Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          psoH+j3Hfc9hKHwUSy6H/qpUvxVvQjkFFOkZ2y7Np34=
Subject key identifier:   2C:E9:D8:0D:5A:D7:0D:DE:5E:20:F5:67:2F:34:6C:2C:B2:9D:CC:BC
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       019A706E72E6AA31E445F6063C463374A673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          12E0
Signing time:             Tue 11 Nov 2025 01:01:17 +0000
Manifest this update:     Tue 11 Nov 2025 01:01:17 +0000
Manifest next update:     Wed 12 Nov 2025 01:01:17 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: NyN1j/yYxNu6rRhPMTF29ZDzqVOhPA1+DjY5xEGuLL4=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:6e:72:e6:aa:31:e4:45:f6:06:3c:46:33:74:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Nov 11 01:01:17 2025 GMT
            Not After : Nov 12 01:01:17 2025 GMT
        Subject: CN=2ce9d80d5ad70dde5e20f5672f346c2cb29dccbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:68:a2:0e:a4:7f:e4:38:f4:46:d8:5a:91:
                    46:1b:0c:fe:b7:e8:15:ed:71:11:4d:ed:2d:70:73:
                    21:ca:b5:f0:67:70:34:39:7f:4b:32:9e:eb:bb:8a:
                    32:c8:02:b0:a9:88:b5:5c:86:19:22:4d:9e:90:41:
                    1f:30:e3:bb:1f:ea:6c:6e:32:81:01:fa:28:9f:a3:
                    9d:39:05:bd:9d:1e:fa:15:a1:78:0b:ec:1e:7e:09:
                    46:49:e1:a2:be:af:b1:e0:79:79:1b:30:d1:7e:e5:
                    a5:9e:d2:da:de:0b:d9:c7:dc:16:f2:4f:2f:bf:eb:
                    6c:f1:3d:48:cc:27:2b:9d:d9:94:ba:c0:1a:74:2c:
                    85:2d:b8:59:42:f2:63:2f:a8:25:c9:83:db:c6:ae:
                    3e:5a:c7:fc:b1:7e:f4:77:51:59:4e:66:43:d6:d9:
                    0b:06:a2:32:f8:c1:4a:8f:be:43:57:89:e3:a9:38:
                    95:2a:8a:51:12:79:1a:4f:d1:7b:f0:12:7e:7a:da:
                    8d:d2:ae:44:3d:23:1c:d2:3c:45:5a:33:9b:1d:a1:
                    ba:66:e4:48:38:68:aa:e4:58:c8:9b:ab:11:8c:3c:
                    85:9e:40:f3:bb:b1:59:84:fb:64:a4:91:a7:0e:3e:
                    c7:59:5e:ed:f2:55:2b:e9:be:5f:02:aa:2e:f0:6b:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:D8:0D:5A:D7:0D:DE:5E:20:F5:67:2F:34:6C:2C:B2:9D:CC:BC
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:0d:78:f9:0c:f6:59:7e:ff:bf:07:99:37:27:69:b1:f3:
         f4:fb:63:11:4d:2b:d3:bd:38:39:04:f3:c2:64:dd:99:fb:95:
         bc:fa:c2:d4:07:30:d8:18:1c:83:50:3f:96:09:4e:e1:21:57:
         26:ea:b2:63:36:3c:59:45:65:07:6c:b4:41:4b:01:a1:c5:0d:
         4a:10:e4:ba:c9:a9:25:2a:8a:4a:b4:b8:bb:38:d6:99:e2:18:
         a9:22:2f:e1:70:a8:59:a0:6e:bb:87:5a:41:a1:de:bd:a0:a2:
         58:c7:b6:cb:6d:a5:b9:b2:67:bf:58:56:40:8a:0a:2e:4e:eb:
         07:7b:79:89:c8:e1:bb:6f:a8:33:db:05:b5:bb:51:79:be:e5:
         25:34:75:3a:80:33:c7:fa:1f:af:47:2c:4e:c3:ab:de:90:29:
         d6:c5:58:e7:cf:50:90:f4:b3:ca:64:aa:56:83:5c:45:97:0d:
         aa:bc:b5:0c:37:27:a6:13:ad:8f:fc:f4:d4:a8:e2:35:64:ee:
         a0:95:93:4f:49:64:41:90:65:f4:37:d7:0d:26:bf:93:73:b3:
         3e:6d:f9:d2:65:80:20:98:19:cb:14:0a:4f:8d:3d:6f:83:0f:
         f9:5e:c2:e7:78:02:39:d4:bf:5a:d9:1c:1b:f3:6c:c1:4f:53:
         1c:bd:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client