Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          eTZaUcxLCJt+gR0uIIlV6gmNt6qpqjLaZmQzskoNBNk=
Subject key identifier:   82:28:AB:73:01:72:B8:90:4F:93:0D:B7:D1:E8:4A:E7:A9:C3:98:72
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       0199FCFD22BE98079046F3E6E0CF2E6CB15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          0472
Signing time:             Sun 19 Oct 2025 15:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:11 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: QSSvMpfy2DPzCPWS+sQIyCr7oAAAsczs+5dz8KDXmGo=)
                          2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:22:be:98:07:90:46:f3:e6:e0:cf:2e:6c:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: Oct 19 15:01:11 2025 GMT
            Not After : Oct 20 15:01:11 2025 GMT
        Subject: CN=8228ab730172b8904f930db7d1e84ae7a9c39872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:b8:4e:f8:42:f4:4e:ee:ae:d3:9a:f9:a3:
                    5f:dc:a2:e9:6b:29:f8:a5:81:8d:90:be:d0:aa:f7:
                    a8:00:4e:88:cb:ee:2c:39:e6:8c:41:35:6f:a5:d2:
                    c9:0f:40:85:2b:6f:ce:6b:b1:a5:14:37:d8:86:2d:
                    ee:fd:f9:27:54:02:ca:d8:20:dc:4a:8c:ac:78:f3:
                    75:86:25:5a:0b:e3:e8:d4:ea:8f:d6:bd:dd:cb:51:
                    3b:29:81:82:d1:de:8a:d7:bc:01:06:60:83:d1:48:
                    10:e1:f9:9f:0d:7f:08:2a:c1:4d:24:6c:4a:dd:30:
                    23:ef:66:c4:5a:26:82:b4:aa:f8:5f:0d:34:95:df:
                    96:f7:da:b1:3f:92:1c:0f:2e:4e:19:1c:92:f5:d2:
                    c9:d1:92:53:0f:8b:8a:91:67:f8:e6:6d:70:c1:ae:
                    9b:54:ad:b3:00:bf:b4:cf:fd:03:24:97:8d:29:b1:
                    71:1c:54:bf:2f:49:5f:8e:78:d5:f1:0c:c9:e3:9b:
                    43:87:3c:cf:31:4e:55:a9:1d:7f:0e:ce:fb:71:ef:
                    a8:4a:ba:c1:7f:aa:cb:b5:45:98:5e:ea:7d:94:9f:
                    8b:d3:b4:03:9b:01:a6:02:97:ce:4d:ce:ae:c2:4e:
                    6b:0e:0e:f7:04:d5:75:06:4d:00:70:65:d8:c0:bf:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:AB:73:01:72:B8:90:4F:93:0D:B7:D1:E8:4A:E7:A9:C3:98:72
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:02:51:03:55:af:77:ff:27:71:c6:e4:97:ad:fa:d2:bd:6d:
         6f:d6:e1:90:c0:eb:1a:06:17:92:15:d3:75:86:c8:33:d0:f7:
         76:7a:4e:b1:ca:26:51:ba:a1:ec:58:0f:20:9e:33:c4:a5:ad:
         d1:f9:23:d2:c6:b7:5d:e3:b6:ab:27:22:67:b6:90:f9:48:36:
         da:90:a8:d4:0f:f4:dc:c6:7a:11:59:d5:74:3d:4f:61:aa:c0:
         c1:b2:58:93:85:2f:52:93:53:78:c7:f1:33:92:9b:11:63:bd:
         82:6b:5f:f7:9f:59:50:c2:b1:18:97:0c:93:2c:aa:ba:d0:f6:
         43:98:ca:55:18:c0:2d:12:45:3a:62:b7:07:51:7e:6c:2e:7b:
         8b:a0:c1:a2:50:0d:6e:9f:e3:49:df:12:72:15:a9:de:ed:cc:
         f2:08:57:46:9c:a0:7d:d9:a7:d3:cb:94:bb:1e:90:a5:dd:f9:
         1c:4f:80:f6:78:33:de:31:8a:4f:6f:d5:89:bd:51:64:5f:f5:
         b8:a4:78:c3:6d:8d:4e:d5:63:dc:99:9f:b8:24:5e:64:d4:c5:
         66:8e:6b:2d:fe:36:fe:bd:30:97:ff:f2:de:26:79:e0:14:6c:
         05:db:ca:2f:2c:71:74:1a:02:a5:3b:8e:d3:70:84:10:9b:61:
         59:b3:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:48 2025 by rpki-client