Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          ZdIzZ983EUC0rulTfVMhmZohbjJhLVgdud/7hGKLrc0=
Subject key identifier:   E6:72:55:99:85:4C:0B:92:8E:13:7F:38:BB:71:9E:40:93:78:6B:4B
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       0199FF22D398B6B0CD0D8193E1A8BD53F6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          16E2
Signing time:             Mon 20 Oct 2025 01:01:36 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:36 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:36 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: hs7gWnw+IUT9eakhRhFyzfFOkfLQy/f4O917GAru8DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:d3:98:b6:b0:cd:0d:81:93:e1:a8:bd:53:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Oct 20 01:01:36 2025 GMT
            Not After : Oct 21 01:01:36 2025 GMT
        Subject: CN=e6725599854c0b928e137f38bb719e4093786b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:37:3b:68:1a:3c:72:b8:3f:14:9d:06:dc:
                    b3:52:93:bf:85:8f:6d:b3:ab:3c:4d:eb:40:95:fb:
                    7b:30:50:c5:a1:5e:72:ef:14:8a:6a:2d:30:be:48:
                    76:03:ba:c1:9e:d7:e0:13:80:e7:d1:92:cb:6d:d7:
                    41:ec:1d:df:4c:bc:c8:a4:08:b1:21:66:a6:bf:e0:
                    c3:31:ab:f7:e0:fd:57:35:2c:44:14:bf:19:9a:a6:
                    33:c2:e0:c6:1d:1d:7c:42:8e:25:ac:46:05:a3:40:
                    c5:37:cd:6f:30:48:1b:b7:3b:b3:82:2c:ff:c4:26:
                    66:48:76:1a:ac:c7:6b:7c:8a:89:27:53:e3:c8:f1:
                    c4:da:21:39:4e:e7:9a:c5:89:a8:d4:9d:f0:a9:53:
                    e7:fe:d3:62:af:c5:92:0d:bf:b1:73:6d:fd:3f:85:
                    3d:a3:58:9c:43:5e:9f:9a:9e:70:22:2d:c0:3b:a8:
                    b7:52:2b:41:d8:44:e3:b7:71:c2:05:cb:44:aa:6b:
                    92:d0:ba:27:92:07:b7:b1:a7:6f:dd:3d:9c:a3:48:
                    fe:cd:6f:90:ce:99:9f:7a:70:fe:fb:b0:c3:22:ff:
                    b7:c5:5f:29:75:1f:04:5b:d1:0e:6e:07:b8:f1:97:
                    06:92:f4:24:64:92:1a:06:a5:d0:cc:71:62:54:d9:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:72:55:99:85:4C:0B:92:8E:13:7F:38:BB:71:9E:40:93:78:6B:4B
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:58:d1:c0:ab:7b:16:1c:4f:dd:3c:79:e6:6f:51:60:eb:8d:
         80:58:d6:01:33:c7:89:5f:15:f7:6d:7f:57:04:24:3a:6f:a3:
         a5:f3:d0:82:2e:aa:a5:77:9b:a2:9d:3c:04:56:ea:0b:af:ce:
         64:1b:e4:e8:61:e7:e2:8d:02:3f:bf:f3:fd:88:1d:24:53:09:
         1b:c4:6a:af:35:53:db:c3:38:33:57:1e:a4:80:4e:c0:9d:e3:
         62:a9:56:af:48:8d:42:99:bb:94:cf:e2:1e:1b:f6:b3:d6:fa:
         f8:9a:e3:17:82:78:dd:16:74:7d:11:33:4a:37:e1:b3:8b:ec:
         70:ba:5d:64:21:65:51:c0:9b:8e:d9:ba:dd:a6:0f:d8:b8:72:
         e5:45:13:8d:b3:d6:fe:2d:8f:ef:da:e9:98:e9:f6:0b:d3:d5:
         81:fa:c6:3f:3a:ec:cb:37:fb:79:07:87:c9:0b:cc:6c:d4:07:
         22:be:c4:e9:bf:d0:f3:d2:9b:76:11:4b:fc:62:40:f6:6a:10:
         d1:e9:fc:7c:08:bc:d5:17:d7:36:27:27:3f:60:26:1e:a7:5f:
         b5:aa:24:b0:0f:15:c7:87:a8:90:73:07:be:61:95:98:a7:0d:
         e9:db:88:1b:8a:80:10:74:8c:b8:ee:42:28:14:74:61:24:1b:
         4e:c2:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:59 2025 by rpki-client