Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
File:                     Pc6p140_H8L7NcKeWD2ytrYqvDk.mft (raw, json)
Hash identifier:          Qan5H+dFqb11ekVPOeSiBqjM948WCt40LJaWDcBw2nk=
Subject key identifier:   5B:F9:3B:12:F2:2F:E3:C2:09:89:27:C6:61:90:C2:18:97:AC:EF:2F
Authority key identifier: 3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39
Certificate issuer:       /CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
Certificate serial:       0199FDD9FD036A8A167EBF3BF3EF5D2FF335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
Manifest number:          10C4
Signing time:             Sun 19 Oct 2025 19:02:25 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:25 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:25 +0000
Files and hashes:         1: Pc6p140_H8L7NcKeWD2ytrYqvDk.crl (hash: McWHIEX/WX1anZSmqVBjKTkeiYLHLqh4q/U+Xlfm/8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:fd:03:6a:8a:16:7e:bf:3b:f3:ef:5d:2f:f3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
        Validity
            Not Before: Oct 19 19:02:25 2025 GMT
            Not After : Oct 20 19:02:25 2025 GMT
        Subject: CN=5bf93b12f22fe3c2098927c66190c21897acef2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:eb:e9:8f:38:b8:dd:48:05:92:46:04:89:
                    03:4e:a0:7c:8f:9f:66:44:07:ec:9b:1b:fe:f8:16:
                    b5:45:d7:4f:cc:f3:2d:eb:ed:d9:f5:69:e3:a2:6f:
                    78:7d:e9:ad:5d:4c:75:78:7f:72:d4:40:2d:5f:57:
                    3a:3b:c7:a1:b2:46:51:58:94:8e:f3:b6:40:95:36:
                    ee:87:f7:92:da:b4:a7:84:ad:91:01:da:2c:63:be:
                    73:98:4d:9f:02:9f:fb:1f:85:6f:82:62:28:b3:f8:
                    71:5d:b9:b0:0a:e2:25:56:4c:d7:2c:df:ed:5c:20:
                    d8:4a:20:62:93:5b:b5:89:c8:84:99:20:6d:f7:1f:
                    14:ec:cc:eb:41:bd:8c:cd:88:6e:1d:9d:93:64:59:
                    43:81:61:25:37:3a:a1:17:5b:00:1a:07:21:f4:ec:
                    71:c9:ac:d3:18:5c:33:4d:f6:fa:e2:66:0d:96:26:
                    f3:f0:d5:9c:51:93:38:26:ea:cf:34:9a:7e:46:6d:
                    31:85:b4:c6:c1:a3:0e:d7:1a:e0:19:af:60:81:d4:
                    de:8f:49:a9:62:50:03:21:5f:80:f7:40:72:9a:12:
                    60:e8:94:ee:c4:1a:c7:2e:1c:ae:c5:7b:4b:b2:46:
                    f1:25:e4:c1:9b:cf:60:67:74:92:4a:51:c0:98:73:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:3B:12:F2:2F:E3:C2:09:89:27:C6:61:90:C2:18:97:AC:EF:2F
            X509v3 Authority Key Identifier:
                keyid:3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:33:9d:72:64:66:ad:95:20:13:b8:70:fe:73:a3:0b:3e:
         6b:d1:f1:9b:b9:38:1e:ef:12:e9:60:86:61:1e:a4:83:83:8a:
         a1:7a:5a:86:13:38:1b:5a:d1:3d:9f:45:40:b8:c7:39:5a:f4:
         4f:c7:a3:1c:68:10:55:d7:89:d8:26:ea:12:2c:47:f0:6b:bd:
         55:f8:cd:7b:98:56:24:d6:f2:b7:49:dd:81:90:e5:98:a9:e1:
         b8:96:4e:17:af:4f:7f:7c:aa:97:eb:60:92:e8:37:04:41:cc:
         c2:57:50:d0:dc:f1:98:81:79:64:e0:06:77:fb:a4:8b:cf:76:
         a2:95:b6:fe:5f:a2:a6:c0:3f:d2:49:00:e6:e0:93:f6:9a:5e:
         8e:a7:08:67:cc:29:97:aa:c9:f4:97:ad:91:bf:c5:17:1c:ac:
         a3:a3:fd:6c:7d:c4:68:26:89:3d:2b:e6:05:14:2f:c7:66:88:
         90:ed:b5:eb:81:14:46:e3:8e:6d:f9:8e:ce:a0:3a:d7:57:07:
         2a:48:cb:ee:2b:36:a4:24:c9:8e:9d:a8:82:6a:01:62:cf:2e:
         80:f8:6c:30:bb:99:73:d8:5d:c5:81:a8:6e:00:1e:78:35:b8:
         fc:d5:e4:1e:2a:e1:34:ae:6d:2f:6a:94:4b:60:76:93:c1:46:
         d7:cf:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----