Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft
File:                     6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft (raw, json)
Hash identifier:          J1JNTrNP0j/ZvEpRPgDyYDVqL4/rY/LYLl/OwejxiPQ=
Subject key identifier:   0E:5D:5F:CB:3E:43:CC:AF:98:91:6E:AA:D6:A1:FB:D2:8E:0E:68:9E
Authority key identifier: EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44
Certificate issuer:       /CN=eb24898306204f71afd87634cc6955bf42bb5244
Certificate serial:       0199FAD7D95D6FF283DC02A486E2FC627552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft
Manifest number:          4A
Signing time:             Sun 19 Oct 2025 05:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:13 +0000
Files and hashes:         1: 6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl (hash: 6Rifp/cbPfaqmlBVqND3R6RSHJ2bB9XIdrpY/rsMDzs=)
                          2: qO0k87ULVQHqjyZI3z-AzfehUQA.roa (hash: bRSYStNZUlGTKFFQvDFiatgcJ/Z8Rwo+cSilPb5oWow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:d9:5d:6f:f2:83:dc:02:a4:86:e2:fc:62:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb24898306204f71afd87634cc6955bf42bb5244
        Validity
            Not Before: Oct 19 05:01:13 2025 GMT
            Not After : Oct 20 05:01:13 2025 GMT
        Subject: CN=0e5d5fcb3e43ccaf98916eaad6a1fbd28e0e689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:4b:f2:f1:ca:c5:3e:83:05:2f:15:5c:7a:
                    d6:7e:bc:c9:e5:2d:2f:29:e5:70:f9:3f:7d:a2:49:
                    65:57:34:59:33:d0:2b:e0:8b:4e:a3:34:8f:98:7e:
                    a3:3c:51:78:56:6a:03:3e:62:5e:44:d4:52:db:e7:
                    9f:7e:fd:c2:17:18:a0:1c:2b:e2:02:3f:58:50:47:
                    d9:b0:7c:40:a5:1e:ee:b7:36:4f:49:1f:e3:5a:cb:
                    98:d0:25:90:ca:eb:41:36:89:5a:14:89:31:e3:d8:
                    99:98:b5:87:91:e8:0a:3b:8e:b4:7b:10:4b:42:72:
                    77:4c:f6:e2:36:85:f7:73:1f:b3:9a:c5:74:7c:e7:
                    b3:87:9d:49:f7:c0:36:6b:48:38:59:2a:ce:aa:14:
                    b0:e3:4c:6d:cf:1b:01:db:0e:54:06:08:57:e0:07:
                    22:41:03:f8:df:cd:4a:5e:f9:6c:83:6a:44:0f:fa:
                    39:15:b1:f9:c5:82:0b:d0:9a:be:51:d7:49:67:dc:
                    5d:f0:84:a7:e1:e9:ee:65:7d:3b:63:54:62:28:08:
                    47:bd:1c:61:3d:79:25:e8:a5:af:f2:84:4b:4e:87:
                    20:ac:0e:e8:87:34:f2:4a:e0:95:c2:ce:80:98:3c:
                    a1:15:45:32:16:df:17:af:31:85:ba:31:bb:7a:77:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:5F:CB:3E:43:CC:AF:98:91:6E:AA:D6:A1:FB:D2:8E:0E:68:9E
            X509v3 Authority Key Identifier:
                keyid:EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:72:50:15:88:a8:db:cb:a7:13:39:5a:6f:33:84:df:a3:
         4a:92:42:c8:f8:5e:e5:8e:2c:8f:3f:80:e8:dd:05:42:c8:01:
         5a:84:6f:4f:c9:83:55:43:d9:60:6e:36:d6:6d:bb:b6:bd:cb:
         83:b3:30:28:86:77:b2:3f:a5:0d:7a:a3:93:d6:27:3e:b8:dc:
         b9:dc:1f:94:da:e8:22:88:bb:34:82:73:1b:e0:b4:dd:85:0d:
         72:71:15:30:28:9b:50:1f:50:a0:e3:94:91:70:91:0c:9b:52:
         14:5c:e9:4f:ee:92:26:44:e8:1e:1b:98:a2:29:f2:48:b9:6b:
         93:c8:1d:bd:c3:85:c5:4b:48:fa:ab:58:3a:64:36:e6:38:b5:
         56:60:fd:49:5e:c8:d3:f6:18:58:ed:b3:08:be:3f:a4:dd:e2:
         c0:64:1d:92:87:ab:4e:7f:64:d8:f5:d5:0e:ad:89:bd:d0:98:
         73:8f:50:b6:7b:c1:62:ba:91:4b:3f:19:49:f3:67:22:9c:a7:
         89:29:a3:62:77:b7:17:e8:ef:f6:24:b8:48:2b:b0:e9:42:eb:
         17:26:84:9e:d2:4d:b9:88:cc:cf:57:03:49:09:a0:cb:a5:d2:
         2a:1c:83:66:d4:6d:74:4b:74:88:6b:a1:42:12:d0:ac:f3:47:
         65:e6:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:00 2025 by rpki-client