Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          pfLPLozN5Qez4fak10EV4TJg1/DNsKL5U3fcTzaXMro=
Subject key identifier:   83:90:15:E4:AB:DC:DE:36:6F:D7:D8:E7:F8:B1:F4:FF:13:51:0A:98
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       0199FEEBBEBC30F949A852E6FC12A8DEB348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          0564
Signing time:             Mon 20 Oct 2025 00:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:26 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: +yxxhR1ZWMDKJ14HU3X/QtQxxeWDlt72X/25GKJeEmk=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:be:bc:30:f9:49:a8:52:e6:fc:12:a8:de:b3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Oct 20 00:01:26 2025 GMT
            Not After : Oct 21 00:01:26 2025 GMT
        Subject: CN=839015e4abdcde366fd7d8e7f8b1f4ff13510a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:2c:7f:6e:9d:7d:b6:19:72:c1:f6:1a:f5:
                    d1:28:2f:2f:ce:ba:c0:28:9c:91:f0:d6:2c:9f:60:
                    27:fa:b0:b4:ee:99:76:8b:7b:da:40:c0:e5:af:53:
                    05:e9:ac:27:9c:9d:7d:14:86:1b:e8:b7:7c:86:fb:
                    39:64:51:53:93:95:15:48:65:fa:97:ba:e9:38:a6:
                    58:9e:d0:ed:25:a6:88:5f:94:c8:b1:dc:43:e3:2f:
                    8d:2a:80:c0:30:cb:4b:80:59:63:cc:d2:5d:18:e2:
                    58:eb:19:2d:45:c6:e4:3c:dc:b6:ec:cb:44:2d:96:
                    a7:3e:07:9e:54:42:25:cc:bc:b8:2d:2f:6c:ac:ff:
                    2f:aa:0e:75:2a:66:95:35:44:c5:ae:14:0b:d5:1a:
                    0e:7d:29:6b:c0:f3:c6:59:9c:c5:05:3c:65:33:41:
                    9c:c3:f7:28:18:e3:97:c6:b2:8b:9f:f2:20:0d:bf:
                    3a:b5:2d:6f:d1:16:d8:fc:28:94:e9:34:58:c5:dc:
                    e4:d1:4a:2b:31:72:df:43:e8:77:a7:df:95:4c:a6:
                    32:42:a8:14:28:c1:46:6f:dc:f1:30:09:47:5f:89:
                    37:e6:07:85:82:58:bc:f6:b2:b4:ff:ba:14:af:60:
                    a6:e1:02:cf:5d:3f:68:1c:a8:ab:bf:a5:ed:ea:04:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:15:E4:AB:DC:DE:36:6F:D7:D8:E7:F8:B1:F4:FF:13:51:0A:98
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:69:17:3e:e8:74:e4:86:f2:19:0b:78:8b:bd:76:50:28:1f:
         a9:89:58:7a:ba:06:9c:f9:a9:e3:fc:22:e6:5e:70:f0:7d:a4:
         67:1a:80:ca:ba:ce:a1:f5:01:a0:4a:3c:ec:92:4a:f3:f8:8f:
         ab:29:7c:e0:24:b9:51:a5:f2:09:39:1c:e0:f2:3d:0c:a0:8d:
         cb:0b:1e:34:13:a4:c6:85:e8:a3:e7:0f:ef:98:84:ae:f6:00:
         6d:1f:55:6a:92:3d:ad:f6:2c:65:c0:a4:c7:9e:44:6f:a0:b9:
         a9:eb:f8:9d:76:b1:1a:a4:a0:83:88:f5:13:a8:c4:cc:c6:e2:
         10:45:7a:ad:26:26:37:3f:bc:56:1b:be:a8:11:fc:6b:87:14:
         c8:d2:fb:ee:80:5d:bb:39:50:50:71:b8:27:10:ff:95:b0:ec:
         81:fb:c2:c2:9e:7f:43:d2:5b:cc:b1:2f:79:d5:ca:81:34:02:
         c0:3d:d0:93:87:bd:00:f2:fd:8d:d0:c9:fd:09:56:ac:d1:a4:
         ab:e6:9b:c7:b1:f2:80:4f:d9:ad:68:d9:59:10:2d:f1:5e:87:
         77:88:08:1d:5e:3a:a6:40:3c:9e:bd:f8:b8:9d:46:4d:d2:6f:
         e2:f2:27:ca:8f:c6:72:a6:1c:eb:3c:de:fd:99:9d:9a:05:58:
         09:7c:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:47 2025 by rpki-client