Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          4Igy30kkV2czp2DXexO70Z81ZrV9rPh/ad8BImSjJgQ=
Subject key identifier:   C6:CD:31:18:99:EF:A6:C3:C3:EC:7A:5E:4B:B3:28:2D:9A:2A:0A:3C
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       019A270B36BB43DC800700D0C4CECF14CA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          06EB
Signing time:             Mon 27 Oct 2025 19:00:37 +0000
Manifest this update:     Mon 27 Oct 2025 19:00:37 +0000
Manifest next update:     Tue 28 Oct 2025 19:00:37 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: mDcCFyD9YXV7nduAoIu2HrAt0nqtAp8SSrvJVywfDk0=)
                          2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:0b:36:bb:43:dc:80:07:00:d0:c4:ce:cf:14:ca:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Oct 27 19:00:37 2025 GMT
            Not After : Oct 28 19:00:37 2025 GMT
        Subject: CN=c6cd311899efa6c3c3ec7a5e4bb3282d9a2a0a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:41:1e:ad:08:3c:94:7f:fe:ec:8c:75:63:
                    dc:7b:89:c0:16:cc:a6:4c:29:b6:e5:76:69:38:c8:
                    dd:dc:23:52:fb:6a:35:8c:62:2c:9b:a1:11:4d:0a:
                    44:5e:34:dc:88:d1:53:73:11:f8:fc:7e:39:3e:2d:
                    c4:d9:a1:6b:11:a1:bd:e2:1d:95:9f:89:d0:c8:b8:
                    5e:cf:35:29:9d:30:0c:32:0e:ca:92:f9:6f:ec:eb:
                    7b:ef:b1:e5:1a:db:df:3c:bd:b5:3a:de:d5:a3:18:
                    9b:b5:10:f3:8e:31:22:eb:df:89:03:7a:d0:34:18:
                    23:e7:80:2b:20:85:f1:e3:3e:85:56:1c:7e:c9:56:
                    99:2a:8b:8d:74:e4:d0:37:d6:10:d8:0c:1b:7d:d3:
                    06:cd:f9:70:0b:25:2a:54:57:ba:6a:a7:13:b9:89:
                    f6:0f:45:42:22:e6:c3:86:78:40:df:36:da:0a:9a:
                    77:65:75:7c:c1:77:5e:7e:5e:c6:9c:07:ef:f7:31:
                    45:59:19:68:50:5e:3b:99:01:51:69:69:ce:6e:ae:
                    db:0a:97:21:ee:0a:a7:10:da:68:c8:02:21:63:5a:
                    48:31:ab:37:43:f2:ba:d9:8d:d2:1b:51:80:91:50:
                    dd:13:68:5b:ce:56:2c:1a:6c:f0:be:0a:c8:49:bb:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:31:18:99:EF:A6:C3:C3:EC:7A:5E:4B:B3:28:2D:9A:2A:0A:3C
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:cb:b2:93:2d:99:9c:91:56:4d:44:dd:bd:99:48:36:e3:
         50:9c:50:85:f7:11:30:03:9e:68:dd:d7:27:9d:32:a9:ba:42:
         8c:98:a7:ce:c1:c6:cb:38:75:4d:f2:84:2c:78:d3:f2:8e:1c:
         4e:bb:80:2e:56:f8:1c:6b:c1:22:73:8e:41:4f:ef:26:e5:0c:
         58:68:27:85:67:eb:ef:3f:80:1e:49:47:68:34:d7:3c:e2:51:
         38:47:61:f6:fd:6e:05:cf:fa:45:04:e4:1a:d3:7c:25:44:62:
         ae:7a:1d:77:30:c5:47:bc:e6:e2:66:d2:db:9f:29:d9:8a:1f:
         10:d5:b4:51:ac:66:86:f3:d9:d8:6f:ff:e5:c8:ba:cd:3d:cb:
         28:18:bd:2f:a0:89:0a:24:a9:65:b2:e4:4f:b3:17:62:69:79:
         08:20:b0:9c:54:c6:f6:57:76:18:2a:37:77:8f:1a:9a:a9:70:
         b7:8a:b9:60:34:91:03:23:aa:8d:d1:d7:3b:62:ea:3c:92:cf:
         3d:5d:dd:60:7b:c1:e4:53:bd:e5:2f:02:2e:ee:9e:57:53:67:
         d8:62:9e:31:91:d3:61:aa:5d:b5:2a:0f:04:35:c0:b7:0a:3c:
         dc:eb:d7:e7:ba:e7:25:8b:53:ae:16:28:10:1e:56:66:da:a5:
         68:b4:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:00:18 2025 by rpki-client