Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
File:                     6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json)
Hash identifier:          IfBzFnHbVNniVsGuH7d+wWMgOEvSlaeKm0I3OM1ekTE=
Subject key identifier:   7D:2A:D6:FD:AB:BE:CD:E4:C1:BE:84:A7:B3:83:9E:FF:C7:5E:7E:B5
Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5
Certificate issuer:       /CN=e91587bdb005402c6a471fb24375b226da2d89c5
Certificate serial:       019A70DBE89E5DD1DFBE5CAD4C00A87F365E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
Manifest number:          01D1
Signing time:             Tue 11 Nov 2025 03:00:51 +0000
Manifest this update:     Tue 11 Nov 2025 03:00:51 +0000
Manifest next update:     Wed 12 Nov 2025 03:00:51 +0000
Files and hashes:         1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: ahS991oGbetz0i3Aidy2b2VM4PnQJslWC1QEZ/7em5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:db:e8:9e:5d:d1:df:be:5c:ad:4c:00:a8:7f:36:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5
        Validity
            Not Before: Nov 11 03:00:51 2025 GMT
            Not After : Nov 12 03:00:51 2025 GMT
        Subject: CN=7d2ad6fdabbecde4c1be84a7b3839effc75e7eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:4f:29:3e:63:ae:f3:a5:fa:9f:e0:3e:4f:
                    fe:72:a4:9e:aa:87:a6:02:01:fc:f1:95:8c:eb:a9:
                    a4:23:1b:62:b5:30:b8:ea:b2:eb:9f:0b:aa:56:09:
                    1b:ff:85:bf:11:a6:ae:91:a9:97:05:98:df:48:4c:
                    63:54:ce:29:88:76:39:35:58:68:47:c8:e1:22:21:
                    82:8a:69:50:38:00:f8:0f:3c:68:25:56:ff:1e:1d:
                    5c:3d:35:94:61:4b:06:5a:cc:20:89:4e:03:c6:7a:
                    c5:07:b0:af:f9:68:f5:00:d5:05:fd:05:6e:60:98:
                    30:23:81:3d:4e:fc:e4:30:40:17:a7:d2:0e:5f:93:
                    79:c0:fb:3b:a3:2d:0b:b4:1a:d5:78:d7:0f:ef:d1:
                    75:c7:47:58:6d:17:74:86:4c:f5:d4:31:35:02:41:
                    1b:40:f0:96:9f:84:ff:03:17:2d:4a:61:16:4d:90:
                    78:dc:be:d3:c6:6b:7a:2a:84:b3:9c:08:30:44:ea:
                    e0:d9:1e:a2:85:c1:11:01:b5:c1:22:3e:9f:2c:fb:
                    32:61:2f:f5:21:f3:4d:01:2b:15:4b:73:ab:83:27:
                    fd:ca:92:17:51:3d:1a:69:ee:3d:cf:71:01:33:58:
                    31:38:6b:40:63:3f:31:3d:8c:0b:a5:5f:86:39:fc:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2A:D6:FD:AB:BE:CD:E4:C1:BE:84:A7:B3:83:9E:FF:C7:5E:7E:B5
            X509v3 Authority Key Identifier:
                keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:83:ec:be:d8:d6:89:0f:4a:7c:e3:16:a1:90:6c:c6:bd:1c:
         96:55:9a:f5:d0:49:66:b9:c7:41:2a:75:0b:41:82:02:59:21:
         a2:82:c7:3b:a0:11:f5:e5:a1:fc:34:e1:e5:86:c9:df:7b:77:
         c1:23:90:87:dd:b2:a1:c8:83:22:33:c7:d4:77:a9:4b:b5:d9:
         f1:e6:21:d8:f3:b4:c1:93:63:a1:bb:7d:b1:7e:27:42:3c:bc:
         d1:20:5b:a0:d8:ce:0e:49:22:bc:fb:91:b5:a7:8b:12:83:d9:
         6c:85:fe:c9:0a:97:ee:93:ae:fd:34:66:7f:73:b2:71:99:02:
         2d:c1:65:10:20:11:2d:c7:cb:93:0e:24:37:81:ca:2e:4c:ff:
         92:45:f5:69:a8:64:30:1f:25:71:19:6d:d2:ce:f5:b8:42:1f:
         31:57:b7:d1:69:48:2d:45:34:4e:fa:11:67:eb:cb:30:9e:50:
         8a:c9:42:e6:a0:24:da:99:08:04:6d:ac:d7:5c:c2:b2:53:75:
         e7:18:98:fa:24:3b:fc:3c:af:ba:bf:85:49:04:ea:74:77:eb:
         93:61:1c:22:36:d2:d8:24:96:5f:ef:03:89:7e:68:82:a8:97:
         f7:e6:a4:7e:dd:2d:82:ff:3a:06:66:69:96:53:95:67:76:27:
         05:8c:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client