Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          63FVSNPzAPIzwV8N0VDQGqfEO1KfT2/RxjXlSKg/9zY=
Subject key identifier:   AB:3D:DF:65:1A:FE:7C:B4:80:55:49:F1:E2:C2:B6:0E:E7:91:3D:26
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       0199FD34242CE3D77E44737ECC0CE489FA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          0D76
Signing time:             Sun 19 Oct 2025 16:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:16 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: wkQZzRyfMgE8dbIgYRq6atzUeV/0rYFPlFBodaNv06Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:24:2c:e3:d7:7e:44:73:7e:cc:0c:e4:89:fa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: Oct 19 16:01:16 2025 GMT
            Not After : Oct 20 16:01:16 2025 GMT
        Subject: CN=ab3ddf651afe7cb4805549f1e2c2b60ee7913d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:86:cd:54:28:d1:6e:45:e1:ed:00:02:5a:
                    90:f7:32:f5:95:fd:ca:9b:55:16:91:87:06:46:61:
                    1e:8f:35:a8:8a:50:98:ff:18:38:09:20:9d:39:08:
                    af:c7:06:b6:a1:7d:a6:60:01:d8:cd:0c:ca:2c:f3:
                    c5:b1:78:71:c9:e4:e5:2e:60:ae:86:0a:01:1f:1c:
                    4c:ec:fe:bc:0f:fa:2f:ff:2a:59:15:29:d2:5b:03:
                    7b:c3:9e:2e:38:8f:8d:d2:e8:51:ed:76:5e:5e:73:
                    eb:fd:4f:be:5d:13:0b:d6:33:3c:4b:d4:2c:cc:14:
                    1a:11:05:d7:6d:6b:e3:4a:91:2e:dc:53:33:f4:c7:
                    d4:e5:a3:ec:33:fd:1c:b0:bb:04:3f:6f:12:f6:45:
                    7b:f8:f6:2b:c0:e7:fe:61:73:74:5b:b9:c7:2f:6f:
                    67:a7:53:b8:6a:43:63:82:3a:86:d5:6e:dc:2d:09:
                    b0:e4:a6:a9:4c:0f:de:69:66:12:89:51:68:d1:ba:
                    6d:dc:fe:56:7e:ca:3d:12:55:2d:c1:66:d0:0a:5f:
                    c2:df:c1:39:cf:d6:c0:47:ed:67:b5:0d:c8:cd:8f:
                    7a:70:be:87:3e:5e:e1:d9:97:22:ae:51:c0:61:68:
                    fe:b2:10:f1:f7:ad:97:5b:af:58:37:97:97:05:39:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:DF:65:1A:FE:7C:B4:80:55:49:F1:E2:C2:B6:0E:E7:91:3D:26
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:62:6c:5c:d5:80:f1:48:6c:ea:94:8c:71:f6:5c:29:00:2e:
         9e:d9:d9:58:2d:1b:78:3e:8f:22:82:50:a6:4a:16:d6:24:fa:
         b2:a7:b7:0a:6a:16:9c:3e:28:c8:8b:dd:36:18:6d:d4:c6:5f:
         9e:02:b5:d3:e5:c4:36:67:40:8a:6a:c4:69:fe:da:e8:87:97:
         2a:ea:6c:be:1e:3a:d1:d8:7b:97:39:c0:96:c4:e1:14:13:c8:
         77:3d:d8:bc:04:59:0c:33:eb:aa:19:f3:49:e6:6b:54:ff:cd:
         96:d1:86:25:1a:e2:3a:1d:72:32:5c:7a:3a:88:21:9c:a9:28:
         50:23:2a:b8:6e:56:ba:58:74:83:ca:19:a9:13:06:88:5d:7c:
         df:6a:fc:26:dd:80:4c:b7:22:da:7c:64:51:91:58:c1:14:07:
         3b:e0:85:9c:ef:61:3d:1b:0a:6b:d8:98:ce:2e:80:63:7f:86:
         74:94:e0:b3:ba:69:1d:19:3c:2d:ee:66:1d:0a:9f:4a:20:8d:
         ed:68:6c:f3:fa:e5:9a:fa:bc:79:b0:92:9a:41:b9:dc:db:24:
         9e:85:de:16:08:3f:b1:f7:88:28:69:19:68:78:fd:6d:76:85:
         44:b1:27:5e:0a:fc:98:97:2d:32:9b:4e:2b:af:f1:68:58:82:
         70:ea:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:48 2025 by rpki-client