Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File:                     l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier:          gTInC51iiWHLRFisWnamtgb8Cr7Ex9oeyicNx56wN8k=
Subject key identifier:   FC:75:C6:23:60:21:64:18:4E:06:5D:BC:3D:DC:AA:0F:C0:B7:45:D7
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer:       /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial:       0199FC8FB7B3F8443FE2CEB576734411ADB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number:          0A4D
Signing time:             Sun 19 Oct 2025 13:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:41 +0000
Files and hashes:         1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: B2lb8ZIEN3PwUxHBRCfJ8nZdtbuSKVMx/T6EOumdoBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b7:b3:f8:44:3f:e2:ce:b5:76:73:44:11:ad:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
        Validity
            Not Before: Oct 19 13:01:41 2025 GMT
            Not After : Oct 20 13:01:41 2025 GMT
        Subject: CN=fc75c623602164184e065dbc3ddcaa0fc0b745d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:53:fb:9e:c9:26:3c:ca:48:2a:ab:a7:5d:
                    d6:85:3b:5d:4f:af:03:cb:69:70:74:ce:37:04:0f:
                    dd:b4:17:07:df:74:35:7f:57:0f:3b:8a:86:29:72:
                    b0:93:ad:20:36:1b:7c:b8:fc:9f:ef:c7:53:8f:e6:
                    4f:7b:0e:b2:c3:d9:bf:6e:68:1c:eb:61:39:95:9a:
                    34:c0:d7:d8:e8:5a:86:c1:d5:92:cd:ca:68:c3:81:
                    ff:d7:55:7c:c2:c2:5d:31:0a:b8:ef:2a:d4:c1:a5:
                    10:d9:6d:60:3c:12:a1:f0:4a:70:32:c5:05:bd:81:
                    bc:3c:a3:15:2a:56:81:28:bc:90:40:18:9b:9f:8f:
                    cf:e8:3c:ad:a7:bf:0b:da:85:24:b6:a5:5f:d0:de:
                    ef:74:95:4c:87:34:06:ca:98:73:f1:b6:43:ae:ca:
                    5c:84:ce:da:e0:d8:7c:a3:d9:8f:4b:a4:6b:43:58:
                    39:23:a4:4d:9d:7d:5a:8d:f5:94:8b:e1:5b:16:18:
                    4e:ca:b5:b4:55:b3:28:58:d5:81:ba:7b:7e:a3:9d:
                    0f:51:f8:b9:6a:66:95:1b:5a:5b:7a:c3:d9:42:78:
                    59:15:62:12:37:f7:11:89:5c:fd:72:70:3b:3d:5f:
                    45:5b:cb:72:78:4f:04:22:49:fc:89:19:e7:e4:f0:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:C6:23:60:21:64:18:4E:06:5D:BC:3D:DC:AA:0F:C0:B7:45:D7
            X509v3 Authority Key Identifier:
                keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:88:1c:31:c6:3b:07:e9:9a:1b:7c:95:9e:e0:f0:90:24:
         c8:fe:40:df:36:cd:4a:79:57:32:e5:6b:c1:7a:05:c3:ea:76:
         b7:44:59:22:f8:4f:6c:5b:93:e1:a4:8e:fc:c3:2f:57:34:d2:
         60:12:0f:43:35:0b:ef:9b:f9:4a:8b:f7:90:a6:ee:28:d7:e2:
         a3:17:eb:47:9e:ce:39:a9:da:d3:33:32:92:c0:9c:4b:b1:14:
         15:bb:89:d2:3f:28:63:5c:1c:be:55:11:88:5a:8e:5a:c3:1e:
         2e:43:28:eb:b4:8b:28:75:7e:38:50:87:36:fe:a1:f2:53:f1:
         b0:75:69:98:d9:83:3b:7d:ac:82:34:ab:72:64:f2:44:50:d8:
         0f:67:9e:89:f3:51:10:97:62:8c:c5:e1:6f:75:2d:73:87:2c:
         2e:0a:da:08:47:c4:9c:5a:79:fe:55:34:fa:16:f8:f2:b7:8f:
         0a:b7:c0:47:74:d4:04:51:ba:86:b5:36:75:35:c8:2d:e7:07:
         41:8a:9b:06:02:db:28:1f:35:5a:31:4b:10:09:a5:1b:85:d9:
         c1:1c:f1:57:7f:c5:f8:7f:fb:d1:07:c9:de:2f:c5:c3:48:33:
         19:bc:92:34:03:8b:57:df:35:4b:a4:3b:cf:bd:92:18:32:2c:
         ea:db:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:49 2025 by rpki-client