Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          St0iy+Uq31HlPcOnGzGX56xWia1blxhVoxdlb3MnJRE=
Subject key identifier:   61:2D:6C:D2:D2:FC:0C:9D:2B:EE:59:D2:29:B2:F5:4B:AB:70:BC:16
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       0199FB7C932B9725F8D578CA86FDC3B919EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          063C
Signing time:             Sun 19 Oct 2025 08:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:09 +0000
Files and hashes:         1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: SQHAH90Y1hk3YmvJsj0PxbElhT79wYwbP/LMk4fdNoo=)
                          2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:93:2b:97:25:f8:d5:78:ca:86:fd:c3:b9:19:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Oct 19 08:01:09 2025 GMT
            Not After : Oct 20 08:01:09 2025 GMT
        Subject: CN=612d6cd2d2fc0c9d2bee59d229b2f54bab70bc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:94:bd:1a:31:f9:ec:99:b3:56:15:c6:82:
                    e6:ae:2a:80:f2:47:c6:b0:23:39:60:c7:1c:9e:5a:
                    0e:8d:b5:d6:62:36:2f:eb:20:cc:a0:9e:5d:73:dc:
                    7f:5d:c1:6c:f4:ff:f3:9d:6d:25:0b:a3:3a:f0:0f:
                    31:b8:a3:a3:33:ab:51:ce:2f:c8:8f:62:f2:bb:3e:
                    fa:b9:ff:a0:7e:ec:0a:e9:7b:23:6a:45:ae:0e:c1:
                    a4:94:2a:b0:74:cc:65:c9:87:70:6d:da:c2:94:17:
                    cc:21:02:b7:ef:7d:b5:1d:80:9a:5a:0c:6c:e6:66:
                    9b:a6:41:e9:b8:1d:02:30:c8:2c:4e:9e:83:a0:21:
                    35:d8:ba:8e:f7:ee:9e:60:e5:2e:71:62:bc:77:6e:
                    57:5e:28:b0:7c:f1:d8:ce:b6:53:8e:1d:c5:ff:9f:
                    78:b2:9f:5d:31:a5:66:67:c6:79:e2:45:2b:00:cb:
                    82:b9:8d:30:fc:fa:ca:71:b3:27:bd:9c:24:67:0d:
                    2e:e8:68:09:d5:23:03:70:55:28:b6:fe:ff:29:6b:
                    37:64:63:72:26:aa:4d:bf:52:0f:79:c6:41:aa:b6:
                    c7:49:95:0e:8a:2f:93:8a:1c:82:09:ac:84:fc:67:
                    9a:f1:b2:11:40:1b:54:7c:fa:67:4d:4a:3b:c9:eb:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:6C:D2:D2:FC:0C:9D:2B:EE:59:D2:29:B2:F5:4B:AB:70:BC:16
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:01:c9:fd:77:6b:23:04:3b:6c:64:d9:65:99:38:5f:d5:22:
         2a:9c:9f:fb:30:15:22:d2:8c:c4:cb:e5:6c:f1:67:7d:a8:f8:
         7a:97:47:2e:91:15:33:37:b5:00:09:da:7c:6f:54:a9:85:ee:
         49:bf:16:ac:71:6e:9b:25:16:cd:fc:84:ad:c8:bd:79:c8:5d:
         6e:b2:ca:b1:bd:e0:b9:84:5d:11:e9:06:d2:5d:99:90:33:36:
         34:93:7e:1c:04:c7:59:0c:14:b6:8d:c6:8d:00:d1:6a:c0:3f:
         50:eb:19:41:da:43:84:16:60:5b:58:68:98:4d:cc:74:b0:a8:
         f6:c3:83:09:be:5e:d9:84:3c:52:e4:1c:1e:84:25:6d:71:78:
         31:87:61:aa:94:06:54:0c:c6:ab:91:a4:40:68:45:7c:44:b1:
         ec:0f:ef:5d:2d:80:3b:11:27:06:18:49:11:f1:60:9d:be:81:
         4c:6d:31:fa:cb:78:86:84:25:34:e7:d4:56:33:13:19:86:b0:
         58:91:82:cd:b9:1f:2f:94:bd:07:fa:10:85:6b:a8:5d:6f:a1:
         21:4a:85:97:ba:2a:2c:ea:fc:a2:32:2e:18:fd:a7:66:ad:d4:
         2b:b8:2f:cb:70:92:29:91:e8:8d:7e:09:9d:7c:5d:c8:cb:a9:
         2d:e1:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client