Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          RcheVO5oKXJW/pqg7Qb1pZXhn3hLWGWfLI+AX0Svaec=
Subject key identifier:   21:D6:70:F0:FB:A4:16:94:1D:5F:FE:CB:EB:BB:32:B6:85:B6:B6:4D
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       019A71B8EAD2255DF2EC6F744D68B07D3562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          067F
Signing time:             Tue 11 Nov 2025 07:02:15 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:15 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:15 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: Ucu3rQbFAv418iYwxsMmUWp9KuLtuSNXHCbFqHsI68s=)
                          2: bZmXrqNyZ8AqEyFlE3XBS1-1gJo.roa (hash: aUsLyT1xm0BEqckeaf+LnCJ77YIIEkSZJAG2IbM/gAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:ea:d2:25:5d:f2:ec:6f:74:4d:68:b0:7d:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Nov 11 07:02:15 2025 GMT
            Not After : Nov 12 07:02:15 2025 GMT
        Subject: CN=21d670f0fba416941d5ffecbebbb32b685b6b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:be:b1:13:23:b2:66:4a:b3:38:5a:61:1c:
                    63:81:2d:0c:e8:d9:e6:29:45:d0:24:d9:de:b4:1a:
                    66:10:47:a1:0b:a1:6c:27:82:c9:48:78:8c:80:fc:
                    94:cb:95:00:d5:38:ff:29:53:44:0b:74:ff:0a:32:
                    f1:6b:da:26:50:ab:46:f9:12:d4:da:d0:dc:e8:00:
                    ed:47:48:8f:3c:c4:f8:f5:66:c5:a9:3b:f3:17:1d:
                    97:89:91:9e:29:74:da:ae:68:19:40:81:e7:7c:a7:
                    ce:29:cc:e8:b3:fb:89:d1:af:bc:0a:79:3f:5d:7f:
                    9c:d6:a8:be:35:4a:02:78:78:95:a2:3c:2c:b0:05:
                    d7:7e:0d:e9:1f:df:58:39:1f:79:3c:9b:90:ff:19:
                    44:1d:54:e4:61:cd:5e:01:8d:79:8d:ec:d9:f9:b3:
                    2f:3e:ae:28:14:75:2c:4c:62:1e:c0:26:39:76:67:
                    36:1b:93:d6:e9:1e:10:3c:47:6c:1a:2f:48:8f:10:
                    fe:3b:70:88:db:8d:1c:ae:03:f2:f9:13:2e:39:07:
                    11:e7:2a:46:fe:36:2f:da:b8:a3:84:26:d7:79:1c:
                    3a:d8:cc:2a:a2:07:ef:54:c5:ac:d6:02:a8:a2:02:
                    e2:b0:b6:80:2f:67:17:87:9a:3a:1b:02:8a:0a:22:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D6:70:F0:FB:A4:16:94:1D:5F:FE:CB:EB:BB:32:B6:85:B6:B6:4D
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:4e:5a:63:35:b8:c5:a4:a6:14:cf:ad:17:e5:73:cb:05:
         b3:cb:dc:4f:e0:e5:6c:fe:ef:b5:35:ae:54:54:54:27:09:8f:
         da:a3:41:89:eb:4d:25:c4:6a:1d:b0:b2:7f:b3:b0:4a:2a:13:
         a5:ce:1a:69:55:3f:1d:71:29:e8:02:04:af:71:82:a1:7f:0b:
         c7:13:67:e6:c8:23:31:45:46:dc:a7:fe:ca:cb:85:60:66:b5:
         e9:6e:ba:d5:7a:59:45:35:a5:f0:d3:15:ff:78:c6:2e:24:e3:
         4a:fc:09:ad:f7:54:9c:21:68:f1:f5:6a:4e:a6:bc:5a:31:fd:
         d1:fe:cc:a8:a3:be:95:1e:9b:81:1e:d8:96:30:f0:14:5e:41:
         91:4f:e9:2e:18:10:73:53:70:07:cd:5b:a1:7f:22:9f:16:03:
         5f:75:5b:32:f2:9c:b9:30:09:94:d0:9d:0c:8d:48:94:e2:d1:
         0e:96:a3:6a:aa:9a:d4:84:3a:6b:20:de:c4:cd:ff:dd:d5:c5:
         bf:5c:c9:e1:b1:ca:0b:3e:21:10:ad:54:18:bc:59:a6:d4:84:
         dd:49:e0:f8:7e:f1:30:47:7f:96:0a:0f:87:a8:f5:69:c5:14:
         6a:68:18:0d:f9:d1:7e:37:d6:9d:f3:9c:19:9b:90:d5:72:22:
         2e:4d:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client