Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File:                     6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier:          p9UjPptkND0L0FALtdJDZ5CPW+TNoZn4Y+KHzXFYmSs=
Subject key identifier:   4C:8C:BB:95:A9:A6:C0:FE:6C:23:0A:00:11:EE:EE:18:AE:15:A5:C5
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer:       /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial:       019A05C8C5BBE7E34D6EB0C4A5A87C9B453D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number:          16EC
Signing time:             Tue 21 Oct 2025 08:00:35 +0000
Manifest this update:     Tue 21 Oct 2025 08:00:35 +0000
Manifest next update:     Wed 22 Oct 2025 08:00:35 +0000
Files and hashes:         1: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: Tbco1d1hSRSPGUG97rbpmK1Wi0VBsyBqPPr4EkKpVhM=)
                          2: HSuDnzcAlue63_e4y4OYNpRzfOM.roa (hash: 2RMQVOMX9MWINnX100maYIWBBtnYRoQ7hW/UubkuFuk=)
                          3: dseWtJsRtgXWG8ryLs-7XWYSHjA.roa (hash: dzJOgY0aN/2fDxN/Ny4dZY7HYiCJ2uahfS7o6nx3vAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:c8:c5:bb:e7:e3:4d:6e:b0:c4:a5:a8:7c:9b:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf760c05773c15d73676450344668fefb723447
        Validity
            Not Before: Oct 21 08:00:35 2025 GMT
            Not After : Oct 22 08:00:35 2025 GMT
        Subject: CN=4c8cbb95a9a6c0fe6c230a0011eeee18ae15a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:00:a3:b1:17:08:c0:e3:f9:b5:04:e8:a1:
                    d1:2b:e7:97:7e:8a:64:04:6a:1c:36:ac:7d:2b:5f:
                    1b:4b:97:50:61:5c:ff:f1:82:83:be:06:70:44:79:
                    5b:ee:05:f9:e8:ef:d0:36:78:bd:61:ab:95:2c:fa:
                    f7:46:0a:29:36:ee:e5:20:a0:23:08:50:91:d6:5b:
                    92:37:56:71:3d:2e:33:19:2a:91:a3:98:91:64:2c:
                    94:7d:04:69:ec:ba:ce:78:5d:79:6d:4a:e0:81:c4:
                    13:0a:e2:a2:9c:e8:94:ea:83:a7:e3:bd:f7:26:66:
                    d9:63:fc:98:91:48:6f:71:5f:7c:77:75:7b:15:9e:
                    76:5c:a7:58:3f:47:78:cd:b0:4e:e1:2d:70:d1:be:
                    88:9f:ba:ec:ac:d4:0b:ab:c4:11:e6:c7:91:b4:51:
                    f0:13:fc:92:d0:e6:e8:ca:ac:10:e5:34:4b:44:cb:
                    7b:57:5b:77:20:c0:48:10:10:5a:c7:cd:bd:e2:62:
                    d2:f8:b7:d2:60:93:03:64:c7:3d:be:08:36:f4:a2:
                    5f:17:94:ca:00:72:ad:b1:8c:69:54:d7:a7:6c:a5:
                    fb:a9:09:ff:ee:4b:ac:0b:a0:9c:50:7f:a7:b0:75:
                    e9:74:b5:ac:7c:ba:4c:22:0c:5a:0b:b5:0d:f7:e2:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8C:BB:95:A9:A6:C0:FE:6C:23:0A:00:11:EE:EE:18:AE:15:A5:C5
            X509v3 Authority Key Identifier:
                keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:da:86:4f:9d:8e:0a:a2:79:f2:12:a0:7c:35:5c:86:7c:
         93:de:db:48:ae:4d:69:03:35:9b:92:17:0e:7b:cc:b4:93:64:
         51:76:0a:86:eb:6d:f4:2e:13:ef:2e:c4:04:d3:69:6d:78:ec:
         05:4e:0e:15:8e:6c:20:75:02:bd:07:52:be:53:de:44:34:a4:
         16:31:d0:4d:b1:20:2f:c5:ad:0c:80:36:a3:b8:4c:5f:f1:ba:
         fc:2a:30:70:3d:62:0c:0f:7d:ac:46:22:58:ec:29:84:f5:26:
         17:8b:dc:57:37:bf:c7:22:84:43:b6:07:1f:17:f0:bf:76:60:
         a8:81:8d:d1:2c:70:eb:db:98:6e:1e:41:9f:62:c4:cf:1b:56:
         68:52:00:f3:43:29:57:75:86:0a:1d:30:2e:b5:29:8c:60:c4:
         e3:80:51:a1:df:07:6b:25:7b:ae:28:41:79:e1:98:62:2e:ab:
         3e:f1:82:95:8b:a8:1a:3d:b8:01:fa:e6:33:fe:23:e3:e5:49:
         2e:7b:0a:85:c4:6c:67:6b:9a:62:e3:fe:cb:f0:f7:0b:a0:9a:
         d2:ce:16:6d:53:17:fc:80:39:51:b9:7c:d2:36:b9:64:94:c1:
         5c:6b:af:88:1f:3a:69:64:8f:8d:7c:2b:3c:35:4b:f5:5b:31:
         0b:99:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:16:24 2025 by rpki-client