Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          DL6YRCYgjuwbUJ/mNK7fS0pzlYbQarZga3Utucub01k=
Subject key identifier:   9B:6A:80:5C:96:E9:F5:4C:5A:A1:FE:CD:86:94:B8:27:BD:B2:E8:EC
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019A25535E8828D6FF7003A27105C685C635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          01CD
Signing time:             Mon 27 Oct 2025 11:00:11 +0000
Manifest this update:     Mon 27 Oct 2025 11:00:11 +0000
Manifest next update:     Tue 28 Oct 2025 11:00:11 +0000
Files and hashes:         1: 2PO56c07BT5UqW7VHJgEtBZRuc4.roa (hash: j6nnqb1GzOx8EAgfl33x3DbOrwgUFnv8OKDrDXb3GYE=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: li4hYWILxjzELQXE3J+He917AmuRLph1H9/Cz679Xk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:53:5e:88:28:d6:ff:70:03:a2:71:05:c6:85:c6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Oct 27 11:00:11 2025 GMT
            Not After : Oct 28 11:00:11 2025 GMT
        Subject: CN=9b6a805c96e9f54c5aa1fecd8694b827bdb2e8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:21:0d:2a:5f:b1:39:1c:dc:d5:a3:a2:80:
                    5f:5d:61:77:4a:33:82:bb:41:5b:65:ef:4f:fb:12:
                    5d:6f:5e:33:f0:02:ed:e5:b0:80:a7:13:54:e3:31:
                    37:1b:6e:28:fb:68:76:b2:53:26:68:a2:a6:ec:82:
                    b8:24:ce:da:52:b3:4a:1f:18:c4:8b:af:02:c1:29:
                    a9:f6:1d:21:2e:90:53:0a:c9:65:ad:c7:1a:20:2c:
                    ea:eb:a9:66:66:70:99:60:73:df:04:30:e3:e6:e0:
                    24:57:03:df:14:7a:a2:76:a4:92:6a:05:23:a4:97:
                    ae:54:ba:76:d9:68:b7:6d:74:09:b3:68:27:73:80:
                    ea:c8:5f:29:88:de:7e:2a:3f:0e:d6:ef:9c:88:46:
                    13:e3:23:a3:f5:5b:37:fc:fd:1c:44:d1:d2:14:20:
                    1e:4a:af:fb:b1:74:f8:44:e2:fa:53:4d:5a:23:ed:
                    c7:d1:b3:7b:8c:16:ba:73:f8:44:51:eb:d6:f4:e5:
                    9c:6e:3d:e4:42:ba:59:a3:33:c9:3f:7a:47:1b:5d:
                    cd:fc:1f:75:aa:be:ac:c4:9e:0d:93:ec:f9:9c:c1:
                    89:08:6e:c5:54:f3:84:4d:32:40:d3:cc:11:88:37:
                    c8:65:31:cb:19:3d:7b:8a:dd:66:21:4e:cb:49:cf:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6A:80:5C:96:E9:F5:4C:5A:A1:FE:CD:86:94:B8:27:BD:B2:E8:EC
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:8c:6a:05:c6:bf:fc:33:ef:82:cf:d5:48:55:97:a0:86:
         13:9d:ba:aa:18:be:19:3d:1e:50:7b:ce:1c:ac:54:de:02:9e:
         d7:9e:d8:47:69:95:a7:33:b7:d0:3e:14:56:09:d3:62:32:e3:
         5f:45:bd:32:e9:97:8b:69:0e:2b:8b:94:60:08:a5:06:fa:12:
         f5:2a:a1:bf:5b:52:46:85:9a:d9:3f:6c:a2:6e:94:02:04:d4:
         8e:c6:89:25:aa:db:d1:72:89:39:d5:fa:3b:01:6c:4c:84:4f:
         dd:41:ca:22:e1:82:04:fb:26:af:92:b4:c1:5d:1d:fd:2a:92:
         02:c4:38:bc:a6:59:e5:d2:46:60:1f:97:5b:a9:31:01:67:e7:
         45:4c:99:22:35:d3:95:29:a9:09:93:23:bc:59:32:3e:c5:d5:
         45:44:82:f2:5d:47:48:e9:c1:a8:af:6c:09:6e:f5:f0:6f:06:
         d0:36:5a:97:c0:96:8d:59:4c:ab:fd:41:41:12:c9:27:0b:c3:
         3b:37:97:55:ed:ca:cd:68:70:ed:5b:0f:b1:e7:f4:e3:a4:fc:
         26:22:5d:6a:a8:ed:f5:e6:89:6f:29:dc:12:cd:52:c3:c4:2d:
         5e:12:d2:1f:f9:16:40:4a:9c:d8:4e:7a:dc:a8:30:9b:ec:d7:
         c9:2a:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:08:50 2025 by rpki-client