Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File:                     6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier:          FVXJ0DIDOEvzDHYizkLAFvySb9LoELVJNa5WDKmbGpA=
Subject key identifier:   6A:10:EB:CD:82:E7:F0:FB:76:C1:25:2B:67:7D:01:E3:99:CB:9A:F1
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer:       /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial:       019A7149C644A18C9422B0DBD371D6528339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number:          01D3
Signing time:             Tue 11 Nov 2025 05:00:51 +0000
Manifest this update:     Tue 11 Nov 2025 05:00:51 +0000
Manifest next update:     Wed 12 Nov 2025 05:00:51 +0000
Files and hashes:         1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: BFkkSaaHL0TvR/jcMfRIzMbAP/jDKdMHGiWreM9plC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:49:c6:44:a1:8c:94:22:b0:db:d3:71:d6:52:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
        Validity
            Not Before: Nov 11 05:00:51 2025 GMT
            Not After : Nov 12 05:00:51 2025 GMT
        Subject: CN=6a10ebcd82e7f0fb76c1252b677d01e399cb9af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:c7:5e:d4:82:9d:ea:a8:c3:2c:70:5f:01:
                    43:16:83:28:74:cf:24:74:71:7b:22:ad:4c:45:e4:
                    31:ee:fb:d4:f0:2e:65:8e:1b:26:34:d8:1a:5b:a8:
                    36:61:c4:92:44:b3:b4:2b:95:f8:cb:1b:62:e7:a6:
                    91:4a:44:a0:e3:26:3e:ba:e2:dc:8f:9a:94:31:e0:
                    30:79:f8:81:cb:68:98:e2:e5:3a:53:70:6c:60:fa:
                    d8:68:bc:8d:cf:5b:f9:db:e1:c0:fd:52:a7:16:48:
                    90:34:60:bc:e2:a6:13:8e:46:2d:cb:b7:ac:54:39:
                    07:e6:19:71:92:7d:4e:a1:f5:04:23:26:2c:9b:07:
                    24:cd:ca:b8:9c:1f:92:90:a9:b4:34:f5:48:96:21:
                    5a:0b:98:b0:33:c1:bd:64:04:6e:04:b9:16:ca:86:
                    6c:3b:e7:2e:9f:1f:39:f4:ca:b6:86:cf:cf:41:b3:
                    6b:48:58:21:c7:88:eb:75:14:e9:16:c1:27:33:3f:
                    d1:a7:27:2f:5b:4e:b3:b2:8c:f3:84:0e:c3:92:d4:
                    b6:8e:d4:1a:2e:00:ce:ab:7b:0d:ec:33:3f:b2:c8:
                    98:31:52:bb:13:95:16:e7:c3:8a:78:98:41:b4:b8:
                    cb:d9:18:d5:30:7a:f4:53:47:79:fd:fe:af:62:a3:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:EB:CD:82:E7:F0:FB:76:C1:25:2B:67:7D:01:E3:99:CB:9A:F1
            X509v3 Authority Key Identifier:
                keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:f4:94:ba:2a:ef:b3:99:4a:37:ca:2e:8e:b0:57:cc:f7:
         9f:1e:ab:f2:58:a6:87:b9:bd:b1:26:56:f5:f7:96:45:a0:f7:
         b2:73:8f:72:51:5d:4d:ee:2b:15:d8:ce:fe:57:54:50:32:69:
         81:89:b4:0e:6f:97:08:9c:18:ce:79:d4:a1:35:7a:89:8d:04:
         ac:af:ba:b2:93:24:0d:ac:96:c5:74:15:98:af:b6:bd:36:77:
         7a:c8:ce:e5:0a:79:23:f7:21:29:b6:74:2a:d2:85:50:ec:b7:
         0f:5f:7e:b8:c5:a2:d8:ff:63:2a:46:60:c5:c7:b2:ab:c6:dc:
         3e:50:5e:e7:83:4c:99:93:e8:1b:20:b9:35:ee:d1:97:4a:e5:
         b5:d8:7b:e3:0a:57:f1:e5:54:c4:3e:e4:a9:c9:96:ed:90:41:
         a7:96:e6:c0:67:c3:7e:64:13:c9:54:d8:f9:6c:25:25:71:b5:
         c1:18:1a:5d:0f:73:fa:04:1c:4b:65:33:c5:8a:f2:f9:82:01:
         e3:67:44:b1:b5:25:d1:aa:25:15:bd:c4:2c:ca:ca:70:9a:13:
         0a:6b:42:5a:06:ad:05:2a:bb:5b:6f:0a:88:6d:84:f9:1d:44:
         73:a5:79:f7:89:dd:9a:da:3b:ef:2f:77:e2:ab:24:b1:6a:c4:
         c0:aa:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:48 2025 by rpki-client