Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
File:                     6jKtyFac_LNedcfO_UbV7QDw4Cg.mft (raw, json)
Hash identifier:          ak60NTWFdr95ELPgUsW26umXwJh/3iOREs9IQXr5oy0=
Subject key identifier:   A3:55:1C:0C:32:87:89:2F:24:2F:FA:F4:C0:0E:F2:20:94:4E:C7:4D
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Certificate issuer:       /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial:       019A71EEC86E685F45E5777D9F3438AA764F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
Manifest number:          1721
Signing time:             Tue 11 Nov 2025 08:01:05 +0000
Manifest this update:     Tue 11 Nov 2025 08:01:05 +0000
Manifest next update:     Wed 12 Nov 2025 08:01:05 +0000
Files and hashes:         1: 6jKtyFac_LNedcfO_UbV7QDw4Cg.crl (hash: IXp7iUyJBEKP7RUVsOgksULzV9KHy9hlG6Ogsa9DuBQ=)
                          2: Yj0n54L8_fk_2zjr-vMy1qCRN10.roa (hash: aTlJQzdo1sOuXv8c5qqCvTjajF7OpI+KohKsrPrW87I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:c8:6e:68:5f:45:e5:77:7d:9f:34:38:aa:76:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
        Validity
            Not Before: Nov 11 08:01:05 2025 GMT
            Not After : Nov 12 08:01:05 2025 GMT
        Subject: CN=a3551c0c3287892f242ffaf4c00ef220944ec74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:03:03:7a:e6:b3:e0:e6:b7:d1:57:ec:fc:
                    ba:28:78:47:d2:8f:10:b1:34:b8:83:cc:e2:cb:af:
                    16:1a:1b:63:2d:d8:12:9d:73:98:3d:3d:03:69:d0:
                    1b:6b:9a:fd:f3:1d:52:69:3b:12:13:aa:8a:f5:9a:
                    bf:f4:74:8d:69:dd:43:57:fe:00:80:64:db:1c:d1:
                    cf:0f:c1:6c:cd:a2:38:dd:4e:7c:b7:bc:50:1c:16:
                    58:8d:7a:72:d7:a5:76:a1:1b:dc:da:ae:f4:67:b3:
                    45:9b:88:c3:15:ec:45:a0:f5:a8:ea:5e:2b:a7:22:
                    46:0b:c5:c3:fd:cd:2e:5a:25:f0:85:4f:9c:ab:a1:
                    cb:77:61:81:df:8b:99:50:30:53:dc:f9:a3:44:48:
                    0a:f9:a2:d9:2f:dc:90:a7:d9:02:34:94:7b:64:fd:
                    2a:b2:17:ae:ab:54:0d:c6:eb:46:23:71:42:6e:ce:
                    0c:6c:4b:b4:64:e9:82:8c:63:f3:7a:e2:a2:74:6d:
                    c8:99:17:34:ef:50:c9:ae:f3:1e:af:16:46:1a:d9:
                    2f:c9:d8:ab:e7:45:59:a5:07:20:88:73:1b:03:b4:
                    df:80:79:45:00:74:62:24:d8:f8:58:72:cb:61:3a:
                    8a:66:0a:bc:c2:38:94:de:e7:74:2b:ea:17:98:af:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:1C:0C:32:87:89:2F:24:2F:FA:F4:C0:0E:F2:20:94:4E:C7:4D
            X509v3 Authority Key Identifier:
                keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:80:e0:67:8b:82:e7:47:9f:ca:3f:a4:50:4f:e2:98:2a:
         20:ea:b1:f8:1a:76:63:92:e3:8d:d2:38:9e:45:81:3a:9c:cd:
         36:83:bb:62:77:51:f6:31:66:8e:1d:a8:36:fe:9f:18:a0:b5:
         92:8d:70:89:23:2c:b9:70:c4:24:2f:30:6e:cf:3e:1f:a3:04:
         97:2f:7c:b2:b3:00:dd:78:19:46:77:d5:db:d2:4d:d3:eb:07:
         99:08:97:1d:9e:73:0e:db:53:94:2c:4c:f5:f9:c2:a5:1a:51:
         d0:10:b9:7a:33:c2:86:fd:a2:5c:24:bf:fd:19:d7:27:69:94:
         3b:08:17:53:c8:c1:f2:be:5c:38:6d:13:c8:81:3a:b8:25:34:
         e8:53:59:42:65:d8:0d:2a:b1:b1:e7:54:fa:2a:d5:5e:b9:df:
         20:04:6b:8c:4e:8b:bc:a3:79:b6:b0:d8:76:38:00:74:bb:69:
         0c:ab:bb:d3:11:5a:81:91:a2:85:f7:81:00:71:b7:9d:d0:b0:
         34:8e:4a:ce:ce:81:85:5a:e8:dd:59:f0:10:0a:56:fd:4c:79:
         18:ff:88:bb:fd:d3:b0:2e:f1:98:77:93:9a:7c:ac:66:25:e9:
         cd:cc:a1:4b:ba:f1:47:cd:3f:c8:fc:21:fb:a9:ef:52:bb:9f:
         ea:36:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:40 2025 by rpki-client