:d1:b2:0e:66:
         29:a4:ed:a7:9f:5e:d7:ac:47:e7:e0:37:49:52:23:a1:b4:e8:
         74:ad:ef:77:4c:26:92:ca:6a:af:30:32:1c:b1:27:d8:2c:da:
         f9:47:51:44:ad:7b:14:76:be:cc:14:42:2f:e1:b9:21:7c:9e:
         13:54:f8:7b:35:81:d9:a1:8e:3a:1a:bd:90:e1:1a:0c:0e:8e:
         1c:5c:73:a7:05:be:a7:29:d2:4b:7c:d2:0c:9a:80:19:95:1d:
         ff:cd:aa:ec:dd:b5:fe:7e:57:b8:ee:1c:83:64:20:ea:43:72:
         ab:cd:6e:aa:32:f8:d7:05:39:14:90:28:39:c6:36:e9:40:d9:
         2d:12:6b:ab:22:6c:b4:82:f0:bc:a4:65:53:d9:17:e7:14:43:
         26:ba:b5:fb:56:9a:be:91:72:22:00:5c:5a:3e:46:5b:cd:87:
         0f:85:c4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlh2dJVy4MYpksbZsPyiNQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjQ3YTcyNWM3NjhkNGRlNzhmYjMxYmI0MGZlMTZlYmEx
OWYyMGQwHhcNMjUwOTE5MTIwMTI5WhcNMjUwOTIwMTIwMTI5WjAzMTEwLwYDVQQD
EygzMDY4NjM3MDczNWY2MzdmZWFiMzNmYTJhZTYxY2E5OGM5MzQyZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbb8HJ369kAMwMDw3mAPHBNLylqG
zkUZO2GXMuPdXnoTR0aCalPkjo4t+KrNx13vn4xzZtintXzSkHHFbNejOn1lMbhU
BPyLaKDYGE2nWsuExgXDOFV2YrOv/2XftK8IKyVY1Wey0HdceJGpETo93QuOCSiZ
O5sWsP0DJs8SII8KDqy3k4ep4oXb6yPmG+aio+G+eugyZyQu8AFAKhiWzSfbMZqd
t3MIuW5Y6YBU3kuGteprZtUKJ8GIZ/gYVAJVGlCswo9h15syfo+tIp7XohnYreoZ
8Ba0Z747zJyQy7Zj2q/gpe0JlEiQ55otA/iFzIZhlQIPhTuONHVEZHOJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBoY3BzX2N/6rM/oq5hypjJNC6FMB8GA1UdIwQY
MBaAFFP0enJcdo1N54+zG7QP4W66GfINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMt
NTc0NzEzODQ1ZGJjLzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMtNTc0NzEzODQ1ZGJj
LzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq/Yg8Om
cP9atNmhKi/v1Q1+Ptie+d2jyArr55mcCUW25VyY55cMO/BOeXZaQ2O9m3Q/r6AE
zh5bKg+FI2j+9TxDhlrrnsmbtdzxGgcERVPbVpqkTD/Rsg5mKaTtp59e16xH5+A3
SVIjobTodK3vd0wmkspqrzAyHLEn2Cza+UdRRK17FHa+zBRCL+G5IXyeE1T4ezWB
2aGOOhq9kOEaDA6OHFxzpwW+pynSS3zSDJqAGZUd/82q7N21/n5XuO4cg2Qg6kNy
q81uqjL41wU5FJAoOcY26UDZLRJrqyJstILwvKRlU9kX5xRDJrq1+1aavpFyIgBc
Wj5GW82HD4XEpg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 15:12:28 2025 by rpki-client