Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          7RyvzlDZMsq9mnIJXUrIov7+AiLOfGYrhU8Db5m+Qpg=
Subject key identifier:   D1:E2:08:25:19:6F:2A:B8:2B:D5:12:D9:B7:03:FF:C0:F6:89:79:0B
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       019A7301358FE765F8A4A52FA721B9F7BFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          171C
Signing time:             Tue 11 Nov 2025 13:00:50 +0000
Manifest this update:     Tue 11 Nov 2025 13:00:50 +0000
Manifest next update:     Wed 12 Nov 2025 13:00:50 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: 538WcMb9DQtNglHVRrYEWEA4U0H4wi5VZXeb6q6xjJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:35:8f:e7:65:f8:a4:a5:2f:a7:21:b9:f7:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Nov 11 13:00:50 2025 GMT
            Not After : Nov 12 13:00:50 2025 GMT
        Subject: CN=d1e20825196f2ab82bd512d9b703ffc0f689790b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:11:8b:d8:26:07:f2:ed:21:b9:20:dc:f6:
                    53:60:d0:c4:97:da:60:11:13:2b:92:f1:a8:b6:25:
                    a7:3d:e6:7c:14:69:81:6f:3d:0d:d9:f9:8c:2b:3c:
                    0e:b8:0f:d6:07:f8:b9:2c:cf:7d:e9:9c:aa:be:79:
                    56:4d:56:74:22:48:c3:e5:3b:ee:f9:16:62:18:78:
                    4c:b1:06:b4:68:1b:9f:8b:33:50:39:4c:c2:1d:ac:
                    56:58:7c:69:0f:0b:d6:36:5a:2d:c2:06:e4:58:2e:
                    02:9d:2b:e9:6e:c4:9b:69:88:51:bd:fd:0f:22:18:
                    0c:a8:06:2a:5d:43:ca:4e:e7:0d:45:58:b7:5c:ac:
                    38:4c:38:f6:38:9b:9a:59:34:41:57:c7:8a:2b:0d:
                    fa:cc:f0:e9:4d:65:b5:fe:f2:b7:05:4e:5e:57:42:
                    86:2d:58:d4:94:f3:ca:90:fd:1e:9c:2c:6f:0f:1f:
                    0f:84:12:17:26:a2:e6:6c:37:08:ac:1a:1d:5b:0f:
                    30:49:9f:fb:ba:14:ab:31:30:be:94:a6:d6:8f:73:
                    2a:49:11:03:4a:92:26:63:82:5d:f5:43:04:9e:e9:
                    26:0b:7e:aa:85:d9:68:c2:bb:0f:20:92:34:ed:0f:
                    85:f7:23:51:90:64:1e:62:16:b3:13:6b:7f:24:ae:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E2:08:25:19:6F:2A:B8:2B:D5:12:D9:B7:03:FF:C0:F6:89:79:0B
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:b6:46:67:46:2d:da:23:fd:37:a9:b4:18:17:39:2f:6f:
         ad:c3:b3:75:6f:66:a8:61:dd:13:d8:fc:db:a6:72:b4:73:83:
         8c:58:4d:ff:5c:65:a4:04:32:9a:7a:9d:ca:de:d6:6b:78:c7:
         7c:82:03:d1:72:67:f8:46:e1:f4:12:e5:92:c9:74:b0:51:66:
         63:9e:da:be:72:e7:d2:c9:cc:10:5c:93:57:8a:f3:c1:82:4c:
         e8:b3:02:96:70:01:c1:69:e7:31:4f:7f:45:91:b0:36:22:05:
         18:ff:08:7e:d0:16:c7:47:54:42:5a:20:c8:c6:22:11:ed:cd:
         e1:1b:0e:a6:7c:ad:0b:f3:a4:59:8a:96:58:a1:92:c3:0d:e6:
         34:09:d5:b7:3b:78:c7:6b:9d:96:9b:6e:25:88:99:ae:94:24:
         d6:5d:3e:05:64:b2:18:eb:d3:23:8a:e8:54:c6:8f:84:9b:5b:
         80:2e:99:47:cd:86:fc:37:99:7c:33:23:3b:33:97:84:97:06:
         86:c8:eb:08:49:b2:2c:78:df:a7:b4:92:4f:58:79:68:a3:ee:
         7c:e3:2d:99:13:19:82:c2:12:34:7d:54:07:76:a8:09:33:b0:
         06:da:9a:14:97:ea:6c:ed:02:44:5a:fa:90:b2:78:30:8d:cf:
         09:44:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client