Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          jDUxnbNCw9vsAAIRW5I64hkhaP44kIYQoKQvdDEXRp0=
Subject key identifier:   E7:87:ED:68:B8:2A:34:9B:A1:C3:97:F0:F2:1F:89:2D:42:B1:61:E6
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       0199FBEC097645CD610AEAEBE82D0B24276D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          10DD
Signing time:             Sun 19 Oct 2025 10:02:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:54 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: ZdququybVd5uXskBl4M96BZBqIFo924hR71BgvDPurE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:09:76:45:cd:61:0a:ea:eb:e8:2d:0b:24:27:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Oct 19 10:02:54 2025 GMT
            Not After : Oct 20 10:02:54 2025 GMT
        Subject: CN=e787ed68b82a349ba1c397f0f21f892d42b161e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:d5:19:f1:b0:e7:7d:bc:7f:b7:af:69:8c:
                    3d:61:bb:0e:ac:d6:b0:73:30:05:c3:e0:f0:e7:82:
                    17:33:47:8d:88:da:0e:d7:83:03:a1:49:61:ba:b0:
                    86:6b:78:75:c1:04:61:e8:b1:9b:5f:56:4a:ac:5b:
                    6c:42:4c:93:c4:8e:cd:2f:62:96:6e:fe:55:e0:86:
                    3f:33:cd:a5:af:7c:0d:8a:74:cc:f6:7b:50:9d:bc:
                    aa:c9:b0:c9:3e:7e:fa:34:f0:77:e2:fa:b9:50:8a:
                    79:8a:90:a8:6d:41:09:06:03:da:1d:40:1c:0c:14:
                    a5:a9:1a:ec:12:91:cf:7f:8f:fa:c7:59:04:03:5a:
                    64:a1:17:a4:fb:6a:ae:0a:59:f5:a3:bf:ba:f9:fe:
                    02:d4:5c:bd:01:a9:5b:45:1c:61:88:e9:81:2a:88:
                    7f:ba:74:be:c6:ef:d8:f0:03:4f:9a:99:db:59:a0:
                    54:33:2b:12:ac:e4:2f:23:4d:ad:f4:1c:0f:7e:5c:
                    73:d8:d3:14:7f:ce:7c:6d:ff:97:85:c7:0b:80:27:
                    90:c0:5a:c1:a8:c9:6a:9a:55:fe:b9:95:0d:c7:3a:
                    54:58:64:be:c4:62:29:4a:29:b2:c5:54:29:31:a8:
                    8f:2e:ba:d8:17:3a:34:8b:d9:99:65:5c:98:76:46:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:87:ED:68:B8:2A:34:9B:A1:C3:97:F0:F2:1F:89:2D:42:B1:61:E6
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0c:7e:d0:5e:40:28:25:0d:0a:26:3e:92:c2:a7:db:c4:82:
         70:2e:56:15:4e:6b:c6:ed:ca:6f:7a:dd:e3:12:52:9d:35:2f:
         03:2e:0d:24:2f:18:c3:ab:60:f5:0a:66:2e:0d:32:a7:78:47:
         97:d9:41:e3:af:00:c1:d5:9b:2a:57:ef:1c:a4:22:28:3e:61:
         43:5a:41:c6:ec:0b:8c:db:13:9e:dc:c3:af:3f:3a:10:ee:1b:
         b1:99:ab:19:47:a4:fe:8b:d3:f4:03:9e:02:4f:d9:c6:9d:98:
         ac:e4:b5:5c:57:f7:2a:52:ba:b5:8c:d3:e4:74:01:7f:2d:d9:
         04:55:92:9d:92:0a:a6:79:d4:86:f3:5e:bb:9b:51:90:6f:6b:
         12:ea:06:7e:2f:d6:20:5a:95:e6:eb:49:3b:77:e2:7c:0c:6b:
         23:d4:a7:cb:fa:ff:a1:0c:d7:c4:17:ac:55:7d:2d:44:40:be:
         76:f8:ec:26:14:86:df:46:e0:97:51:ac:ca:59:fb:2d:5c:28:
         58:c5:83:c7:4c:d7:18:b1:08:69:07:08:8b:41:05:60:d1:43:
         9e:f0:f2:f7:03:6d:0f:bd:96:53:98:3b:fb:f1:ef:3c:1e:ba:
         aa:aa:55:cd:5a:1b:f1:37:2f:f7:e3:fd:25:0e:e3:6d:1a:75:
         02:be:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:11 2025 by rpki-client