Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          U9yRc6P6iuErHXhnejcIwNwKis7V2oywmBBr8e7V1vU=
Subject key identifier:   71:F7:E2:10:B0:12:C8:82:77:BA:D8:EE:17:3C:07:DC:04:FD:7C:D2
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       0199FE46FD7CBAE8DD324F8D3949AFA69551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          125C
Signing time:             Sun 19 Oct 2025 21:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:29 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: DaYOlLAGWCOJ+Vq9QMoNFOFGPXt6VR7GlRQ6YFjRdwU=)
                          2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:fd:7c:ba:e8:dd:32:4f:8d:39:49:af:a6:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Oct 19 21:01:29 2025 GMT
            Not After : Oct 20 21:01:29 2025 GMT
        Subject: CN=71f7e210b012c88277bad8ee173c07dc04fd7cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:29:6e:b6:b4:ce:b1:48:5e:32:1c:af:4f:
                    20:34:3d:16:d9:d5:a6:ef:c4:1d:1c:92:5e:7b:37:
                    89:be:ff:a4:6c:94:02:2c:7d:ef:b3:02:1a:3b:b0:
                    89:53:b6:92:f8:65:d0:69:4a:84:d9:32:f1:24:89:
                    28:a5:7f:a4:aa:39:fc:6a:2f:f3:1d:32:42:77:07:
                    47:00:65:b3:8e:7d:79:b3:e4:a4:45:02:09:55:a7:
                    79:b5:e2:a3:00:27:f3:9d:0a:a4:73:8e:99:35:8f:
                    27:86:08:ab:f3:e8:5e:53:51:59:d5:6b:f6:2f:d6:
                    33:4a:ab:8c:02:f6:cd:a8:4b:e2:41:5a:b1:d8:5a:
                    68:fe:10:3f:35:97:49:ba:30:93:ff:96:a8:0a:20:
                    23:91:7c:a3:0f:7c:cf:9f:bf:3f:c9:13:62:3f:36:
                    36:7b:35:61:31:56:ae:5a:8d:50:e9:66:ea:cd:9d:
                    96:8c:f1:6e:f1:e8:d6:80:b3:c6:fd:97:f6:29:36:
                    0b:7a:dd:fc:46:af:0d:64:9d:62:d1:ab:fc:0d:2c:
                    f1:77:9d:13:20:9f:8a:3e:02:50:d6:c6:81:72:9e:
                    ea:2c:9b:7d:a5:ee:e4:bb:3f:6d:f3:e1:6c:a0:2e:
                    4b:a2:e0:d8:f4:c5:70:53:c0:37:e5:ee:b8:e1:35:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:E2:10:B0:12:C8:82:77:BA:D8:EE:17:3C:07:DC:04:FD:7C:D2
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:73:c5:a4:38:4a:f6:af:c3:19:80:9c:e8:bd:11:9e:4e:
         86:65:61:8f:ab:2b:e3:fc:cd:5f:94:92:32:ef:dc:d7:bc:a6:
         0f:46:ce:e5:b4:ae:cb:67:c0:d8:7d:c5:1e:88:2b:54:c1:74:
         26:79:a5:b6:57:b2:d7:8e:46:0a:b7:06:75:5b:f8:14:e1:16:
         06:cc:10:56:ae:22:95:53:b2:28:c8:28:a2:91:1d:c5:11:ee:
         4d:fa:b1:d9:5d:b0:7d:4c:ae:ee:ab:64:cc:fc:65:e6:54:49:
         98:35:35:24:b5:1a:cf:6c:7f:43:e5:e3:61:4b:10:87:6f:77:
         e3:9a:44:c5:6c:aa:b7:86:68:5e:74:94:bb:08:24:da:c7:f7:
         f8:09:88:b9:d7:4c:70:6d:0c:c9:b2:45:38:73:7f:21:d9:81:
         95:3b:b1:03:26:08:40:a6:9a:fb:2e:3c:51:bf:ca:d9:dc:c4:
         68:11:1b:e8:fb:87:3f:97:37:e1:72:1c:5e:61:47:10:3a:b2:
         a6:78:3c:62:c6:6b:44:a8:0b:85:ed:f8:57:8e:7c:a0:23:b6:
         ff:4c:15:b7:4b:9d:f9:d4:24:4c:9b:c5:ce:52:cb:c1:91:20:
         1b:e0:16:37:11:03:08:2f:52:74:19:05:ba:4c:29:2a:48:ee:
         f3:d0:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:20 2025 by rpki-client