Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          P8AFnscYvLYct8Ss9p2eDP8E633JjmzQo/w+Ov/5rgI=
Subject key identifier:   9B:F3:9F:6C:EC:DF:C5:EE:A5:81:CD:A4:4B:3C:BA:88:72:EE:54:0E
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019A72257BA02438C3CCC93F20DB25136E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          1722
Signing time:             Tue 11 Nov 2025 09:00:50 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:50 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:50 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: Zf4AJd/HdMLP0+B8M2lQ0V37e9ZKjiCWwPmV6N2Xow8=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
                          4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:7b:a0:24:38:c3:cc:c9:3f:20:db:25:13:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Nov 11 09:00:50 2025 GMT
            Not After : Nov 12 09:00:50 2025 GMT
        Subject: CN=9bf39f6cecdfc5eea581cda44b3cba8872ee540e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:cb:64:65:be:21:70:89:6e:11:7e:05:83:
                    e9:5f:a2:1f:3e:56:a7:9a:83:f3:53:44:66:4a:f1:
                    1a:89:07:97:37:a6:9f:ca:a6:80:70:f8:b1:9e:67:
                    f6:6c:b1:24:67:ae:3f:b3:45:e8:19:0e:05:cb:a4:
                    8d:ea:73:cf:5f:97:43:a2:e8:a3:78:67:ed:93:44:
                    04:f9:e6:37:95:16:c8:89:d2:a2:fe:1a:83:b5:ba:
                    4b:16:4b:d6:fe:e8:5e:3e:3d:7d:8e:a1:7a:05:53:
                    aa:f1:c7:fa:a3:fd:cc:14:ed:5f:40:17:bd:31:31:
                    a0:d0:dc:cc:b1:11:38:f4:48:bb:94:5b:02:40:b7:
                    ee:9a:99:44:b5:d3:ce:8d:bd:af:17:6d:c2:3c:ba:
                    26:b7:61:03:da:03:50:4d:86:5e:61:20:25:2f:c8:
                    2b:63:b0:22:87:68:da:ac:5e:04:02:1f:b1:f6:b9:
                    2f:33:f3:c7:fe:29:12:41:88:22:cb:a6:59:fd:2a:
                    06:b9:b6:f2:57:b0:b0:f0:f4:b3:8b:a3:7d:af:9c:
                    87:5b:51:90:b0:0a:0c:3c:01:dc:12:7e:96:6e:5b:
                    e6:dc:0a:fd:3c:36:fe:7a:c1:39:e0:3c:5d:37:b4:
                    f1:64:2c:ec:a7:cc:76:f4:81:55:14:be:e7:1b:60:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:9F:6C:EC:DF:C5:EE:A5:81:CD:A4:4B:3C:BA:88:72:EE:54:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:72:85:31:13:a8:d8:48:ec:62:af:75:d1:d7:79:2d:49:75:
         44:87:4e:ed:18:ca:b9:cd:02:1d:8d:79:fa:d1:ee:d3:33:0c:
         b7:d2:f6:41:87:2b:2d:23:6a:f1:83:e2:ee:26:67:c1:ff:6f:
         76:0b:52:fa:70:7d:56:39:e9:03:4c:52:5f:99:a6:f2:4f:36:
         c3:49:92:06:a2:44:b2:5f:e5:52:8a:88:b5:bc:01:70:ef:c7:
         c3:81:e2:8b:ab:2b:d3:54:d0:68:86:9c:b1:43:b5:6c:9e:38:
         30:98:3b:d1:9d:e0:1f:b1:e4:b8:9c:87:67:4d:fb:24:0b:04:
         a8:33:f9:74:a3:55:d3:f0:9a:fa:e7:29:e0:df:b4:6d:61:e4:
         fe:37:02:44:cd:13:02:06:7f:f2:6f:ec:37:9e:1c:fe:23:10:
         a2:60:7d:47:f2:0c:c2:23:0d:26:b6:c2:d5:d3:2a:09:2c:3c:
         4e:c7:01:9d:51:f6:49:92:93:0f:22:f9:c6:1b:af:b7:35:fb:
         46:bd:08:d1:95:17:40:6d:b0:d1:58:07:09:c8:a5:8b:e3:f0:
         d0:e6:23:33:9f:fa:8c:2c:98:4c:6c:ec:95:1e:7e:bd:c1:7c:
         9a:b1:cc:44:9c:df:bd:26:08:db:b3:d9:3c:cd:8c:23:87:74:
         aa:2f:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:59 2025 by rpki-client