Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          aEEPQ2zUIf+K1NQVS0qJgr2Mx8aVTkmcPOnlxUE4V3s=
Subject key identifier:   DA:AB:06:AE:60:1B:98:A2:38:5F:C6:F8:D4:5F:40:8D:DA:58:96:5B
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       019A4D06901140486FEBA27B886F8074D3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0B56
Signing time:             Tue 04 Nov 2025 04:01:06 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:06 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:06 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: NoL2Y1J1qUxeGxjCmMsK1+9IRRSvRZ6K2k0Xlrecp9E=)
                          2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:90:11:40:48:6f:eb:a2:7b:88:6f:80:74:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Nov  4 04:01:06 2025 GMT
            Not After : Nov  5 04:01:06 2025 GMT
        Subject: CN=daab06ae601b98a2385fc6f8d45f408dda58965b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:a6:bf:c8:41:51:86:97:5d:72:d5:ea:ee:
                    e2:1f:9e:de:e8:2e:37:0e:de:3d:07:26:c6:56:98:
                    ce:0d:ba:c9:7a:0f:a8:e2:f9:cc:a3:25:7f:f0:75:
                    ed:cc:67:8e:a3:c2:8f:76:ef:7e:a8:c2:c2:08:5b:
                    cb:72:d2:79:99:8f:e8:b8:7d:79:7f:38:5c:6c:89:
                    4d:08:09:f9:17:3e:1f:96:75:4a:54:8d:37:85:60:
                    69:60:b7:c4:f1:ae:db:9e:fe:dc:6b:67:b3:d8:89:
                    fc:5b:1f:44:28:8b:68:d8:d9:73:22:d1:d9:89:1c:
                    f2:1b:ac:42:93:92:0b:74:38:f3:b3:39:94:0c:40:
                    7e:72:f7:84:ba:48:6e:fe:18:4e:97:4c:f8:ea:92:
                    6d:6a:51:c1:eb:95:c8:1d:1f:ed:47:b8:ed:58:a1:
                    b5:45:22:3b:01:12:10:12:b6:0d:f6:8f:d0:ea:59:
                    19:61:7d:bf:2f:1f:35:2a:30:7b:08:d1:32:01:d7:
                    c9:5b:0c:63:5e:7b:e7:af:74:fc:84:ef:cc:e0:ee:
                    aa:4b:8e:6e:db:e4:a9:ef:85:28:52:85:48:9d:3e:
                    fa:d8:8f:a2:51:33:ad:19:e3:9d:65:7d:3e:10:64:
                    a3:00:bf:f2:b6:d5:9b:15:b5:33:c1:ce:25:1b:2b:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:06:AE:60:1B:98:A2:38:5F:C6:F8:D4:5F:40:8D:DA:58:96:5B
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:f4:fd:b6:e3:77:da:e2:b8:61:96:b5:eb:31:7f:ec:68:
         e8:00:d7:56:6c:99:1f:1a:3b:24:d0:9c:aa:79:06:f3:41:57:
         e8:64:49:14:1a:c2:21:74:9f:1f:15:95:14:84:48:89:d4:c9:
         43:2b:c1:c8:a7:69:89:63:9b:99:cc:b6:8f:3f:64:f1:8f:00:
         cc:31:ff:12:6a:9c:fe:07:06:43:af:3d:df:4c:22:78:14:38:
         c1:f2:6c:26:79:25:76:95:5c:d7:0f:8f:7b:44:c2:9c:1d:e3:
         d4:5c:1f:9d:88:a7:13:3d:69:69:2e:2d:31:69:75:2f:81:67:
         65:da:bf:ed:c6:0c:02:38:a3:ae:e7:23:07:d3:07:cd:3c:3c:
         85:ca:a6:a4:21:eb:b7:09:13:5b:1f:48:51:9c:40:42:e0:9d:
         94:a8:16:81:9f:01:40:98:38:b1:6d:8a:30:9d:96:07:cf:4b:
         97:8e:15:88:02:5f:fc:dc:fe:b7:de:d8:8d:09:e6:9f:a7:15:
         fd:5d:12:4c:2b:d6:d8:0d:5a:02:86:7c:2a:d0:aa:09:23:bf:
         58:cf:1e:a3:d2:ce:20:45:ea:1e:41:4e:b5:da:5c:d0:97:83:
         69:d5:cf:14:0c:4c:47:49:c2:69:47:74:39:ae:b2:47:f2:3b:
         3a:13:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:47:41 2025 by rpki-client