Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          UR3deoTNZ12E/ztW+K7g+Q+PGL+LcNy5KLNie3XX0yg=
Subject key identifier:   C3:21:C1:36:3E:50:6A:95:60:C5:70:CD:1C:D7:28:B4:24:E9:4D:2E
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       0199C5D798A3DFDE61F72A68FE5D6CA5B1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0D43
Signing time:             Wed 08 Oct 2025 22:01:04 +0000
Manifest this update:     Wed 08 Oct 2025 22:01:04 +0000
Manifest next update:     Thu 09 Oct 2025 22:01:04 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: 71PvQo3amqMiSuzahikRgdQwBCxB6WhsggqB3X16mvU=)
                          2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
                          3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
                          4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c5:d7:98:a3:df:de:61:f7:2a:68:fe:5d:6c:a5:b1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Oct  8 22:01:04 2025 GMT
            Not After : Oct  9 22:01:04 2025 GMT
        Subject: CN=c321c1363e506a9560c570cd1cd728b424e94d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:2a:c9:29:39:db:5a:66:02:27:bc:d5:d2:
                    0d:66:22:90:b3:8b:bc:b4:9f:8e:31:4c:68:19:2c:
                    16:00:e5:5f:4c:35:05:d3:b9:cc:a4:3b:cb:5b:65:
                    80:3c:3b:cc:9b:b2:74:e9:13:92:5d:e1:34:2e:ec:
                    71:b2:72:e5:14:e5:5b:73:ca:41:5c:c1:bc:3a:2a:
                    41:11:eb:62:95:1c:ac:3d:8f:35:25:26:45:36:63:
                    fc:6a:63:f8:bf:f6:0d:fe:d2:d0:6e:b0:fc:94:d8:
                    31:68:2f:82:73:e6:0e:40:f4:da:6c:5d:d9:98:72:
                    83:04:65:dd:24:fe:4e:f6:0d:32:d9:e0:66:57:77:
                    4b:f8:86:c5:a7:ea:9f:55:3a:70:22:f1:2c:33:d8:
                    3a:23:ef:11:6d:fc:30:a5:e1:95:a8:84:7f:df:26:
                    04:cd:0d:32:b4:7f:7f:ff:93:e4:b0:23:7a:a5:70:
                    30:24:d3:0c:4c:da:df:57:1a:4d:10:47:71:1c:0e:
                    6d:7c:85:ef:42:53:b7:97:f0:75:79:cc:d9:10:f8:
                    25:39:5e:3a:8e:c1:3a:5c:ab:0f:ea:36:8b:09:26:
                    db:e1:e9:f1:57:62:b2:0e:4a:68:77:77:ae:47:9d:
                    b8:0e:17:be:51:2a:4b:23:d4:16:6e:be:ab:ab:ae:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:C1:36:3E:50:6A:95:60:C5:70:CD:1C:D7:28:B4:24:E9:4D:2E
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:a9:51:5a:0e:73:cb:7a:8b:7d:ce:82:f0:0a:cd:a2:fe:
         d2:43:17:71:72:4d:4d:1a:e6:f9:28:4f:4b:c4:46:1f:62:d4:
         d2:90:49:2d:1a:59:ed:04:dd:95:a1:24:42:71:40:5d:7d:76:
         eb:18:5e:30:1c:5e:76:1d:64:36:9e:3d:d3:50:87:01:63:3c:
         9c:5a:ed:b0:45:76:37:47:1b:4a:0a:b6:db:23:f4:6d:e9:83:
         83:3d:6f:42:cf:10:29:cd:96:32:60:36:09:b1:88:ec:3f:55:
         13:9c:59:83:5c:26:69:bb:8a:75:27:54:dc:50:29:56:78:93:
         ef:9c:3b:4d:a5:6c:63:e4:5a:06:88:a7:b3:10:6d:fe:e6:52:
         92:b0:38:0a:eb:94:cd:a2:c5:de:5d:11:cc:2c:2b:d7:d0:45:
         a1:54:8b:f9:4a:29:4f:4b:c9:dc:6d:d9:58:3d:80:e5:2c:db:
         3e:fe:fa:db:72:ca:a4:b6:5d:e6:45:33:ff:73:25:8a:be:9c:
         fe:bf:e6:f3:ca:e9:ba:bd:bf:ab:54:93:06:1a:e0:af:8e:74:
         7f:b7:d6:76:48:bc:e2:00:9b:7f:a8:d4:cd:db:16:d8:3e:fa:
         40:00:81:21:76:e7:3e:36:e5:44:8c:25:2d:ba:65:08:e1:79:
         65:40:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:59 2025 by rpki-client