Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          6xOcvs8kc2qW8mDmZzi8EmT2hF7HP0uAvFoZUqJwHA0=
Subject key identifier:   E7:80:A1:E6:48:93:69:53:3F:71:A8:63:28:55:C8:A7:56:EA:68:58
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       019A711321E384427507CA8B72A31EFB7770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          0B2B
Signing time:             Tue 11 Nov 2025 04:01:10 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:10 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:10 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: UtsY8CrJKKXGKTcG2bvs7ds4ztEekLnxHyJQVx3ejWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:21:e3:84:42:75:07:ca:8b:72:a3:1e:fb:77:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: Nov 11 04:01:10 2025 GMT
            Not After : Nov 12 04:01:10 2025 GMT
        Subject: CN=e780a1e6489369533f71a8632855c8a756ea6858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:0b:ab:f3:41:ee:4c:b8:6c:8c:4f:6e:d6:
                    3f:cf:85:ab:30:93:a7:94:ea:4c:44:f8:00:b5:41:
                    98:7b:7e:48:0f:00:d0:79:77:7f:bf:51:bc:1b:f4:
                    6d:25:be:18:04:92:99:7d:b3:d7:a0:47:ad:3b:67:
                    c4:ac:60:1c:01:c4:ad:1a:0b:9b:2c:f8:09:97:ab:
                    68:17:8e:e3:cd:f8:22:a5:cc:e0:83:59:97:2a:1d:
                    41:b7:69:24:32:23:af:5c:0a:70:ee:69:16:0a:61:
                    7a:0c:6d:9d:fa:72:c7:da:0a:ac:4b:25:a0:0b:30:
                    8e:c5:0a:ac:fd:e8:63:2e:1b:4b:79:7a:9a:14:03:
                    0a:47:ff:ae:47:5e:84:18:5f:8e:76:61:35:c0:bb:
                    47:b1:48:93:9a:f2:e1:d3:08:c9:c1:59:23:6e:fd:
                    5c:68:36:01:7e:b7:5e:53:0f:0f:90:36:18:60:ba:
                    5f:9e:0a:06:8a:55:56:11:64:e9:3e:3b:b0:40:b4:
                    fe:6b:45:13:0b:70:30:0b:ee:d0:53:06:78:61:d6:
                    85:42:a4:e3:75:9d:15:a4:df:42:d7:fb:87:98:ca:
                    dd:35:c7:9f:80:5a:17:19:34:71:b8:89:fa:dd:d5:
                    f0:2b:20:76:ed:85:83:53:0d:b3:1b:7d:60:77:57:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:80:A1:E6:48:93:69:53:3F:71:A8:63:28:55:C8:A7:56:EA:68:58
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:48:a8:e0:da:db:3a:40:c5:9f:7e:41:34:7c:6e:b1:5b:
         84:24:79:ef:9c:20:ac:b6:78:17:b6:7c:c1:b1:86:a6:3e:72:
         67:96:71:d2:68:85:9c:5a:42:0b:a0:c9:ef:c2:67:19:6f:80:
         92:b5:3b:97:c6:22:a1:ae:3f:9e:f7:75:68:fe:2e:80:60:28:
         2d:b4:85:0b:6b:1f:19:f0:4d:64:87:c2:29:93:ef:e4:1c:27:
         16:0c:32:25:06:a6:3b:3a:15:c9:7b:0e:77:63:7a:12:16:6b:
         35:6f:2c:aa:20:6a:ad:5d:5f:35:57:a2:a4:88:13:65:e4:bb:
         39:3b:39:14:dd:65:ee:4b:7b:3b:37:6b:47:b9:e1:32:7e:d3:
         74:95:d2:0c:85:7e:60:a5:dd:98:c6:b6:2c:33:20:fa:e7:8b:
         1a:80:f9:df:f1:be:14:08:c4:2a:1e:61:1e:0f:fc:e8:41:7c:
         aa:f7:b4:35:58:1a:af:02:28:0d:70:0f:45:89:61:f3:50:67:
         82:55:e1:6e:91:c3:72:2f:6f:0f:26:5b:32:99:af:4e:75:27:
         fb:41:38:e1:12:b7:d9:fd:3e:00:1a:cf:68:b2:2a:1d:c0:da:
         4b:92:1c:99:d4:b2:bf:27:8f:94:6e:6c:a2:86:8a:89:53:41:
         ed:6d:f3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEyHjhEJ1B8qLcqMe+3dwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzU1MmZjNDVhMzY2NDA5YjlmYzdiZDk2MTNhNTlmMWZl
MDZlNGQwHhcNMjUxMTExMDQwMTEwWhcNMjUxMTEyMDQwMTEwWjAzMTEwLwYDVQQD
EyhlNzgwYTFlNjQ4OTM2OTUzM2Y3MWE4NjMyODU1YzhhNzU2ZWE2ODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz4Lq/NB7ky4bIxPbtY/z4WrMJOn
lOpMRPgAtUGYe35IDwDQeXd/v1G8G/RtJb4YBJKZfbPXoEetO2fErGAcAcStGgub
LPgJl6toF47jzfgipczgg1mXKh1Bt2kkMiOvXApw7mkWCmF6DG2d+nLH2gqsSyWg
CzCOxQqs/ehjLhtLeXqaFAMKR/+uR16EGF+OdmE1wLtHsUiTmvLh0wjJwVkjbv1c
aDYBfrdeUw8PkDYYYLpfngoGilVWEWTpPjuwQLT+a0UTC3AwC+7QUwZ4YdaFQqTj
dZ0VpN9C1/uHmMrdNcefgFoXGTRxuIn63dXwKyB27YWDUw2zG31gd1dq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeAoeZIk2lTP3GoYyhVyKdW6mhYMB8GA1UdIwQY
MBaAFOo1UvxFo2ZAm5/HvZYTpZ8f4G5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4Mzct
ZDQxYzNlM2MzNTU1LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4MzctZDQxYzNlM2MzNTU1
LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1FIqODa
2zpAxZ9+QTR8brFbhCR575wgrLZ4F7Z8wbGGpj5yZ5Zx0miFnFpCC6DJ78JnGW+A
krU7l8Yioa4/nvd1aP4ugGAoLbSFC2sfGfBNZIfCKZPv5BwnFgwyJQamOzoVyXsO
d2N6EhZrNW8sqiBqrV1fNVeipIgTZeS7OTs5FN1l7kt7OzdrR7nhMn7TdJXSDIV+
YKXdmMa2LDMg+ueLGoD53/G+FAjEKh5hHg/86EF8qve0NVgarwIoDXAPRYlh81Bn
glXhbpHDci9vDyZbMpmvTnUn+0E44RK32f0+ABrPaLIqHcDaS5IcmdSyvyePlG5s
ooaKiVNB7W3zWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:20 2025 by rpki-client