Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File:                     b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier:          TKoZwB8x/3c2qq9XihaVCS/bvr9huQbgaQKiw6sJ6dw=
Subject key identifier:   65:77:E5:3B:BC:40:80:E8:E6:17:99:D9:C4:E0:B7:30:3C:51:F6:80
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer:       /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial:       0199FCC66777D723BF7FF4F8D2EF30375E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number:          0AA6
Signing time:             Sun 19 Oct 2025 14:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:24 +0000
Files and hashes:         1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: O/P8S6w7btDB8osai3V3slltrXjMPUiKH5Tb1FmxQ00=)
                          2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:67:77:d7:23:bf:7f:f4:f8:d2:ef:30:37:5e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
        Validity
            Not Before: Oct 19 14:01:24 2025 GMT
            Not After : Oct 20 14:01:24 2025 GMT
        Subject: CN=6577e53bbc4080e8e61799d9c4e0b7303c51f680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:48:f8:28:08:44:12:ec:3a:98:69:24:0e:
                    fa:06:e3:8d:5f:69:d2:d0:e2:58:ab:02:62:96:6f:
                    39:c0:f9:41:ed:5c:4f:a9:bf:11:55:8b:4f:fb:2b:
                    ad:f6:34:d5:56:35:03:68:45:f8:07:d5:4a:35:23:
                    07:7b:f6:66:0e:0e:a3:74:2b:14:48:80:9b:22:20:
                    a6:99:26:c6:ca:cf:04:56:e2:f3:5d:02:01:84:d0:
                    ab:4f:75:6a:8d:69:4a:5d:f7:ab:4c:d0:00:02:ca:
                    43:36:0c:da:b4:8e:52:59:3c:97:d7:e5:8c:1f:4b:
                    2a:be:62:82:e9:c2:50:6b:d4:f0:88:ee:7a:a9:72:
                    54:a0:c1:f1:ce:33:0a:e2:e3:3b:ea:23:e1:6a:a6:
                    21:74:ab:ec:ee:9e:39:9f:93:04:e0:8f:cb:12:bd:
                    8d:98:41:f2:e4:fd:4f:66:5e:83:da:92:fb:04:06:
                    86:df:92:a0:87:6d:78:75:b2:02:bf:3d:22:b8:38:
                    b8:37:9e:5f:71:e5:82:96:08:18:94:98:aa:5b:d4:
                    d2:80:db:39:6d:4a:19:1b:6f:5b:3a:e9:c5:b7:91:
                    42:3a:f2:28:dd:32:01:d3:3c:0e:21:78:2a:83:5f:
                    09:21:26:9c:23:9b:77:3e:ab:f1:7c:48:ed:81:33:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:77:E5:3B:BC:40:80:E8:E6:17:99:D9:C4:E0:B7:30:3C:51:F6:80
            X509v3 Authority Key Identifier:
                keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:3c:e9:61:93:ee:97:27:72:fc:0c:e8:6e:d5:92:6e:b6:
         be:ff:07:21:e7:7e:7d:f1:1d:c0:ec:ee:a5:04:ed:2a:0d:f9:
         30:a6:f8:4c:4e:8b:3a:bc:22:69:04:fd:39:c7:f5:da:fd:3d:
         00:60:2e:0d:ba:84:13:08:eb:cb:26:7c:70:3b:09:e9:29:c2:
         14:a9:3b:2d:a3:92:22:2f:99:0f:77:f6:9a:2e:6c:90:43:7a:
         2a:53:3c:e4:0a:f5:44:6c:e8:8d:13:cf:5a:54:04:f1:9f:10:
         99:b0:ee:29:c5:02:7f:c4:c1:a5:e6:fe:06:70:16:a6:e7:0c:
         80:43:35:3c:1a:21:79:f2:8b:c6:cb:fe:5f:bf:13:da:5e:c4:
         27:7a:ab:05:30:c7:a2:45:b7:bb:0f:83:32:a7:fc:11:11:fa:
         24:92:7f:d1:d6:88:41:cc:d8:d2:66:8e:22:c2:a6:f2:3f:1b:
         c8:7a:53:0c:bb:a7:1d:25:c3:8a:2b:99:1d:fe:8c:fb:5a:d9:
         aa:64:55:bb:d4:67:ec:c7:ea:33:85:57:cc:4e:2a:f6:ae:01:
         e1:eb:54:7d:66:ff:2a:35:7f:74:bb:e3:ad:23:44:89:f7:90:
         5b:47:9b:27:5c:8d:9b:06:62:a4:b8:1c:c9:01:fc:74:93:0e:
         7b:d6:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:19 2025 by rpki-client