Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          /+NaO4e2lSVIJZW896FbtTUORzZc8/+G6cf2Ad1sEEg=
Subject key identifier:   78:AC:33:8A:AF:B1:3B:B0:C4:8B:84:73:31:EC:C7:C7:C1:9A:8A:E3
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       019A73384164062C600E70651C0DE2B153B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          171E
Signing time:             Tue 11 Nov 2025 14:00:57 +0000
Manifest this update:     Tue 11 Nov 2025 14:00:57 +0000
Manifest next update:     Wed 12 Nov 2025 14:00:57 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: yFbWTewSNbhYqjP/YrqJZnHouRUK9acgUvSslQ9SGJU=)
                          2: geha7iQ1rH3EuPcaRcUifOKzQvU.roa (hash: +mhm2AbX83eujN7tnN0AlZkDl8/zUPKZGbQPpl0Ndlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:38:41:64:06:2c:60:0e:70:65:1c:0d:e2:b1:53:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Nov 11 14:00:57 2025 GMT
            Not After : Nov 12 14:00:57 2025 GMT
        Subject: CN=78ac338aafb13bb0c48b847331ecc7c7c19a8ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:2b:74:c9:51:72:c9:4b:b9:41:ec:52:14:
                    1d:75:6e:56:59:83:df:69:fc:7d:d6:bf:9b:78:9b:
                    cf:58:5f:61:7d:df:8f:77:49:c8:68:54:c7:f2:1f:
                    ed:05:f5:24:a0:2d:19:98:c6:97:a7:67:f1:d6:98:
                    2e:9c:cf:e0:7c:1f:db:3c:c0:9d:73:a5:43:25:10:
                    f6:10:f3:dd:95:39:af:04:b8:84:e8:d9:e9:d0:ee:
                    01:17:e7:64:34:a7:59:2a:ea:1d:5b:17:0e:41:44:
                    65:74:ba:0f:4e:9b:cc:d7:d1:14:ea:20:a5:a6:bc:
                    d6:a8:aa:d4:ea:62:04:00:40:24:3c:69:fd:d4:ac:
                    82:cf:de:b3:28:6c:eb:74:66:3c:2a:fd:09:25:e6:
                    92:73:23:31:bc:ef:c6:38:2a:0f:fe:06:a1:70:f1:
                    b6:86:12:50:b8:ce:c3:92:36:e0:6e:97:63:51:b9:
                    00:13:56:2f:0f:e2:d0:61:fd:b2:63:d1:7c:f9:1a:
                    45:44:1c:bb:92:9b:f5:98:77:ef:1a:14:c3:6b:4f:
                    66:0e:2e:90:ac:32:0a:0b:2c:dc:09:4c:bb:44:9f:
                    6c:c4:03:19:71:53:03:9a:73:51:b8:e9:9a:00:59:
                    5e:3e:90:02:cf:f9:1d:62:b6:4e:38:51:ff:5a:69:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:33:8A:AF:B1:3B:B0:C4:8B:84:73:31:EC:C7:C7:C1:9A:8A:E3
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:c3:02:fd:02:5b:14:a1:a6:56:1c:2c:f2:8c:a8:74:98:
         99:7d:58:aa:65:a3:f7:e2:92:02:35:ee:4f:a2:6d:f6:2c:c2:
         8c:b6:a4:50:a3:e7:92:d9:3c:52:ab:68:a5:0f:7f:e4:6b:ac:
         45:72:63:a3:b9:43:73:c9:20:ab:69:ea:46:c7:3d:ce:a8:6c:
         63:2c:76:93:42:fd:80:e1:f0:90:68:63:1e:6b:5e:c3:a7:52:
         34:c5:02:ca:83:8c:c7:a5:dc:9c:d2:82:68:9c:f3:cb:f8:03:
         b6:4c:44:d0:16:ee:69:f2:62:56:b0:bc:fd:bc:71:cd:46:95:
         fc:0b:54:c6:db:d7:92:49:ca:13:7e:e8:54:cd:7e:8c:02:a2:
         24:56:27:0b:44:63:5d:45:64:70:8a:7c:60:d0:d1:3e:d3:15:
         82:12:ee:69:67:04:6d:bd:c8:6a:e7:fc:14:38:76:63:08:97:
         fd:b1:cc:ff:17:8c:4d:44:f7:66:29:42:36:ee:63:c4:be:bb:
         5f:65:45:d3:38:ac:4a:c9:0f:6a:6e:04:6c:d8:e3:b9:62:64:
         86:8c:6a:15:43:3d:b8:2e:d2:df:5f:d1:e7:55:fc:2b:ad:52:
         53:b5:a2:75:76:68:28:ff:b6:28:25:92:71:c1:26:65:6d:7b:
         69:91:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:20 2025 by rpki-client