Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          xASJZNb4HX19gShJIaKTqofnmkDaP4ZGgtsewihgWYc=
Subject key identifier:   C0:2D:B3:7D:57:9D:A0:F2:43:FD:74:FC:6E:08:7A:F3:BB:03:EE:88
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019A72259C8A232BE9396E1F87C12E2DE074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          1195
Signing time:             Tue 11 Nov 2025 09:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:58 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: qR2Qb9n0b1Ai2KuLKfZ+fg+70mApbQSiw4AUwGVrrrY=)
                          2: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (hash: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:9c:8a:23:2b:e9:39:6e:1f:87:c1:2e:2d:e0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Nov 11 09:00:58 2025 GMT
            Not After : Nov 12 09:00:58 2025 GMT
        Subject: CN=c02db37d579da0f243fd74fc6e087af3bb03ee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:51:68:ef:c1:8c:e7:d6:51:2d:99:59:ce:
                    72:9c:3b:8e:46:8c:4b:f8:5e:d9:32:3b:80:25:62:
                    27:85:3d:aa:c9:05:95:e3:a8:64:4d:26:d0:28:45:
                    d2:b4:b7:de:1c:bb:d3:f9:92:b8:0c:b3:ef:78:2a:
                    ca:f8:f2:d2:4e:a5:a6:b5:cc:5c:a0:77:6d:d4:38:
                    b3:5b:79:29:8e:b2:c0:cb:ce:5d:df:23:7b:ce:e2:
                    81:8f:aa:74:49:d5:87:52:4c:bb:4b:20:ed:72:38:
                    92:bb:41:a6:13:d9:05:16:d4:e0:60:25:d0:23:77:
                    f4:be:15:b0:08:e9:8e:25:a3:ab:a5:a1:d8:3d:d2:
                    2a:d1:b7:7c:c4:4b:ee:61:1e:51:f5:68:ad:60:86:
                    65:4d:46:3d:d1:93:e6:92:68:a2:48:18:e5:d2:d3:
                    12:a6:da:d1:6a:10:da:63:02:49:95:e0:ef:7f:2d:
                    a2:5a:63:a3:f1:6d:f0:ec:ca:73:0f:ba:88:9d:95:
                    6e:9e:10:42:71:7c:1d:7a:58:71:4d:e1:7f:4d:22:
                    2d:12:91:24:22:88:17:07:d2:01:ac:5b:a6:9e:1c:
                    32:70:bc:74:61:82:d8:f5:da:0d:58:9b:5b:fc:ab:
                    01:be:b7:d1:60:62:70:c4:fd:fa:c0:6b:60:30:ba:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:B3:7D:57:9D:A0:F2:43:FD:74:FC:6E:08:7A:F3:BB:03:EE:88
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:fa:46:c2:1d:6c:33:07:b7:bc:5a:be:d3:5b:4b:f9:0d:
         21:39:c3:ba:e7:1b:c8:53:b4:39:35:73:14:e8:bb:3e:7b:49:
         55:ef:d9:06:b0:f5:5d:e1:4e:a1:a6:d3:25:52:5d:bc:ec:de:
         c3:a1:b0:28:a4:21:c5:77:83:23:2a:ad:15:e0:ef:f8:68:1b:
         82:5f:9a:fa:62:9a:94:2d:e4:88:47:79:1e:05:6b:c9:ed:c3:
         e6:78:54:ab:d8:74:43:10:3c:61:fd:a9:ff:e6:a3:53:0d:7a:
         ed:8a:a6:ca:25:ac:af:81:94:2e:f0:6f:78:b2:84:46:89:84:
         e3:ed:5b:d4:40:f4:a7:63:ac:00:81:a2:44:2f:fd:50:4c:89:
         6a:c2:4d:dd:26:62:b9:b0:3f:c7:4b:c8:f5:c6:17:07:e7:0e:
         19:2f:0d:51:20:0e:c5:41:fd:92:f7:f8:84:7b:e6:5d:36:12:
         ca:99:8e:f3:55:9b:b2:ea:ff:cd:48:e3:8c:53:fe:92:d9:3f:
         04:f4:f3:67:a5:5a:83:b9:7b:fc:7f:a3:f6:fa:8a:8e:41:67:
         04:2a:ac:60:22:93:c2:9e:b6:39:96:f6:28:14:12:6a:be:28:
         01:fd:aa:63:76:4f:1b:df:7b:92:ec:c7:7e:7d:5b:94:c4:ee:
         c9:c2:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:03 2025 by rpki-client