Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          U2MCuUfPwhUv4WiugqFvPcxhAJkV+xNBz8S9Ns3puwE=
Subject key identifier:   1F:A0:83:46:0A:37:0C:55:0C:4F:6A:F7:88:B0:B1:9F:B9:FF:83:5E
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019A71B81D467B86F47E5B895275A33A793E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0EB5
Signing time:             Tue 11 Nov 2025 07:01:22 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:22 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:22 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: ajU/PLA83u/ZXB63pzzowhHfEhoGWJE/fDXOmvpzMC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:1d:46:7b:86:f4:7e:5b:89:52:75:a3:3a:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Nov 11 07:01:22 2025 GMT
            Not After : Nov 12 07:01:22 2025 GMT
        Subject: CN=1fa083460a370c550c4f6af788b0b19fb9ff835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:e6:ba:20:b8:5a:0f:b4:f4:19:f4:fe:16:
                    69:c9:0c:55:92:28:fa:35:b0:68:16:9c:2e:b0:10:
                    50:54:35:19:54:ea:05:21:c1:7b:28:06:af:85:0b:
                    89:4d:ea:e6:0a:2e:45:84:8a:9e:eb:0f:cf:63:03:
                    00:63:0a:dd:01:b7:48:34:e4:cd:5b:09:ea:5f:82:
                    13:ba:03:20:33:a5:9f:f9:1c:0d:57:03:dd:c1:b9:
                    55:2b:37:cf:13:47:15:22:d6:14:8a:49:46:89:cf:
                    03:4a:e2:66:cf:65:70:89:6f:60:89:b4:02:73:2d:
                    02:63:6b:2c:8b:3c:61:a2:1f:0a:13:98:37:99:ab:
                    61:75:35:56:82:97:63:8f:07:da:0f:12:72:b2:08:
                    ec:b7:30:0d:75:ca:ac:4a:d2:24:06:f0:fa:7b:b1:
                    ec:db:32:1f:e1:76:87:3d:2b:9c:88:a9:4e:80:ad:
                    9d:ee:2d:f7:bb:8b:19:ec:43:e8:d2:f7:45:86:0b:
                    bc:aa:a6:82:22:9a:10:47:35:83:2c:8f:52:d3:f7:
                    a0:e1:ec:34:06:44:f7:9d:09:3d:aa:d6:7e:d9:48:
                    72:d6:2d:3b:16:7a:10:b0:d5:67:58:6b:02:37:39:
                    b4:64:18:3c:be:d4:61:1b:fe:53:84:36:f8:51:b6:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A0:83:46:0A:37:0C:55:0C:4F:6A:F7:88:B0:B1:9F:B9:FF:83:5E
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:3f:c7:b9:01:c6:7d:6e:b3:51:a3:37:f3:d3:dc:e0:65:
         be:ef:86:c1:e7:ea:65:fe:4b:01:af:a1:d7:e1:99:c3:e9:a2:
         19:93:62:fa:6c:5f:84:b9:66:85:43:c5:ad:e0:89:fd:6a:e1:
         2a:a3:68:2e:96:63:55:bc:6e:84:31:25:d2:53:9d:bb:25:da:
         ce:75:0a:e7:a9:64:3f:7d:40:53:66:75:2a:df:6d:39:d6:3e:
         ed:3f:83:6e:a8:cc:b6:26:5e:9a:69:4f:10:f4:ab:76:8a:50:
         42:6f:cd:a6:ea:e3:5f:e6:f2:38:b7:76:2a:95:7f:2a:7d:67:
         d0:45:c4:b9:04:15:a9:56:6e:b7:03:ae:17:74:61:1b:4d:3a:
         56:19:c6:05:da:14:8f:11:17:32:38:16:bf:22:85:a8:55:62:
         7d:24:1e:f1:d7:83:91:09:36:9b:51:32:b0:3f:04:04:2a:3f:
         23:1e:b1:df:72:ad:80:c4:e7:bf:4f:dc:3e:f8:2d:8f:77:e6:
         f3:6d:0c:33:38:b7:89:78:93:ab:02:65:e5:80:86:da:a6:c7:
         59:1d:34:08:7d:d8:52:9f:97:82:7b:76:65:26:d0:d2:a3:77:
         a8:4d:13:45:33:d4:e8:e0:c9:2f:48:2b:1c:56:a2:b3:3a:03:
         90:6c:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:02 2025 by rpki-client