Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File:                     o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier:          Yc87WLRmluEdxcpYpoCbCNwD0avUiG6zh1CritIemmo=
Subject key identifier:   C1:06:74:52:48:05:6A:25:13:93:E1:D1:11:76:9F:C5:4E:BF:88:94
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer:       /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial:       0199FBEB064553B95AE7D625E2F4DE216939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number:          0FD7
Signing time:             Sun 19 Oct 2025 10:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:47 +0000
Files and hashes:         1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: ELny1RTSQ/3e6HtHno/rjKRz2TXkcr3YrlFI56YVKT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:06:45:53:b9:5a:e7:d6:25:e2:f4:de:21:69:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
        Validity
            Not Before: Oct 19 10:01:47 2025 GMT
            Not After : Oct 20 10:01:47 2025 GMT
        Subject: CN=c106745248056a251393e1d111769fc54ebf8894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:49:87:4d:50:18:37:5b:34:b3:14:ba:06:
                    00:1a:1c:9b:dc:32:ea:27:c4:3c:de:b5:12:dd:d3:
                    21:64:01:76:d6:24:c7:e5:2c:d0:8c:3a:3e:71:9b:
                    eb:95:57:cc:31:cf:fb:56:73:40:10:54:d7:42:38:
                    60:17:79:eb:36:ea:c6:c4:a8:05:e5:54:45:9e:6a:
                    28:22:09:d8:bd:d1:15:5a:b2:78:f5:64:24:ff:71:
                    8c:76:88:a0:54:0d:1c:48:e5:af:29:df:a5:c5:0e:
                    60:24:6e:89:6a:21:73:5f:cc:ff:f2:4d:80:f5:6e:
                    27:44:0a:ed:d5:a9:fa:f4:c3:7e:e4:5f:47:4b:f7:
                    a2:ea:e7:3d:45:6b:51:4c:c8:d6:ff:25:3c:8e:e1:
                    be:53:c3:4d:31:7d:8f:fb:c1:a3:96:4c:6d:18:b0:
                    ae:12:27:d9:ef:46:7b:20:c6:ee:f2:3d:64:74:54:
                    e1:8e:78:60:3e:67:4d:f0:75:54:e7:ad:20:c1:86:
                    73:61:94:4a:b5:ee:c7:43:85:a1:c5:6a:0d:4e:83:
                    2d:33:90:f9:cc:12:25:24:f3:fd:ab:20:28:67:03:
                    e5:ce:1d:3e:08:24:56:40:59:21:47:88:59:97:c6:
                    30:54:75:5f:62:44:c5:e7:42:7c:15:38:70:66:6a:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:74:52:48:05:6A:25:13:93:E1:D1:11:76:9F:C5:4E:BF:88:94
            X509v3 Authority Key Identifier:
                keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:5a:94:f2:ea:39:39:e4:2a:0f:dd:15:42:e5:c4:e9:31:
         9d:08:1e:0a:6f:73:44:5c:cc:11:71:e8:dc:6b:27:d4:90:65:
         32:37:89:1f:b1:09:10:20:e2:61:dc:7f:4d:d1:32:fd:9f:5e:
         d9:9a:10:80:ee:91:9f:62:85:91:ee:a1:08:39:03:72:0a:99:
         12:d5:3d:73:aa:76:df:73:08:a5:31:d0:3d:44:95:8d:0f:4d:
         d8:da:5e:c3:c6:fc:58:b0:49:bf:d9:14:70:45:a5:bf:c0:09:
         40:38:49:12:9d:98:f5:03:c1:c8:9e:75:61:66:bc:0a:1c:0e:
         d4:a2:72:81:68:3a:19:5d:d5:c7:74:14:ef:d7:b4:76:f3:5c:
         f6:23:59:d9:fa:13:1c:39:a0:34:3b:b2:69:cc:68:f6:e8:b2:
         b0:19:8b:ec:42:4e:1f:36:8d:18:73:0e:0d:12:df:2f:a6:7c:
         02:62:6b:82:37:91:29:87:77:14:f5:04:a2:84:e1:f8:1f:18:
         0e:d2:8c:fb:45:e7:4e:d5:c8:e0:87:5f:6d:01:2a:a2:08:a4:
         51:96:ab:ac:8c:85:b1:86:ad:a3:84:39:da:fe:a7:2e:fe:93:
         ef:e4:db:23:28:00:54:47:c7:82:a6:8f:cf:e2:c4:42:85:30:
         2a:ad:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:04 2025 by rpki-client