Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          maW0z32XMLd3GzeblUY2TPRUhM/r0eBzCUDHAZpC5UU=
Subject key identifier:   79:11:CB:97:AC:BC:2C:DB:14:40:EA:0C:6E:3C:39:56:CC:13:C6:64
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       0199FCFDB3B5EFA5E6F7879EBBFA68606E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          0EF1
Signing time:             Sun 19 Oct 2025 15:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:48 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: h/1KF3xXmuLS8RLGXqdrdWjb1F8BkWtCS2cO1g6xM/Q=)
                          2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:b3:b5:ef:a5:e6:f7:87:9e:bb:fa:68:60:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: Oct 19 15:01:48 2025 GMT
            Not After : Oct 20 15:01:48 2025 GMT
        Subject: CN=7911cb97acbc2cdb1440ea0c6e3c3956cc13c664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:5a:f5:07:7b:b6:7a:d3:5b:c0:cd:d9:bd:
                    37:dc:38:af:bf:9c:7b:61:f5:b6:cd:e8:8c:78:38:
                    1d:cd:37:14:86:73:19:4f:f2:84:d4:32:07:f7:16:
                    53:51:e1:6d:60:12:7d:42:b8:18:ce:42:ca:e9:2b:
                    ac:c8:8f:4b:75:02:7d:83:1f:0a:f2:86:c0:59:24:
                    fc:c6:be:a8:85:b2:a6:dd:d9:d8:ba:e7:8b:9b:7f:
                    9f:90:94:b0:ac:14:06:ab:9e:23:7a:81:f9:93:9c:
                    2f:b9:ff:13:b3:35:24:f3:a9:f7:5c:45:94:3e:f9:
                    8b:93:db:57:fe:36:cc:d1:92:59:05:dd:4a:a4:70:
                    e0:9d:a9:f5:4f:ac:78:58:fa:d6:e7:10:2e:e6:5e:
                    dd:7d:91:b4:bb:e4:ab:2d:1a:97:a5:ef:69:75:dd:
                    33:98:e6:6b:21:37:a5:7b:25:84:ab:6e:53:24:7d:
                    cc:72:a6:1a:63:d8:59:16:f2:44:20:5b:37:24:36:
                    0b:88:85:54:9c:52:d0:fd:68:b2:74:d3:bd:76:3c:
                    1c:9c:82:3d:53:48:f1:85:48:fe:d7:ef:ef:37:ae:
                    27:4f:98:43:2e:cc:f6:f4:94:84:a7:aa:4a:68:1b:
                    50:0a:e5:ee:e3:f0:4f:68:29:5a:fe:09:38:6a:b4:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:CB:97:AC:BC:2C:DB:14:40:EA:0C:6E:3C:39:56:CC:13:C6:64
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:fa:21:6b:25:8e:52:4b:d2:27:9d:07:53:d6:5e:c2:e5:
         c7:71:7e:9e:fd:87:da:49:49:07:a3:42:ac:82:61:8d:1b:c6:
         60:80:66:68:a3:38:e3:83:69:70:f3:9a:72:3e:1c:d0:05:a0:
         b9:6c:b5:e9:69:0f:f7:10:60:1e:fd:b5:fc:3a:1a:8f:27:bd:
         59:6d:c6:31:98:08:0a:84:97:8d:18:1a:49:3c:27:89:ee:0a:
         c0:72:5c:6d:5b:e8:ef:54:ff:f0:31:78:c4:e5:83:e2:df:fe:
         25:5b:3a:e0:84:5e:6c:fb:68:8b:8d:5c:11:fd:f7:c3:30:b1:
         ae:b3:52:61:73:5d:fa:2e:ab:da:bf:05:38:6e:41:1d:fc:4b:
         1e:58:35:88:5d:c9:72:f8:c0:35:27:2d:cb:91:5f:e2:0a:66:
         f8:5b:12:a6:04:cf:8e:88:74:b2:86:c8:cb:89:ec:84:36:b1:
         d0:1c:1b:30:9c:ed:03:8c:8f:8d:6d:fa:3c:6b:55:35:78:b7:
         1f:be:61:aa:fe:d5:48:38:33:e3:f7:63:02:d6:d5:cf:20:f0:
         43:be:98:bc:65:10:eb:f1:58:2b:34:36:e0:71:8f:6d:40:bd:
         98:96:83:41:ec:bd:ad:74:8b:28:fa:88:c1:0c:01:7f:b1:d9:
         b4:68:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:16 2025 by rpki-client