Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          8vuPhNs9slxpZGQ90iBGHD2MICVM4InSmckbFVG873A=
Subject key identifier:   A4:24:60:0F:AD:DD:30:44:A6:A2:9A:E5:E6:D8:A5:C8:74:B4:E6:BF
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       019A70A5094C051B5A3E6CACE2180F4DC1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          1112
Signing time:             Tue 11 Nov 2025 02:00:55 +0000
Manifest this update:     Tue 11 Nov 2025 02:00:55 +0000
Manifest next update:     Wed 12 Nov 2025 02:00:55 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: owTllyI84OYVsEvW49gVIJSZxEwt/9Zic8VzDIVcfh8=)
                          2: SA2FPjcpG1kQYsbun59Q7-Ncc5U.roa (hash: sLqwzq191GZfL/xfEdWZKrffVvqlf65Ic2rl/WtgP8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:a5:09:4c:05:1b:5a:3e:6c:ac:e2:18:0f:4d:c1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: Nov 11 02:00:55 2025 GMT
            Not After : Nov 12 02:00:55 2025 GMT
        Subject: CN=a424600faddd3044a6a29ae5e6d8a5c874b4e6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:f9:e2:6b:76:75:50:09:c6:a8:69:cb:ad:
                    7c:1a:23:a3:78:de:c3:a1:84:fa:cf:49:02:ad:9a:
                    3f:43:4f:c7:12:8d:13:ed:1d:ff:a4:0e:04:27:80:
                    5f:40:2c:e7:18:80:7f:6a:2a:1d:cf:6c:3d:ae:73:
                    12:8f:9a:49:ad:ae:b3:1d:cc:cd:7f:3c:87:be:07:
                    0b:ad:b8:e5:4f:ea:c7:e3:e7:da:5b:ea:c0:20:36:
                    7c:5c:1e:ce:f5:fd:66:2f:d2:be:8a:96:38:35:6e:
                    7e:90:17:b2:03:5f:87:81:cc:87:f7:63:44:63:b5:
                    c4:0c:37:03:0a:13:9c:c0:d3:94:ba:0e:01:e4:a1:
                    cd:0d:68:0f:eb:07:25:a0:06:b0:f4:0e:7a:1b:99:
                    4f:10:38:c6:b8:53:9b:ed:7f:0c:23:c9:45:08:22:
                    cf:78:dd:57:51:43:50:fc:a8:11:52:25:3f:22:bc:
                    25:1f:d5:61:71:69:b5:47:b6:00:f8:00:69:3b:82:
                    2a:36:18:18:fc:be:c2:96:e0:b4:61:3c:c0:82:cd:
                    00:6b:0c:b4:94:78:f8:e7:96:9f:17:b0:35:92:eb:
                    49:8c:da:61:cb:d4:af:c2:cd:98:6f:1c:70:88:07:
                    56:96:2c:d9:92:a4:a2:91:e8:52:9c:2b:cc:4d:f2:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:60:0F:AD:DD:30:44:A6:A2:9A:E5:E6:D8:A5:C8:74:B4:E6:BF
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:b8:16:a9:fb:0d:81:45:b3:d7:68:68:ca:9b:58:c7:cd:
         b8:01:91:df:2c:00:63:a0:73:3b:69:e0:b5:9f:8d:03:a8:43:
         b7:f4:d1:ac:d9:85:c3:19:d0:4f:2d:d2:99:dd:ab:f5:df:42:
         43:33:78:a2:22:92:46:22:f5:54:5c:c5:c3:1a:dd:40:2d:b9:
         86:2f:9e:05:19:af:ee:ae:b6:46:3d:e5:8f:47:40:0c:cc:1b:
         50:73:ad:81:7f:6d:db:93:6d:fb:2b:f5:c4:5b:d8:01:63:f5:
         54:cc:47:b5:2d:8a:67:0c:02:0d:93:74:16:c7:3f:17:11:e9:
         58:f5:ff:4d:c8:98:7d:70:53:58:c7:ac:10:d4:c1:52:92:fd:
         57:2a:f3:62:2d:f3:54:ec:28:05:b3:23:32:04:34:00:33:6c:
         04:74:fd:d0:46:4f:e0:ab:d5:43:e2:cb:13:df:19:92:b9:02:
         8c:c3:9e:4b:57:1e:67:fa:92:ed:fd:41:19:5a:5e:e5:3e:62:
         79:37:ac:60:c6:63:9a:6b:55:f8:3f:fe:c8:b8:5d:9d:4a:8a:
         9e:9b:cb:47:a0:a6:71:e1:2e:0a:b4:f0:cd:7b:6c:9b:d2:ee:
         89:f5:f7:a6:02:41:b7:98:09:e2:b1:5d:06:1b:cd:00:ad:45:
         eb:c7:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client