Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          dduQqEv7WisMlRIC5lIRFfY2F9O+st1KLeTot6bDA0I=
Subject key identifier:   44:27:60:E8:82:6B:95:5B:56:C1:8E:C7:FD:90:DD:62:E5:1C:28:B0
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       019A2C32188D0155A984CB8BAA7725EB500D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          01C4
Signing time:             Tue 28 Oct 2025 19:01:11 +0000
Manifest this update:     Tue 28 Oct 2025 19:01:11 +0000
Manifest next update:     Wed 29 Oct 2025 19:01:11 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: PhC7h6YvY+MZedRcA+0WtZ0GWM1ppPMCAQYHVcVx2xA=)
                          2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:32:18:8d:01:55:a9:84:cb:8b:aa:77:25:eb:50:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: Oct 28 19:01:11 2025 GMT
            Not After : Oct 29 19:01:11 2025 GMT
        Subject: CN=442760e8826b955b56c18ec7fd90dd62e51c28b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:b4:52:c9:b8:68:6b:7d:7d:03:7b:82:5f:
                    c9:88:58:ad:38:f8:9d:e6:d6:54:a3:ba:47:ec:5a:
                    4d:26:2f:86:d2:53:06:6f:82:26:ea:ed:da:2e:0d:
                    34:e9:80:48:04:cf:07:af:e3:2e:40:1a:a3:1c:2c:
                    75:6c:c2:2c:4e:fd:fd:38:ae:d6:c8:e4:ad:ec:95:
                    eb:f9:11:c1:95:99:d3:b6:e3:a5:7f:27:76:18:f2:
                    62:1d:a5:9e:62:e7:0f:26:e7:e7:75:56:b4:d5:18:
                    8b:3b:f2:6a:f2:79:ef:b9:fb:22:d9:87:44:cd:9b:
                    ca:9a:71:ca:ea:d2:b4:12:c0:a8:7a:dd:61:48:07:
                    7e:b3:4f:df:a9:56:98:21:6a:98:8a:50:49:bd:0f:
                    42:0f:4d:42:35:a9:a6:2c:8f:25:aa:b7:06:c6:8e:
                    8a:c4:b6:dc:e2:b5:e8:ac:54:4f:19:49:a0:56:3f:
                    0d:eb:9f:cb:44:2e:f2:72:bb:50:a7:aa:d2:f2:5a:
                    8f:1a:95:2a:fb:b4:f9:f1:bf:5b:5f:9e:66:d9:de:
                    a5:d5:b3:c9:90:1c:49:00:6d:6e:3d:1a:3d:bd:c0:
                    8c:ad:79:99:e5:48:ec:c2:ff:6a:60:d8:ba:e2:20:
                    90:03:0a:62:49:d2:ab:3d:1e:8d:c1:fe:2f:5e:fa:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:60:E8:82:6B:95:5B:56:C1:8E:C7:FD:90:DD:62:E5:1C:28:B0
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:77:bc:f6:34:93:3e:65:fb:78:79:6c:c8:6e:1d:58:7b:
         d8:4a:5f:36:e2:27:49:4e:41:53:55:29:60:e9:88:47:ac:19:
         cf:b8:ea:9f:88:0f:4d:97:e2:ba:0e:f7:52:90:e9:28:fe:af:
         63:f8:f2:d1:b1:07:66:de:24:04:76:a0:aa:3a:9a:ef:9e:6b:
         21:5d:41:b0:b0:ed:af:55:f8:ac:6b:93:07:02:23:85:50:49:
         fb:06:d8:fc:79:6c:15:4d:68:01:c3:0f:d0:54:3a:34:d0:dd:
         9b:1f:48:37:8a:8e:35:01:da:b8:1b:87:8e:f9:0e:d2:f2:4f:
         04:7e:11:a1:d4:2a:14:dd:12:37:47:ff:08:b9:ca:4d:31:72:
         ea:41:c8:c8:a0:b0:92:3e:be:69:7a:11:92:b4:be:d4:d8:95:
         25:68:fe:0d:a9:7c:55:3d:72:bd:23:24:b1:34:b5:c2:2f:fb:
         63:76:78:46:f1:16:aa:64:db:1d:3e:1a:17:3c:f1:e3:b2:a4:
         50:f7:e8:ff:4e:e6:ff:de:c9:3e:8f:1d:d8:2d:73:3d:53:fc:
         86:e4:c5:88:fb:29:cc:25:d7:27:97:b9:6e:2c:77:25:65:8c:
         5d:7c:dc:b9:09:3b:2b:52:4e:5b:51:9c:24:0f:22:98:99:e0:
         35:ec:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:08:48 2025 by rpki-client