Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          vw45Les8NQoy1iOAvpIvlU/nFM9alw6emoZk5Ke/s1k=
Subject key identifier:   79:62:05:B4:2D:E1:44:53:94:35:3D:E1:F5:37:94:A2:DB:CE:71:42
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       019A725C50E959AC67B0385854B6D03307F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          0472
Signing time:             Tue 11 Nov 2025 10:00:43 +0000
Manifest this update:     Tue 11 Nov 2025 10:00:43 +0000
Manifest next update:     Wed 12 Nov 2025 10:00:43 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: sciI8xfQ5tDkLEefxZX6TISlKEWzqveRqnqIBF88PKs=)
                          2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:50:e9:59:ac:67:b0:38:58:54:b6:d0:33:07:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Nov 11 10:00:43 2025 GMT
            Not After : Nov 12 10:00:43 2025 GMT
        Subject: CN=796205b42de1445394353de1f53794a2dbce7142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:44:36:b7:05:c2:8d:b8:d9:05:6e:19:86:
                    46:44:da:3a:27:c9:ac:41:4f:cc:5b:29:b9:0a:04:
                    b7:06:e0:e1:ff:63:14:3c:0a:f5:80:8b:70:f3:9b:
                    60:d1:95:33:9e:30:e7:ec:0b:04:82:09:a3:a5:58:
                    ae:c3:03:11:82:9a:5b:5f:1a:b1:24:c1:43:54:64:
                    81:2a:12:17:c7:c8:e9:cc:54:35:75:69:af:77:54:
                    da:87:a6:4a:b3:77:70:99:1d:1a:c1:81:7f:08:21:
                    c9:85:91:bb:c2:3c:05:0c:7b:0d:d1:90:67:9b:f1:
                    68:16:b3:0b:32:1c:41:75:ad:5b:e5:a0:4c:83:3d:
                    8e:66:57:67:0c:54:3a:96:d7:04:df:a4:eb:ed:15:
                    0c:82:28:2c:94:29:6b:f4:c7:0d:77:ff:ec:e1:18:
                    7b:bb:37:d2:8a:35:9a:a4:af:2e:a6:c4:3d:bc:dc:
                    59:30:80:30:d9:bd:4c:c0:99:8d:c8:4b:df:52:8e:
                    b2:ad:3a:13:59:1b:9f:0c:ec:33:7d:a4:fe:5f:be:
                    20:fb:c0:66:69:0c:1f:af:a8:0b:86:ec:97:b2:01:
                    ca:89:ec:b6:d3:8e:a8:c6:1e:db:39:e5:a5:31:e9:
                    ca:bd:84:b5:17:b2:66:1c:4e:18:28:4f:57:52:82:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:05:B4:2D:E1:44:53:94:35:3D:E1:F5:37:94:A2:DB:CE:71:42
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:de:16:8c:e2:59:27:33:bb:dd:b2:26:e6:5e:ae:5a:95:
         8b:9c:5d:f3:e5:24:38:cf:88:1f:69:99:82:be:95:d5:a8:40:
         3c:a9:1c:5c:b1:9b:99:19:d6:16:25:a1:60:2b:b2:bd:cd:07:
         7e:d4:22:fe:9c:9d:bf:1d:6f:09:f9:cd:70:2e:81:ac:7f:49:
         56:a8:4f:3a:3c:92:b2:99:10:ce:d4:35:e8:28:85:9e:14:49:
         ba:b9:51:ac:08:0d:2e:6d:cd:4c:fb:78:bf:2d:cf:c6:35:a0:
         0c:ba:8e:66:c0:dd:ee:45:84:45:6d:26:2c:5c:4d:09:3f:e3:
         c4:0a:d8:3f:2e:34:ac:de:33:e6:25:8c:4a:df:fe:e1:56:b9:
         a0:2a:fc:f6:8b:75:e9:29:0f:01:d6:30:71:b1:92:52:c1:e8:
         23:23:b4:42:ae:8d:27:5e:fa:a9:db:a2:5f:2c:64:b7:9d:e6:
         5b:64:65:a3:1e:04:b3:bc:2e:da:e3:46:2d:a4:4c:48:a9:bb:
         bc:00:b5:e4:11:e6:95:93:60:e2:28:26:b6:76:5a:93:25:a5:
         a2:38:a8:88:00:c3:15:52:1b:91:db:81:aa:36:fd:3a:bb:15:
         a0:96:5d:d4:ef:d9:00:cf:79:18:e9:cb:af:39:3f:f0:85:5d:
         e5:3e:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:21 2025 by rpki-client