Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File:                     6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier:          W3oig0UshRo4B6MTuNTgbr00YUGHsi6PNeNMJ2oDD1c=
Subject key identifier:   87:C6:E3:87:9B:CB:87:66:26:BA:89:7C:5E:CD:80:5F:01:23:D1:52
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       019A71135B3E2E1F1A2265331F4D8498BAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number:          171E
Signing time:             Tue 11 Nov 2025 04:01:25 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:25 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:25 +0000
Files and hashes:         1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: mp8H3JmXks8Y+cmcKiAZtV+9CymHFpDJigZlTa3J9jA=)
                          2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:5b:3e:2e:1f:1a:22:65:33:1f:4d:84:98:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Nov 11 04:01:25 2025 GMT
            Not After : Nov 12 04:01:25 2025 GMT
        Subject: CN=87c6e3879bcb876626ba897c5ecd805f0123d152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:7f:b6:ed:57:9e:8a:ef:cb:35:2c:ef:b7:
                    13:cb:4b:5f:43:87:a0:8e:fa:b8:58:70:b6:0d:f5:
                    47:13:80:34:70:97:06:52:75:1d:8e:fa:99:91:6d:
                    b5:ea:1f:9c:e8:68:bb:01:15:fa:9b:26:89:10:d3:
                    5e:bb:64:ee:30:f0:f2:2e:5f:61:50:3d:fa:4a:60:
                    39:1f:5d:c2:2a:91:f5:91:72:c1:54:ce:c0:97:30:
                    da:60:dd:cd:71:6e:b5:0c:89:45:b9:16:ab:ab:98:
                    5c:96:dc:7e:28:3e:d7:88:ea:89:d2:e2:52:80:a4:
                    e3:51:9f:1d:88:8a:e2:0f:3f:15:ae:3e:63:50:26:
                    e0:69:c5:2f:ed:60:59:ea:04:59:a3:bc:23:26:e5:
                    f0:1c:ed:7a:38:01:07:bc:e3:ba:ab:cf:3d:d4:72:
                    a5:d8:ac:d9:b9:f9:31:9e:48:59:34:6d:30:8e:72:
                    3c:1a:23:8e:7a:60:85:59:68:ba:4f:32:a1:60:eb:
                    22:fd:51:71:55:22:e8:51:04:85:28:52:5b:dd:22:
                    f4:7c:c7:d4:5a:7f:42:1b:b0:c7:24:2e:da:77:27:
                    7c:8e:57:2c:90:f5:1c:29:c5:8e:bf:1b:00:47:3c:
                    e1:a1:0d:0d:ca:07:a9:a5:84:c1:21:51:02:75:01:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:E3:87:9B:CB:87:66:26:BA:89:7C:5E:CD:80:5F:01:23:D1:52
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4d:98:cf:f0:0b:44:23:eb:c7:61:cd:ab:67:2f:0f:f2:41:
         38:d1:02:d7:d6:34:6b:f4:1b:db:80:d9:05:25:79:f0:be:67:
         c4:66:58:a4:10:4b:96:ef:54:87:90:3b:ec:35:16:8c:da:bd:
         63:c7:2b:a1:b0:34:68:3f:4a:0c:87:c9:a1:66:6f:ed:5c:18:
         11:49:64:0f:c3:13:78:de:1f:a2:04:25:3a:1e:45:70:d1:9d:
         88:f3:b2:69:a2:7f:c2:1b:db:eb:df:74:1f:35:dd:e5:af:aa:
         79:6f:91:3c:bc:1b:7b:7a:53:6a:5e:4b:cd:6a:c6:53:b5:1f:
         95:40:1d:08:30:7e:86:0b:74:67:0d:92:74:fc:26:01:4f:8b:
         f4:dc:43:d0:d7:3b:c8:ef:b4:f3:05:6f:cf:2e:48:80:61:c5:
         0a:8a:52:51:33:3b:de:8e:b3:88:5f:30:77:e6:5e:49:d5:9c:
         42:71:97:0b:dc:3d:00:65:8b:09:02:76:3f:98:56:88:38:34:
         ea:7b:1e:77:18:d6:68:bc:9e:5f:ba:0f:68:10:73:85:1e:fe:
         01:02:2f:46:07:42:03:11:8f:d9:d0:22:0c:a8:a6:a1:3b:28:
         df:03:86:0f:17:a4:4b:ef:e4:8c:03:72:89:df:af:24:e0:3e:
         3f:f1:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client