Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          kZLS/i/wvVd9mlpCq0RhCT53SZcSSXZPkQEL7EIkP5g=
Subject key identifier:   1A:98:95:C3:1E:F2:1B:1C:9F:0E:7F:4D:2B:7E:C2:6C:6C:DA:2F:1A
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       0199FE7D9BD5B162014D838BB384500C4D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          13C2
Signing time:             Sun 19 Oct 2025 22:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:08 +0000
Files and hashes:         1: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: m/GlYVSZlh43Iuy2n8tNUuAtZm8ZCDmz5yTPn8xGYpA=)
                          2: mygXRxPx2D1UXJyXM04ODWybylU.roa (hash: H0IWRuq52mUhkCTHvw9eNNClwcqWk5xJXDx9B164fD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:9b:d5:b1:62:01:4d:83:8b:b3:84:50:0c:4d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Oct 19 22:01:08 2025 GMT
            Not After : Oct 20 22:01:08 2025 GMT
        Subject: CN=1a9895c31ef21b1c9f0e7f4d2b7ec26c6cda2f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:98:e1:6c:ad:c6:5a:72:3e:5d:ac:f9:41:
                    2c:05:d2:2e:98:e4:fa:e0:b1:ac:3f:94:67:40:05:
                    ed:62:2d:ee:52:45:96:ae:2a:a5:ec:40:2b:15:35:
                    ab:0b:ec:d9:22:41:be:1f:9e:cd:9d:ca:84:2e:df:
                    24:75:2d:cd:3d:e0:bb:03:86:7f:59:cc:07:e1:70:
                    33:0e:bf:d5:9a:f9:98:d8:70:94:1a:2a:65:ce:50:
                    72:51:1a:9c:ab:70:53:f3:c1:fc:5a:a2:a8:80:92:
                    1c:f8:9b:bf:e9:67:ed:2c:c6:e2:ce:88:65:2a:e8:
                    f3:75:33:e1:54:15:4a:9e:b9:1d:22:a5:64:45:1f:
                    07:91:8c:30:7e:a6:9c:0f:43:52:ed:c6:f0:e6:f6:
                    7d:e4:74:91:fc:da:44:68:54:e3:67:4b:47:4d:e1:
                    d3:65:25:23:30:e2:b1:0a:cb:a6:f9:ba:cd:88:fe:
                    68:09:64:e5:dd:49:bf:78:66:54:b0:72:f7:10:a7:
                    6e:16:30:9e:d5:2f:f1:be:19:01:dc:59:9a:b4:c0:
                    4f:6a:29:93:b9:2a:35:36:fe:28:25:b4:82:ef:79:
                    0f:73:c1:66:55:9f:95:7c:c6:75:59:98:dc:60:c3:
                    98:30:eb:01:7c:0b:e9:91:3d:9e:45:2e:a1:2b:bc:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:98:95:C3:1E:F2:1B:1C:9F:0E:7F:4D:2B:7E:C2:6C:6C:DA:2F:1A
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:be:e6:4c:c7:f5:09:7f:d1:43:5c:c0:0b:be:29:d9:12:
         76:ec:1d:80:85:63:14:02:83:3b:94:b2:be:d8:f9:99:73:5a:
         a9:80:0a:40:09:b4:50:c6:4a:69:a7:97:f5:5b:02:0a:1c:72:
         db:0a:a5:97:f1:0b:94:c4:32:12:84:9b:68:6c:1b:84:47:17:
         ae:58:b0:4e:0c:2c:83:18:7e:43:f5:3d:d2:bf:ca:cd:a0:15:
         b0:4a:08:73:ac:93:d7:44:b6:b0:f0:da:81:d8:f8:1a:64:a0:
         ce:f0:92:d4:ff:47:4e:00:6f:28:40:24:16:7c:39:d7:24:c3:
         c0:4d:80:4c:8e:a6:db:80:60:65:09:ca:96:68:92:18:b8:1b:
         7b:ec:17:8e:7a:06:cb:52:0e:cf:fd:ed:ef:98:84:c2:2d:f1:
         40:af:49:69:67:06:76:1e:83:e1:ef:a1:bf:1e:72:7a:68:f0:
         f2:91:c2:61:58:90:4a:d7:19:ec:e2:51:e8:35:6f:09:aa:e9:
         78:52:7e:c4:b5:ec:48:fa:eb:a1:11:a5:75:f8:f8:33:fa:be:
         79:32:59:e2:31:c3:fe:e5:e7:5f:85:e4:57:48:5f:32:d0:81:
         bb:6a:66:cf:a3:9e:b8:6c:94:5a:d9:05:0d:a6:5d:68:65:c5:
         ce:21:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:34 2025 by rpki-client