Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
File:                     Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json)
Hash identifier:          JjIzNj6eAnRelZs0SVkR4rQWswbpvuVvQSh5b8m1t5c=
Subject key identifier:   62:92:6A:17:AB:F6:A7:D0:2B:E7:94:0F:2F:A4:FF:E7:4E:85:6D:0C
Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
Certificate issuer:       /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Certificate serial:       019A718090E27D0DE0E14B18E3913AC4EB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
Manifest number:          C6
Signing time:             Tue 11 Nov 2025 06:00:42 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:42 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:42 +0000
Files and hashes:         1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: qa5UBEHhOVqeKf9fQhv3S4l8q+xvNGq7hLRKw9Jf5ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:90:e2:7d:0d:e0:e1:4b:18:e3:91:3a:c4:eb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
        Validity
            Not Before: Nov 11 06:00:42 2025 GMT
            Not After : Nov 12 06:00:42 2025 GMT
        Subject: CN=62926a17abf6a7d02be7940f2fa4ffe74e856d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:ec:84:55:9f:bb:9e:d2:2f:0d:73:bc:1d:
                    fa:75:16:6d:84:a0:30:75:69:38:de:e0:78:c4:4b:
                    9b:34:47:f1:9f:40:49:3e:60:0b:5c:d3:54:ad:54:
                    c6:15:8a:e1:5c:7a:08:04:fc:e2:0a:fe:9e:5b:03:
                    85:8c:b0:31:a6:11:0c:e2:72:bd:c4:7d:14:21:b3:
                    29:6d:25:d3:38:dd:0e:4c:3b:34:95:d5:03:15:81:
                    2d:b7:ab:69:85:61:4e:f2:09:05:44:da:26:c6:df:
                    19:bd:e2:b7:0a:0a:b6:5b:61:d4:b5:9e:c6:8a:1c:
                    0d:9a:ab:a5:f5:d6:44:2f:33:62:3b:98:c6:8c:0f:
                    ee:43:c2:82:41:b0:0c:f7:a8:9e:11:4d:8c:98:2a:
                    bd:ac:a3:81:32:d7:29:d6:55:1f:c5:d4:f8:7e:6e:
                    20:88:37:30:86:e4:7e:83:be:59:e2:33:2b:58:d3:
                    5f:be:4f:4b:93:8f:f8:4b:77:7f:0c:ae:73:7e:47:
                    75:bb:b2:1b:04:77:91:16:8a:aa:53:76:38:14:87:
                    10:eb:7a:0f:f1:b0:e4:52:0f:bb:fe:6d:79:21:8f:
                    7a:b5:dd:bc:83:59:1e:02:31:0b:b6:ea:92:4b:c0:
                    04:27:b9:d3:71:1c:dc:41:f8:84:47:d3:10:c1:d6:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:6A:17:AB:F6:A7:D0:2B:E7:94:0F:2F:A4:FF:E7:4E:85:6D:0C
            X509v3 Authority Key Identifier:
                keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:ae:68:fb:34:f2:db:a5:07:90:1a:63:4c:39:44:f5:33:
         b5:98:db:2b:13:c8:ca:55:ba:95:df:3b:47:ce:36:aa:9b:f9:
         f5:a9:bc:63:e5:82:94:0c:20:77:f3:26:0f:5d:05:84:d9:ed:
         aa:3c:b4:4d:34:e0:67:d3:21:b3:cc:8b:37:ac:37:95:ec:ff:
         ad:45:4a:97:3a:5c:52:a3:f1:5f:a0:8d:e1:cc:26:48:e6:76:
         ad:b6:3f:68:57:d6:e7:23:a6:73:2f:bc:38:63:d1:4e:20:ef:
         d3:fb:e8:89:30:8d:5c:fa:78:f8:f8:00:5c:07:74:02:65:d7:
         f3:d3:37:bf:17:4a:3d:24:a9:e8:b7:31:06:74:3f:a7:66:6e:
         ac:2e:28:76:33:ca:9e:53:4e:cb:14:55:9e:de:79:4c:b0:44:
         66:ff:ed:81:55:61:23:a1:25:ae:67:9f:8c:fe:24:97:c1:34:
         11:98:b8:f2:1a:82:f3:0c:9b:02:1c:7f:ef:a7:aa:6c:66:0c:
         4d:32:d7:dc:7b:c4:ea:a8:6e:63:f4:ac:5b:2b:01:d4:93:ab:
         8b:3c:d6:e2:2b:d1:4c:42:93:3c:b6:35:6b:25:54:f0:b3:a3:
         93:a9:6e:05:9a:1c:91:fb:f7:1f:55:8e:64:0e:92:55:3e:0d:
         a1:75:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client