Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          u/YiDMzVexMxOkyFi95Qe30eqDEJ1aXTiKLDZ12prTc=
Subject key identifier:   C1:49:7A:D2:5F:03:86:80:EC:3F:27:36:93:DC:DF:77:10:99:D9:A2
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       019A03A4E2F5249F81346D97F6528CFF446A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          0F67
Signing time:             Mon 20 Oct 2025 22:02:08 +0000
Manifest this update:     Mon 20 Oct 2025 22:02:08 +0000
Manifest next update:     Tue 21 Oct 2025 22:02:08 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: umx+QWs7xBIZKccNZUs8PF/NgHUpFaYUAY0VVTl4ClY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:a4:e2:f5:24:9f:81:34:6d:97:f6:52:8c:ff:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Oct 20 22:02:08 2025 GMT
            Not After : Oct 21 22:02:08 2025 GMT
        Subject: CN=c1497ad25f038680ec3f273693dcdf771099d9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:12:ab:68:1f:53:20:ea:69:eb:6d:55:f5:
                    53:18:d0:62:ae:91:ca:a6:ff:7c:a7:e5:b8:4b:93:
                    16:cb:a0:80:cb:c2:e8:a6:ba:b0:e7:aa:94:e5:dc:
                    99:43:99:fc:cb:ce:26:1a:c1:73:d8:37:71:72:64:
                    b6:87:8b:a9:e2:bc:07:dd:38:25:7b:c4:1a:89:5c:
                    3d:a1:60:af:66:6e:eb:f8:ee:02:cb:c4:7d:ae:ff:
                    5e:07:ca:1c:a4:b1:51:00:d5:76:0d:12:92:a0:0c:
                    01:d6:60:18:e2:85:bc:c8:18:f5:3f:b0:bd:c4:89:
                    27:0a:6b:b9:83:7a:28:a7:41:91:89:00:d7:e8:05:
                    70:3f:9e:7f:d8:7c:fa:15:7f:71:27:3d:e9:60:af:
                    03:99:a8:fa:59:80:45:b4:8e:44:7d:ff:e3:2d:21:
                    60:04:a6:58:9a:a8:71:3b:c2:7e:a4:f3:5d:0a:4d:
                    e2:16:7d:4e:d8:4d:9f:6a:4e:35:b1:59:a3:c0:ac:
                    df:9f:75:8d:c2:95:9a:89:ad:cd:2c:4d:29:a2:dc:
                    43:b8:aa:c0:fe:57:b0:64:78:e1:35:b1:7a:d6:49:
                    4f:45:44:51:f5:c6:31:18:bd:6b:3e:67:7b:6f:38:
                    13:6d:4b:82:f7:93:69:90:15:30:93:9a:53:68:4f:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:7A:D2:5F:03:86:80:EC:3F:27:36:93:DC:DF:77:10:99:D9:A2
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:76:61:10:d8:8a:b2:08:0d:7c:01:35:64:ff:81:0c:b0:28:
         05:82:6b:1d:c8:c6:fb:4d:00:b0:e1:f2:9a:d4:d9:3f:53:55:
         4d:f4:18:75:44:94:f3:eb:a9:18:99:8c:ff:c1:c0:e9:e0:9e:
         ae:e3:20:7f:77:ca:52:2b:38:1b:4f:47:26:e6:6f:75:37:eb:
         96:ea:8d:92:b3:ca:7e:01:eb:b5:5f:c6:13:8a:cf:b2:71:c8:
         01:ed:93:8a:c8:04:64:01:f6:91:98:9a:44:04:ca:f5:25:2d:
         8f:ec:9b:ec:9a:b5:b7:ac:81:df:ff:7d:9f:32:d2:a0:fe:7d:
         5f:3d:97:34:b9:dd:4c:87:45:01:e4:af:d6:66:08:b4:26:b4:
         d1:66:31:71:ed:ee:68:dc:67:ac:06:e5:51:4c:4c:aa:5f:78:
         cf:68:3f:6a:03:c3:2c:20:f8:c1:c9:85:d2:bd:f0:c5:19:79:
         99:3c:b7:6d:b7:dc:1d:5c:c6:97:4a:f5:68:b9:cb:46:2c:92:
         a4:c4:7c:44:36:53:ad:f5:8a:98:c5:15:49:76:da:e2:16:cb:
         54:58:1c:12:71:1e:47:d4:b2:72:8e:c0:2b:a8:09:1a:f8:5e:
         3f:b2:f5:da:07:34:57:36:e2:3d:2d:f3:60:75:09:22:30:89:
         d1:99:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:35:46 2025 by rpki-client