Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File:                     6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier:          DFmiCHsriNNMA0tY6PNxlCsT4TSVHXJUdZI6vru5xa0=
Subject key identifier:   FA:7B:02:D8:31:B8:F4:E8:F3:3A:49:1D:73:57:6D:41:97:D2:65:03
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       0199FB460294100D9351EAADB5B648C5E6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 07:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:33 +0000
Files and hashes:         1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: E9EQKyWcoMgM3m4g+GKfo/yprQihV4/JuDURns6VcD4=)
                          2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:02:94:10:0d:93:51:ea:ad:b5:b6:48:c5:e6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Oct 19 07:01:33 2025 GMT
            Not After : Oct 20 07:01:33 2025 GMT
        Subject: CN=fa7b02d831b8f4e8f33a491d73576d4197d26503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:ed:66:53:97:9a:93:28:2a:6e:90:cb:81:
                    dc:fb:69:43:fa:f7:5e:2f:07:1b:ed:f0:85:98:40:
                    44:40:e4:55:f7:c3:e4:ff:c7:20:55:e8:77:90:e9:
                    81:c8:d9:d5:b8:df:d8:2c:c6:99:eb:26:2d:be:5d:
                    e0:4d:cc:17:0d:69:6e:cc:02:77:08:77:1b:b6:16:
                    3e:0a:3b:71:4e:18:96:ed:eb:dd:83:ee:97:db:de:
                    ef:28:21:94:90:d0:1c:7b:c1:6c:8b:0a:94:08:07:
                    52:16:9e:8d:c9:69:8d:08:55:b8:f0:7b:b4:3a:c7:
                    9a:c1:c1:98:b5:96:95:93:c4:72:d9:3a:b7:ad:c6:
                    99:13:ec:4d:b7:a6:5c:6c:30:20:ef:67:16:cb:6d:
                    0c:b1:52:28:87:29:93:bb:ca:90:9d:6c:50:82:64:
                    b2:d3:49:06:27:f3:20:5a:99:c7:fd:8a:df:37:fb:
                    f1:d4:a8:fe:b1:0b:9f:5e:9d:b3:a5:6b:64:b1:63:
                    30:2c:29:74:32:c3:d7:b1:6e:cf:1d:1e:af:43:b7:
                    06:b2:3e:b7:61:14:05:47:87:1c:a8:b2:1a:43:b0:
                    52:89:8d:ea:98:80:c7:02:ad:b9:36:b3:87:36:1b:
                    b0:bc:e2:99:98:d4:23:82:67:36:e6:d7:17:a7:67:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:02:D8:31:B8:F4:E8:F3:3A:49:1D:73:57:6D:41:97:D2:65:03
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:06:6c:38:c3:8e:af:bb:4e:79:f0:c0:4d:aa:61:46:dd:
         c4:04:b8:92:ab:66:45:f4:0f:6f:69:c7:a1:30:89:4f:dc:65:
         66:94:32:89:d6:80:3e:4c:85:88:6b:01:b8:2d:fd:51:66:21:
         67:af:e5:7f:f3:98:04:22:8f:27:ca:1a:fe:c0:d5:fb:10:02:
         ee:24:7d:0f:65:15:d1:5c:77:33:13:f3:cf:86:49:48:50:06:
         76:a4:f6:64:37:5d:3d:e9:a7:83:f7:d6:29:9d:58:16:b9:e6:
         94:57:4f:05:7f:8a:4a:bd:66:1c:26:f7:00:28:86:e3:ba:68:
         3a:e1:f1:7f:bc:a5:3c:f2:b0:0e:4b:85:80:bf:6c:45:f9:17:
         84:05:cf:ad:c6:d1:e7:ee:53:bc:6c:bf:6e:7a:08:94:b9:f5:
         81:9e:ab:8c:92:cd:64:83:a7:59:d1:68:ad:bd:ac:b9:e8:97:
         2e:3f:1f:5a:c1:73:d4:b5:12:bc:a0:1d:2c:06:33:25:e1:b7:
         90:cb:5d:71:e7:65:74:f7:7d:6b:af:8c:4d:fe:3c:24:e4:76:
         73:a3:aa:3a:e0:49:c5:c7:b3:42:8a:2b:6a:bb:8f:5f:12:a8:
         30:e4:a9:2d:4a:3f:bd:85:e0:6c:94:08:5e:7c:0f:93:fb:6f:
         eb:f1:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:45 2025 by rpki-client