Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          A6egmcXupdYAXr4tgOTeXHU2eczRlz9pzabE20IY330=
Subject key identifier:   8C:47:98:FF:61:9E:E7:9E:31:B0:4C:10:D7:E7:5D:4D:8D:98:EF:23
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       019A2741C6DEBEA7A08F36B4B9DA473B05B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          06C6
Signing time:             Mon 27 Oct 2025 20:00:13 +0000
Manifest this update:     Mon 27 Oct 2025 20:00:13 +0000
Manifest next update:     Tue 28 Oct 2025 20:00:13 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: wNP0WQ/vpEq8IWtLROQ771gEi/LxxPH4sZZNZLINjvs=)
                          2: ERZth0xX85HWn67GzDSpThEJK6U.roa (hash: 7waXqANAdY315AAe2QRMY1aCHLszX3hvr0AdWM3OyXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:41:c6:de:be:a7:a0:8f:36:b4:b9:da:47:3b:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Oct 27 20:00:13 2025 GMT
            Not After : Oct 28 20:00:13 2025 GMT
        Subject: CN=8c4798ff619ee79e31b04c10d7e75d4d8d98ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:71:90:fa:2c:b4:ff:e3:5c:41:a3:2b:b8:
                    54:46:0f:f3:ba:81:41:15:0d:0b:23:c0:16:b0:8e:
                    01:ca:a6:30:6a:8d:9c:13:0f:ff:b9:35:39:00:1e:
                    3e:a6:ea:8e:e6:d3:ff:92:ec:1f:f3:26:e4:86:8c:
                    c9:25:01:a1:87:1b:b5:46:36:67:a7:95:76:31:67:
                    ca:c2:75:07:ff:9f:cc:99:7f:dc:34:b9:c0:6b:04:
                    d6:70:e0:fb:a4:ec:d4:34:d2:48:f8:04:42:71:b6:
                    e8:9c:87:c4:3d:66:3e:21:61:e9:70:e6:d4:f5:7e:
                    db:09:df:a2:55:dd:03:b2:2b:2e:a3:50:a4:67:b7:
                    82:6b:37:b5:4b:9f:eb:28:7d:36:fb:72:83:90:9c:
                    ef:cd:47:aa:81:bc:51:ad:15:9b:8a:7d:6f:20:d8:
                    78:95:c8:b0:77:fc:0a:93:70:b5:48:54:4c:6f:26:
                    c3:79:74:9c:65:2a:cd:24:4d:91:0d:d7:40:90:91:
                    b0:3f:16:ef:dc:39:28:b0:02:31:8a:9a:f2:d5:30:
                    9c:98:e4:05:13:a2:fd:c5:f7:60:ef:11:66:7c:97:
                    d2:0f:48:f0:7e:34:0a:ca:ab:7b:0c:54:08:3d:e7:
                    8d:fe:02:50:69:22:7e:54:8d:8d:71:93:12:2c:c0:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:98:FF:61:9E:E7:9E:31:B0:4C:10:D7:E7:5D:4D:8D:98:EF:23
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:78:a1:7f:47:f5:c3:e1:eb:7b:79:e0:bb:8b:00:b2:a1:8f:
         a2:a6:bb:7f:66:b0:bd:90:3c:ad:a3:46:82:83:5e:b8:1f:79:
         28:3d:0d:39:5f:4a:c2:3e:c4:b7:46:d9:4d:fc:08:59:e6:8d:
         d0:75:07:0f:da:34:c5:78:b8:49:50:6f:3f:3f:33:6e:9b:d6:
         16:e3:b7:d3:a1:09:76:43:92:35:3c:93:80:59:3d:c9:f2:a2:
         72:1b:16:86:6d:b1:81:e7:e0:f5:20:ab:42:3f:7c:3f:56:e5:
         52:ce:ef:ab:2b:12:48:60:74:b4:f9:7e:60:2f:f1:1f:c0:64:
         ef:94:cd:df:91:25:a7:29:d0:a4:67:fb:80:e6:43:9e:b1:ee:
         26:b0:8e:de:a2:e5:e8:61:7c:3b:a4:6c:79:21:26:03:f5:c3:
         02:4a:89:b5:84:fb:ab:78:56:9e:ae:03:00:c3:3d:ab:d4:76:
         27:a0:35:6d:58:0b:52:a8:40:7b:37:59:16:02:a0:b1:0c:8b:
         36:f2:a0:b5:57:94:a1:57:ad:fc:c7:43:1d:84:de:55:13:f4:
         13:44:2c:69:8b:07:d5:d3:48:71:02:a6:b9:7e:20:e4:3a:9c:
         3f:e5:5e:d6:d7:f2:59:bd:db:10:f3:f6:a7:0f:c0:7a:b6:26:
         1f:ed:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:40:05 2025 by rpki-client