Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          rNbQ0a3HiNnFYxE+8AeH3G1A4GyOqYGlBn2HE1yUDrQ=
Subject key identifier:   C5:BF:1A:13:68:44:15:40:5A:55:B6:3E:E1:B2:71:15:45:44:06:4E
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       0199FBEB6908ED3372BD434C34FAB5155669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0D39
Signing time:             Sun 19 Oct 2025 10:02:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:12 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: Po4jtqXdyAHOXJj/qFsal84/cwaiITbIIk3t2H5oRhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:69:08:ed:33:72:bd:43:4c:34:fa:b5:15:56:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Oct 19 10:02:12 2025 GMT
            Not After : Oct 20 10:02:12 2025 GMT
        Subject: CN=c5bf1a13684415405a55b63ee1b271154544064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:d0:84:67:b8:c4:35:b2:27:7e:40:b2:5a:
                    eb:5d:5d:7d:b0:a5:07:70:f8:e7:54:1b:5d:9b:c0:
                    e0:5e:c1:77:89:e2:8b:cf:cf:7d:9d:04:f3:fe:60:
                    77:de:a9:ef:4b:58:c7:cc:14:83:8d:f9:14:5e:10:
                    ba:7f:61:a4:1d:6e:b0:8c:2b:35:6e:98:f5:1f:3e:
                    8d:c4:3e:7f:c8:41:65:92:1b:92:fd:45:a2:df:8d:
                    61:68:96:56:54:af:38:81:95:3a:c0:54:a5:cb:5d:
                    dd:d0:a0:26:b4:95:f2:d3:ab:c3:f4:c9:f1:9e:64:
                    68:2e:76:05:8b:28:73:e1:67:2c:8b:24:6b:30:18:
                    a7:c1:b2:19:fa:67:15:75:63:0c:62:3f:cd:d6:73:
                    99:ab:8b:99:b4:ab:33:5f:c4:de:98:07:fa:05:56:
                    4e:d4:02:15:9c:78:01:e4:55:e5:ab:8b:a5:77:6f:
                    df:83:ff:62:cc:92:d3:4e:c0:f2:da:65:cc:a2:78:
                    a5:25:29:7b:88:13:b6:58:2d:c8:12:75:db:63:09:
                    9a:01:73:5f:7e:ab:2d:3c:61:65:50:ee:ec:48:39:
                    7c:2c:a9:8e:27:19:da:44:d1:c0:5d:6e:90:09:b0:
                    bb:ff:5a:27:69:6c:ed:a8:0f:9e:89:ac:61:9d:2d:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:1A:13:68:44:15:40:5A:55:B6:3E:E1:B2:71:15:45:44:06:4E
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:ac:5c:f1:de:c8:4f:7a:03:0a:19:4a:b0:2c:d4:4b:f3:
         28:d5:8e:89:67:f1:74:bc:77:2f:5a:94:28:b0:0b:35:b4:64:
         07:c9:ce:4f:97:10:67:8f:02:18:c9:21:93:3a:81:e4:11:db:
         55:9e:34:3f:04:64:b5:e5:e9:2b:30:28:7b:6a:47:53:33:11:
         01:b5:4c:b2:26:2b:ca:a0:cc:38:22:a7:71:92:6b:ee:25:38:
         45:70:5f:f3:f1:af:7a:0e:05:cd:82:3b:d8:78:27:bf:1e:9a:
         7e:dd:ca:57:62:49:47:53:18:ec:75:fb:07:5d:34:63:28:4a:
         a4:7f:2d:ec:a8:3e:26:6c:af:0b:c5:53:9b:e7:bb:38:c7:fc:
         3e:28:ab:6d:02:6e:cf:41:96:02:18:d5:ce:d0:fe:1f:e9:4d:
         d3:29:ac:fb:09:74:1a:4f:b7:e6:10:eb:1c:c1:fb:8e:0d:ed:
         c9:73:0e:00:1d:c5:8e:cc:59:48:63:88:94:e9:15:ca:7e:a3:
         86:c6:f5:40:01:dc:17:1d:9c:42:e7:de:b9:bf:a5:49:41:76:
         da:58:93:b0:5d:ad:96:a7:2b:2a:11:f4:a9:45:4f:8d:52:fe:
         a3:bc:09:8d:ab:80:73:b2:3c:1d:84:be:09:d0:3a:4e:d3:a5:
         16:7e:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client