Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          bC5GI9P2qplneUcHCjCAeh+cCq9ZSarVfZErn57c0+c=
Subject key identifier:   B4:B5:67:A1:89:A4:DD:47:71:63:01:D2:E4:53:5E:D7:C2:B1:E8:38
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       019A2553E8D9DD4CEA1A5487D19AD4891DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          16FB
Signing time:             Mon 27 Oct 2025 11:00:47 +0000
Manifest this update:     Mon 27 Oct 2025 11:00:47 +0000
Manifest next update:     Tue 28 Oct 2025 11:00:47 +0000
Files and hashes:         1: 2NXfzQOX2yzR_1PZmnB4_Blj3Qs.roa (hash: Ak/GG6l8wter3UNq3QplQdRhCDB/vDLztI0yd4qCSKk=)
                          2: 53KqbajJkABxQADjbHVlPygTcKc.roa (hash: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=)
                          3: 5UkoSBgwT2Qf3aFassiPq3Vf9Jg.roa (hash: t3qUJPhi+Poc2aWmH2JZX3lQ8LuDxwy2KrfiHtXlPiA=)
                          4: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: GYH4CtmIl47cxkg/LAULxqKVbQhfmdGYS699Ay83nIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:53:e8:d9:dd:4c:ea:1a:54:87:d1:9a:d4:89:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: Oct 27 11:00:47 2025 GMT
            Not After : Oct 28 11:00:47 2025 GMT
        Subject: CN=b4b567a189a4dd47716301d2e4535ed7c2b1e838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:05:05:47:f1:cb:a2:a9:8d:18:8e:39:37:
                    df:f1:58:4d:bf:56:cd:94:ca:81:7e:80:fa:22:6f:
                    09:a5:ca:14:1c:57:0d:df:5a:7d:7d:70:6b:c8:77:
                    7c:3d:4d:fc:72:44:95:5e:75:0d:1f:4b:5f:5f:c3:
                    c5:86:62:0e:37:ac:05:db:76:25:c8:f6:75:9b:58:
                    98:d8:bd:ff:b9:9c:3b:ea:1a:ef:27:f1:38:58:52:
                    d1:58:81:3c:ad:9e:e0:c3:d7:68:38:a5:23:47:ea:
                    f5:69:c3:46:ff:96:c9:c6:36:54:84:c2:4f:48:95:
                    46:31:3c:ae:9e:62:d3:96:ab:65:30:50:1f:43:c7:
                    f5:c6:a7:3d:5c:2c:8d:92:d1:6b:40:59:46:8e:7c:
                    44:26:bf:aa:3d:42:f8:8c:69:9c:9e:1e:90:fd:9c:
                    f2:39:71:ac:85:75:63:a7:f9:7c:99:b5:90:1a:75:
                    e7:7d:f1:ec:1b:fd:f7:2d:ec:f9:1f:1f:36:c6:39:
                    7a:aa:f5:f5:85:e0:c9:43:ae:26:cd:af:7d:3a:36:
                    ff:e8:7d:e0:04:34:95:2e:c1:4b:25:c8:2d:9d:3f:
                    57:c1:52:89:47:59:66:b1:ea:3b:38:cf:b7:63:44:
                    59:8f:6c:2f:7e:83:4c:91:72:1f:75:5a:34:c8:5d:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:67:A1:89:A4:DD:47:71:63:01:D2:E4:53:5E:D7:C2:B1:E8:38
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:43:25:ea:2a:7f:e7:e1:4f:f6:13:a7:f6:ce:98:49:8b:8a:
         d3:2c:75:17:81:10:71:74:4b:b5:58:de:d8:aa:45:ad:25:86:
         d1:74:86:16:4c:de:7c:72:17:14:9f:77:4a:84:1d:4f:97:3f:
         00:25:ad:56:3d:04:64:09:40:e8:f6:48:4f:96:5e:25:7d:34:
         91:e3:cc:ef:ed:6f:37:66:47:25:e4:b4:db:ae:5d:2d:0f:0b:
         a8:08:b9:30:c4:53:46:53:a0:eb:fd:f5:1f:da:1b:74:85:15:
         77:d1:91:e4:24:b1:a7:89:75:c9:a0:27:45:01:c1:b9:79:b2:
         e8:1b:7f:17:8b:55:0d:b9:9d:3d:8f:d6:48:2f:11:5f:bb:f5:
         0a:26:e2:db:2d:12:26:42:c2:7f:f1:54:b0:9a:6a:50:8c:83:
         d4:6d:6c:57:67:03:fa:11:8a:47:b0:53:fb:67:45:10:2e:d8:
         d2:f7:6c:1b:cd:25:23:d7:cb:7e:a2:b0:c3:65:9c:44:f1:c6:
         17:29:32:c9:0b:33:0a:39:dd:88:ed:17:ab:21:ee:05:4e:35:
         92:95:e7:28:d5:96:ff:4c:4e:5a:bf:56:73:6a:d2:61:36:57:
         da:9d:a4:49:74:c0:33:ad:64:44:98:09:d2:e5:e6:25:14:56:
         5d:ac:47:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU+jZ3UzqGlSH0ZrUiR3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjUxMDI3MTEwMDQ3WhcNMjUxMDI4MTEwMDQ3WjAzMTEwLwYDVQQD
EyhiNGI1NjdhMTg5YTRkZDQ3NzE2MzAxZDJlNDUzNWVkN2MyYjFlODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdgFBUfxy6KpjRiOOTff8VhNv1bN
lMqBfoD6Im8JpcoUHFcN31p9fXBryHd8PU38ckSVXnUNH0tfX8PFhmION6wF23Yl
yPZ1m1iY2L3/uZw76hrvJ/E4WFLRWIE8rZ7gw9doOKUjR+r1acNG/5bJxjZUhMJP
SJVGMTyunmLTlqtlMFAfQ8f1xqc9XCyNktFrQFlGjnxEJr+qPUL4jGmcnh6Q/Zzy
OXGshXVjp/l8mbWQGnXnffHsG/33Lez5Hx82xjl6qvX1heDJQ64mza99Ojb/6H3g
BDSVLsFLJcgtnT9XwVKJR1lmseo7OM+3Y0RZj2wvfoNMkXIfdVo0yF2NyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS1Z6GJpN1HcWMB0uRTXtfCseg4MB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkMl6ip/
5+FP9hOn9s6YSYuK0yx1F4EQcXRLtVje2KpFrSWG0XSGFkzefHIXFJ93SoQdT5c/
ACWtVj0EZAlA6PZIT5ZeJX00kePM7+1vN2ZHJeS0265dLQ8LqAi5MMRTRlOg6/31
H9obdIUVd9GR5CSxp4l1yaAnRQHBuXmy6Bt/F4tVDbmdPY/WSC8RX7v1Cibi2y0S
JkLCf/FUsJpqUIyD1G1sV2cD+hGKR7BT+2dFEC7Y0vdsG80lI9fLfqKww2WcRPHG
FykyyQszCjndiO0XqyHuBU41kpXnKNWW/0xOWr9Wc2rSYTZX2p2kSXTAM61kRJgJ
0uXmJRRWXaxH3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:29:39 2025 by rpki-client