Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          qaURCPNsb5mS8mJJ4eOv44ccJ18ss1i5VgUO1AzLArc=
Subject key identifier:   E5:7C:98:8F:F7:1E:04:6C:94:BD:90:B9:42:0D:84:B8:D8:BC:E1:22
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       0199FEB4F364E2248BAA2B945FBA01AF71F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 23:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:35 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: 1AzRZ/53pW/d5A9QfTyYgDX/accNvQ0jaAhqql8VwDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:f3:64:e2:24:8b:aa:2b:94:5f:ba:01:af:71:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Oct 19 23:01:35 2025 GMT
            Not After : Oct 20 23:01:35 2025 GMT
        Subject: CN=e57c988ff71e046c94bd90b9420d84b8d8bce122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:67:37:25:35:a5:bb:7f:d6:50:d2:49:21:
                    23:8e:00:6d:49:34:38:43:55:e7:af:d1:9b:4e:bd:
                    84:90:6b:ff:57:7e:8e:2f:43:9a:4e:6f:61:a8:8e:
                    a6:92:00:16:16:e7:25:cb:0c:a2:94:4c:6c:5d:d4:
                    e5:12:17:38:43:57:a3:e5:f6:b9:76:78:d8:91:51:
                    5d:de:c9:01:7a:99:7e:0c:93:06:26:13:77:40:b5:
                    e6:72:01:ce:7b:cb:48:8c:4f:e7:d2:96:d8:66:7c:
                    0e:4d:c5:2c:6e:8f:ee:14:a5:b9:0c:96:2b:c3:47:
                    b6:6d:df:8b:fe:9b:de:b7:c6:de:80:f2:35:f2:11:
                    99:7b:54:28:a5:ff:0b:2f:56:28:0a:30:d1:e8:bd:
                    2c:90:c7:3f:7c:ff:08:a3:73:f0:08:22:ec:4d:57:
                    d6:90:2e:48:b4:2b:8b:00:05:57:2b:e3:32:82:2d:
                    29:de:45:c1:e1:23:f2:bc:43:98:15:3f:72:56:fc:
                    c4:5c:4e:0f:3f:ec:83:69:08:7c:42:cc:e4:ca:1d:
                    a9:b5:c6:71:cd:7d:cb:b9:5e:6b:e3:2f:1f:5d:df:
                    09:05:42:de:a7:eb:d2:0c:99:92:ce:74:f0:90:6b:
                    4e:a4:f8:54:3e:42:7b:c9:39:38:84:93:53:97:e2:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:98:8F:F7:1E:04:6C:94:BD:90:B9:42:0D:84:B8:D8:BC:E1:22
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:14:0e:ba:de:9e:d5:e7:9f:2e:b3:03:31:e4:68:ff:ae:
         72:33:4e:38:d6:8c:02:e1:40:84:3a:bf:99:2c:d4:b4:57:0a:
         b9:51:6e:1a:7b:e0:90:31:58:24:3b:e3:d2:e9:be:66:60:9c:
         34:b4:68:96:e4:40:c6:b9:18:f8:c0:e5:f7:e4:f4:36:8d:87:
         2d:17:15:23:58:ab:64:3c:a6:1d:fa:4c:88:78:09:2e:a7:ae:
         a2:6a:61:0b:44:74:a8:72:22:a8:df:8c:49:f2:be:79:cd:62:
         99:ab:27:fd:61:72:d3:b5:67:95:dd:4b:a7:73:ea:4f:59:2c:
         95:96:af:3d:5b:d1:47:ca:ec:03:ff:7b:a3:26:0f:48:7a:bf:
         4c:c9:36:f2:4a:0f:b7:cc:2c:0c:e7:aa:07:95:af:c7:6c:6b:
         82:f4:30:58:87:18:54:bf:7e:11:a1:e1:90:70:6b:e0:fe:80:
         98:44:e8:8b:94:a5:56:b9:7d:cc:e2:0f:78:45:1b:b9:40:d9:
         b9:5f:93:60:99:e3:44:53:d1:94:3e:d8:51:c9:8f:91:cb:8e:
         a3:67:b6:f1:90:2a:e5:37:fe:3a:02:7d:d1:85:15:e4:a3:34:
         4d:a7:fb:c2:e7:e7:ee:f6:ff:98:7b:eb:74:45:b1:49:d1:33:
         16:74:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:10 2025 by rpki-client