Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          LMIj8yS3rLs6uGOgR0WiMlRxXxyg6hujuAn1yDPMaKY=
Subject key identifier:   78:4C:96:76:4E:E4:4B:BE:81:45:FC:03:C0:25:79:F4:94:96:47:39
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019A24E5A6A6487EECFB8539823C3B8D5639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          1703
Signing time:             Mon 27 Oct 2025 09:00:21 +0000
Manifest this update:     Mon 27 Oct 2025 09:00:21 +0000
Manifest next update:     Tue 28 Oct 2025 09:00:21 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          4: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          5: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          6: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: e6EfnhDfmHFalczg+Porcs+2YQARevOZ+HlnLVARYB0=)
                          7: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:e5:a6:a6:48:7e:ec:fb:85:39:82:3c:3b:8d:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Oct 27 09:00:21 2025 GMT
            Not After : Oct 28 09:00:21 2025 GMT
        Subject: CN=784c96764ee44bbe8145fc03c02579f494964739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:b2:fa:76:73:be:d6:6d:2c:03:f7:6b:51:
                    0a:00:73:35:96:46:f7:f0:dd:61:0a:d6:c2:9a:08:
                    02:72:8c:a2:32:39:fc:bf:2e:64:42:83:dc:60:a4:
                    0b:6e:7c:00:ec:3b:c4:41:fa:07:3f:1c:1f:2a:de:
                    84:01:17:c1:1a:50:e6:cc:b7:77:e9:d2:6f:d6:a4:
                    32:9b:5d:f0:ba:87:d3:22:0b:f9:54:76:6f:ac:b0:
                    15:d1:d2:ff:cd:1d:24:82:ba:89:6e:28:ec:6f:c6:
                    22:af:90:04:34:40:22:e9:89:ae:d4:1d:79:f9:8e:
                    3c:68:a6:92:42:08:4a:ad:60:dc:26:01:1b:4c:b6:
                    50:4f:90:2a:48:2c:d7:94:02:6c:b8:2e:1a:37:61:
                    ee:54:32:0d:af:8b:e6:4d:6d:5c:b0:67:1e:25:41:
                    b9:a9:27:07:a7:76:37:66:c3:cd:dc:c0:90:62:31:
                    77:3c:c4:db:43:d8:5d:1a:08:2c:d1:07:39:1a:82:
                    fa:92:c4:1a:9e:e9:92:09:02:c9:ab:b8:ec:d3:03:
                    ca:f3:b6:08:ae:02:83:fb:4c:08:df:0a:3c:1f:5c:
                    23:5a:43:92:b9:84:50:9e:02:0d:28:6b:4a:ae:21:
                    b8:27:72:97:f7:e9:a6:27:0d:3e:9e:bd:12:5d:60:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:96:76:4E:E4:4B:BE:81:45:FC:03:C0:25:79:F4:94:96:47:39
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:b5:4c:65:32:2e:92:c6:e4:4a:d6:ad:f6:d4:dc:dd:2a:
         86:f5:c4:7a:d0:2e:46:20:07:fe:0f:d9:f6:2a:98:69:7f:c9:
         6d:db:86:54:69:3d:f2:91:3f:8e:d2:e2:4b:fd:c8:9b:12:61:
         86:39:b2:ff:a3:49:e0:ab:e5:f3:d0:d7:f1:12:62:e3:12:9b:
         01:73:ce:ad:94:0e:67:53:eb:03:9f:03:79:cf:36:cd:b8:26:
         12:71:d6:84:ce:d0:1a:58:8a:c5:c2:f5:91:a7:07:8b:d9:32:
         62:e4:72:ec:2e:a2:60:03:fc:e1:46:b2:b0:da:b6:fc:1a:e4:
         99:2f:4e:24:ce:2d:b0:80:4d:2b:67:dd:4a:ac:27:6f:cb:0d:
         ae:d5:de:97:c8:98:bb:e2:c2:0b:fd:57:11:92:14:15:5b:d9:
         fb:f0:fe:09:8e:fc:91:80:8e:45:5e:11:57:d3:87:1c:85:ce:
         2e:fb:60:9a:a6:b4:e2:df:74:3f:9b:97:09:7b:ef:7c:03:d8:
         de:83:a3:9e:5f:8c:5a:ab:5e:73:ff:2c:41:b7:21:f0:54:96:
         d3:27:3a:17:7a:59:33:7d:1a:0a:5e:6b:3f:ff:15:9c:c1:ef:
         f7:13:c1:69:b8:53:f3:54:a5:72:dd:58:71:6b:1b:d4:2d:23:
         03:f6:df:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5aamSH7s+4U5gjw7jVY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjUxMDI3MDkwMDIxWhcNMjUxMDI4MDkwMDIxWjAzMTEwLwYDVQQD
Eyg3ODRjOTY3NjRlZTQ0YmJlODE0NWZjMDNjMDI1NzlmNDk0OTY0NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoyy+nZzvtZtLAP3a1EKAHM1lkb3
8N1hCtbCmggCcoyiMjn8vy5kQoPcYKQLbnwA7DvEQfoHPxwfKt6EARfBGlDmzLd3
6dJv1qQym13wuofTIgv5VHZvrLAV0dL/zR0kgrqJbijsb8Yir5AENEAi6Ymu1B15
+Y48aKaSQghKrWDcJgEbTLZQT5AqSCzXlAJsuC4aN2HuVDINr4vmTW1csGceJUG5
qScHp3Y3ZsPN3MCQYjF3PMTbQ9hdGggs0Qc5GoL6ksQanumSCQLJq7js0wPK87YI
rgKD+0wI3wo8H1wjWkOSuYRQngINKGtKriG4J3KX9+mmJw0+nr0SXWATaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhMlnZO5Eu+gUX8A8AlefSUlkc5MB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO721TGUy
LpLG5ErWrfbU3N0qhvXEetAuRiAH/g/Z9iqYaX/JbduGVGk98pE/jtLiS/3ImxJh
hjmy/6NJ4Kvl89DX8RJi4xKbAXPOrZQOZ1PrA58Dec82zbgmEnHWhM7QGliKxcL1
kacHi9kyYuRy7C6iYAP84UaysNq2/BrkmS9OJM4tsIBNK2fdSqwnb8sNrtXel8iY
u+LCC/1XEZIUFVvZ+/D+CY78kYCORV4RV9OHHIXOLvtgmqa04t90P5uXCXvvfAPY
3oOjnl+MWqtec/8sQbch8FSW0yc6F3pZM30aCl5rP/8VnMHv9xPBabhT81Slct1Y
cWsb1C0jA/bfHw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:34:34 2025 by rpki-client