Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          dviyVZwqh8pIMeVi/FOLoWOQnMZX5fo65yxCUzdLVYM=
Subject key identifier:   58:07:53:4E:F4:FE:B8:26:6A:32:EA:59:B1:41:BE:A5:48:49:6B:35
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       0199FFC7DCE049B613140E61FA395086D48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          16E1
Signing time:             Mon 20 Oct 2025 04:01:52 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:52 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:52 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: jsY3NOPzGRhfuDs14ecGACfioRHVtwxsPusuGMQYHPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:dc:e0:49:b6:13:14:0e:61:fa:39:50:86:d4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Oct 20 04:01:52 2025 GMT
            Not After : Oct 21 04:01:52 2025 GMT
        Subject: CN=5807534ef4feb8266a32ea59b141bea548496b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:79:30:9d:f4:a7:a7:ce:28:26:cd:c6:0a:
                    6a:39:d5:1e:0f:e2:ea:02:5c:91:ab:3e:a0:57:a5:
                    32:f4:d9:51:03:de:c2:18:d7:62:fa:e9:27:c8:85:
                    a1:27:00:87:ff:d2:3e:cc:c0:42:73:0d:3c:ae:d3:
                    95:90:7d:00:88:bd:8d:b4:f3:53:bb:57:99:29:28:
                    df:6a:af:aa:27:5d:a9:4f:39:18:37:49:a0:f2:fe:
                    4f:22:0d:4f:62:3c:0d:5e:11:f0:3d:a5:03:f4:6c:
                    8b:6c:c6:78:e9:bf:f2:65:4d:f0:2d:b3:83:9d:bb:
                    99:e8:95:9a:70:35:18:8e:22:a0:07:7a:86:b2:60:
                    cf:ef:b8:c5:36:22:8a:02:f2:1e:d9:52:64:11:94:
                    e5:3c:d8:ff:e7:76:81:0c:30:e2:44:98:1c:d3:8b:
                    58:8b:d6:cf:66:fa:c2:5c:e1:4e:c8:56:5f:44:53:
                    2c:c2:fb:7f:db:09:f1:97:e8:af:ff:9a:83:5d:e6:
                    9e:02:42:b5:79:aa:cb:91:7d:a4:92:85:80:37:38:
                    db:fa:3f:27:8f:3f:98:c8:aa:8b:7e:d5:2e:53:4d:
                    1e:bf:de:e6:b2:22:c9:32:01:fc:07:6b:a5:fe:bd:
                    27:cc:ab:4b:b8:84:bb:9f:b6:6b:45:d1:6d:9b:28:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:53:4E:F4:FE:B8:26:6A:32:EA:59:B1:41:BE:A5:48:49:6B:35
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:d1:bf:0f:ab:21:97:9d:0c:51:fc:48:4a:8c:08:1e:c5:
         d1:33:1c:88:36:d6:9b:5a:99:fd:ec:18:26:b0:d8:58:1b:83:
         4c:60:f2:60:c2:58:6e:6a:18:7b:c5:5d:d2:af:f9:5d:e7:a0:
         4d:5c:da:b0:d2:67:f2:5c:a0:76:fa:25:1f:4f:a2:05:58:af:
         6e:d2:95:c4:59:6b:c1:48:81:3e:1a:56:17:db:83:cc:85:f6:
         7c:a0:51:07:f5:36:8b:ae:0e:a2:67:73:63:54:85:ca:37:7e:
         8b:01:a7:c5:52:97:4b:ab:33:5b:08:ba:bb:96:ef:b3:71:46:
         7a:7d:ec:3b:70:cc:aa:2e:ee:aa:ea:a5:02:89:72:78:aa:0c:
         75:60:0c:ef:72:6a:a1:11:0d:41:ce:1f:90:77:75:fa:48:fa:
         f9:21:b6:e4:1e:a5:53:f9:0c:07:2e:2a:eb:76:81:db:f3:ca:
         ad:81:62:fe:e6:8a:cd:76:ad:8c:96:f6:ea:f0:0c:b3:50:8e:
         d8:ee:ce:fc:31:e7:3f:4b:49:be:f2:e9:b8:56:55:70:93:75:
         d3:c2:44:f7:75:71:35:8d:1a:f8:60:7d:ea:d6:9a:f6:51:95:
         fd:e0:42:91:3e:39:e3:5b:c4:bf:a8:b9:7d:08:16:e3:23:6f:
         6c:b4:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:05 2025 by rpki-client