Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          X7frUo8CfjE240ZKMJTQX3W2jVwKDC5+nF27+spPcss=
Subject key identifier:   1F:C9:60:93:EB:7C:01:4F:6E:0B:20:83:86:69:6A:A3:DD:04:24:7F
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       0199FBEC116F6F8989B37D376BB4C77350A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          152D
Signing time:             Sun 19 Oct 2025 10:02:56 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:56 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:56 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: qsSrDfMVZW5nxAlOvYHRz69XxH+ZHN1jY7zhw3yF7Mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:11:6f:6f:89:89:b3:7d:37:6b:b4:c7:73:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Oct 19 10:02:56 2025 GMT
            Not After : Oct 20 10:02:56 2025 GMT
        Subject: CN=1fc96093eb7c014f6e0b208386696aa3dd04247f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:2f:8b:05:56:8a:de:0f:33:5f:5d:f5:ac:
                    d6:88:0e:ad:20:2d:e1:57:75:6c:1d:52:e3:16:a7:
                    84:e9:89:72:be:de:98:3b:56:35:d6:05:a7:ad:c3:
                    42:1d:74:76:7d:15:fa:fd:9a:19:95:47:1e:27:98:
                    96:ca:10:d1:d9:a3:f6:6d:36:7a:e0:32:d8:90:03:
                    c9:f7:ad:dc:f5:92:31:7f:fc:02:9f:d6:4e:7b:40:
                    c4:fd:3a:cc:d7:7d:7a:9f:90:dd:3e:7f:71:22:e2:
                    e7:d8:20:85:5c:e5:28:05:a3:8d:c7:d3:2c:70:3a:
                    ac:53:59:f3:c1:e4:30:ca:ed:9e:3a:a2:1d:02:2b:
                    d8:7c:9b:37:89:18:45:b8:79:1e:e8:1f:fa:57:86:
                    cb:dc:f3:71:3d:30:b0:31:c9:65:40:82:5c:92:e0:
                    41:0d:80:cd:ba:5a:9c:cc:a8:cc:66:62:7f:c4:72:
                    4a:4e:b3:bc:7d:a7:a3:9e:d6:e9:6a:d3:9f:44:2f:
                    65:53:6e:6a:50:a6:45:33:b4:db:8f:2a:32:b4:dc:
                    d5:97:e0:85:5d:7e:21:a2:f8:d5:db:87:06:c6:1e:
                    d7:fb:0e:1c:76:2e:de:84:74:e8:d1:fb:6f:54:94:
                    7c:68:d8:ce:a2:06:2f:0c:52:35:d4:04:9b:f9:8a:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:60:93:EB:7C:01:4F:6E:0B:20:83:86:69:6A:A3:DD:04:24:7F
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:8c:bb:1e:c3:47:5e:d8:86:0e:1c:57:e5:73:11:32:08:
         7b:99:a6:19:c5:c5:75:43:ea:cd:db:33:d5:99:4c:b8:8f:1d:
         a7:c4:2b:4c:a8:0c:09:36:aa:e1:71:b6:9d:7a:b5:6b:3c:89:
         a3:2e:43:07:97:5f:5d:64:86:57:fe:3a:a8:e7:b4:f2:66:64:
         0e:2b:87:8b:92:a2:69:dd:e1:bb:4d:95:70:13:79:66:1a:db:
         1b:97:e6:96:5c:ad:01:32:54:5b:8b:d5:85:47:5b:1e:42:a7:
         c2:5f:4e:66:ad:72:48:7b:fe:32:ee:f5:be:d3:2f:9a:71:a4:
         72:50:2f:f8:5f:5e:98:4f:d1:38:02:51:40:2c:ba:aa:5f:51:
         99:f6:e7:ab:e6:49:04:ed:25:90:ca:e8:84:c8:9a:18:59:3e:
         cc:3f:6d:fd:94:20:7e:8a:0c:3a:bb:21:a0:f1:b7:ad:ff:f2:
         aa:16:45:b1:f0:89:7c:95:ba:6d:08:ca:63:56:e1:ed:0c:dc:
         01:2e:c7:08:c1:50:3e:39:6c:47:bd:a4:ae:80:e7:3c:1c:cd:
         d9:d1:e9:c6:ac:34:bb:d0:89:18:1f:b9:fc:bb:53:73:ca:a8:
         71:63:2a:6e:e7:a0:0e:d3:2b:e1:14:e0:56:43:35:12:52:04:
         a0:4b:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:00 2025 by rpki-client