Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          6YtdJOroP2krPYVa6PwEgy2u5LQbztu97gAo/8p6r2M=
Subject key identifier:   D5:D9:28:35:6B:BA:45:6B:5A:0D:31:6C:57:B4:68:CA:BB:DE:16:80
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       019A1C50A594F124558964F08BC1E6395202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          064D
Signing time:             Sat 25 Oct 2025 17:00:38 +0000
Manifest this update:     Sat 25 Oct 2025 17:00:38 +0000
Manifest next update:     Sun 26 Oct 2025 17:00:38 +0000
Files and hashes:         1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: n/wLfkPRDIpLBUre5aRfv+N8qjaOw31eXs6pp7N0/XA=)
                          2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:50:a5:94:f1:24:55:89:64:f0:8b:c1:e6:39:52:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Oct 25 17:00:38 2025 GMT
            Not After : Oct 26 17:00:38 2025 GMT
        Subject: CN=d5d928356bba456b5a0d316c57b468cabbde1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:72:4c:b9:7a:48:ba:bd:5f:94:f9:bc:d9:
                    43:39:0e:00:e2:1b:2c:0d:db:46:9c:c4:69:ca:ff:
                    bb:24:48:d6:17:45:e2:e5:0a:2b:03:cd:a5:22:72:
                    8e:ad:e6:21:fb:57:64:36:7d:04:0b:9d:6d:4e:c1:
                    16:49:a0:c6:e3:7d:d5:60:73:96:d7:8a:01:d6:92:
                    25:73:b3:41:94:43:40:91:94:47:31:e1:0d:c9:be:
                    ba:61:f0:1f:43:a2:10:f1:26:7c:5b:ef:37:5b:ae:
                    22:22:c9:3a:e5:5d:ba:4a:6f:cc:17:18:55:42:2c:
                    ef:a2:5b:0f:a9:20:bd:db:7e:da:0e:c3:2d:b3:b8:
                    2e:78:c8:ca:5d:df:93:6e:10:7e:e4:66:93:fd:93:
                    25:fc:2d:b8:de:10:c7:9b:ed:aa:25:39:37:07:41:
                    b1:d7:1f:2c:3d:64:0c:39:31:3b:3a:3b:97:59:f6:
                    5f:9c:11:ea:60:08:5d:52:d1:b9:ea:9c:f1:1a:4e:
                    eb:1c:92:ea:1c:80:7d:0e:fe:c8:56:73:ea:56:85:
                    20:13:31:6c:bd:66:1f:13:30:d1:5b:55:2c:a3:aa:
                    48:2b:8f:1c:8f:7d:73:86:61:c1:c4:8a:0e:ec:1a:
                    6a:d7:b1:a1:0c:b1:4e:65:68:da:d5:d0:0b:63:69:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:28:35:6B:BA:45:6B:5A:0D:31:6C:57:B4:68:CA:BB:DE:16:80
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:98:9b:23:88:73:43:b9:59:e5:2d:da:74:44:10:c8:1f:
         e7:98:3b:70:8d:fb:8b:e8:9d:ad:ee:bc:3c:cc:59:3b:a4:47:
         17:2a:8a:c9:a8:a4:19:8a:06:20:81:76:22:25:d0:01:58:54:
         00:19:68:10:4e:28:82:4b:88:21:47:4d:00:b7:d7:17:20:4c:
         83:0d:58:2c:9b:2d:6a:90:bd:00:76:0b:17:04:65:c6:79:bb:
         cd:17:d5:bb:46:03:e4:47:e4:11:f0:8a:e9:b1:93:5e:c2:ff:
         73:ec:3f:83:94:98:c2:1d:60:9b:45:0c:91:28:ca:ab:46:1a:
         18:21:f6:44:b7:cf:46:aa:92:61:79:94:31:e2:6e:81:0c:9a:
         04:84:0f:a8:ce:d0:e4:8f:dc:b0:30:71:06:a7:6c:1d:6b:c4:
         a4:f4:c3:e7:25:68:47:19:db:fa:37:71:e2:7b:e8:ca:5d:a1:
         2e:b9:63:51:b5:18:64:81:e1:c2:5f:e1:d8:94:ed:1d:d6:24:
         61:71:b9:e0:42:a1:54:c8:3f:0e:d8:95:21:3b:05:c8:37:2c:
         6c:1b:80:32:a3:56:53:1b:d6:bf:65:ee:97:e2:83:4a:a6:6e:
         46:82:e5:14:43:3b:99:f2:bf:19:01:0e:d2:0f:17:20:ef:e7:
         9f:28:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:03:58 2025 by rpki-client