Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
File:                     6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json)
Hash identifier:          Rp2m4qzydk+wMYOUFOBnUN5S6mbgOnWMDXSglOXD1G4=
Subject key identifier:   3F:9E:99:B6:8D:95:CB:7B:9F:47:35:C1:79:C4:6A:D9:55:4A:9F:8E
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Certificate issuer:       /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial:       0199FAD85573758C9B7DDE5E3DA10E238AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
Manifest number:          052E
Signing time:             Sun 19 Oct 2025 05:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:45 +0000
Files and hashes:         1: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (hash: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=)
                          2: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: 3CQOYOR7AuNy+S2S54FoX76e00oHHhhQ0QyEd0Wzuy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:55:73:75:8c:9b:7d:de:5e:3d:a1:0e:23:8a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
        Validity
            Not Before: Oct 19 05:01:45 2025 GMT
            Not After : Oct 20 05:01:45 2025 GMT
        Subject: CN=3f9e99b68d95cb7b9f4735c179c46ad9554a9f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:85:c0:83:a8:01:73:a2:5c:36:db:50:a1:
                    0e:0a:92:b8:62:a6:e8:65:aa:1c:16:4b:c0:a9:7c:
                    c5:b2:f4:cb:f2:a5:fd:bb:89:9a:55:2a:03:6f:b2:
                    10:ef:de:9d:36:25:c8:aa:d9:a6:ce:ce:12:0e:78:
                    3d:8c:99:c9:ee:b1:e4:99:b4:dd:db:1e:88:8f:33:
                    70:1f:dc:e5:51:6a:bb:e5:f1:72:c9:2c:6c:aa:c2:
                    53:cb:f3:46:a4:a1:76:62:33:bc:32:6d:48:b0:aa:
                    8b:8e:5a:27:05:f2:a5:26:32:13:f6:8a:57:67:97:
                    86:34:dd:fe:2c:27:fb:0c:1b:b6:e2:97:07:11:50:
                    74:20:8b:ba:e6:c6:43:10:95:8e:61:45:68:cf:f2:
                    78:ea:99:e1:c9:37:db:c8:de:88:ce:f1:2a:8a:a2:
                    f6:3d:54:12:62:d2:e8:da:9b:51:c5:7b:2a:c5:d3:
                    ed:8e:0d:fe:67:72:f5:0d:f3:3c:c3:32:f6:5d:59:
                    6b:14:ed:19:08:05:d2:7c:4a:5b:c5:a4:9e:98:49:
                    07:ec:0d:7d:45:24:84:c2:ca:b8:de:84:b0:d6:60:
                    fd:a7:0e:2d:cb:bc:84:64:03:5e:44:2f:1f:2f:19:
                    ec:3a:1e:20:b6:2d:69:11:a4:0d:5f:7d:01:89:e4:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9E:99:B6:8D:95:CB:7B:9F:47:35:C1:79:C4:6A:D9:55:4A:9F:8E
            X509v3 Authority Key Identifier:
                keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:be:90:bc:0e:eb:97:8c:5e:27:13:be:09:d6:de:10:fd:
         ec:fb:84:4a:d3:09:e4:02:87:1b:f3:a6:24:cc:30:11:64:f6:
         d2:3d:50:7f:5f:29:48:7e:9a:2e:77:81:bf:89:4e:56:44:70:
         e8:20:58:9e:25:e9:e0:32:06:6a:88:f2:e1:2c:6d:be:0d:1b:
         41:5f:85:75:75:88:f4:3e:fd:26:14:d0:44:0b:88:ce:1d:54:
         c2:45:1e:c1:63:da:df:3a:af:86:7d:16:29:0a:95:d1:2f:34:
         1a:c5:2b:e5:e8:41:da:fe:a2:c3:0e:f9:49:25:21:00:17:62:
         1b:bc:64:c9:c3:aa:7b:79:c8:3f:2f:c5:f7:f5:c3:31:45:58:
         fd:0b:13:02:8e:f0:86:41:78:18:28:ee:30:67:d8:86:93:ce:
         53:f4:69:e9:42:f8:81:31:9f:07:36:52:5e:89:6a:e4:5a:26:
         22:33:da:c2:bc:c8:f6:e7:19:35:9a:6b:53:fe:fb:06:d8:a8:
         d3:35:f5:4a:9a:ac:97:ac:71:f1:57:a0:3c:ee:a7:5b:ee:b1:
         96:6d:d4:2a:85:63:92:91:77:02:a3:69:8a:f9:fe:20:a3:5a:
         a6:4b:d4:52:5f:3c:2c:8f:d5:7f:c1:e7:94:36:bb:d6:ca:93:
         c3:7f:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:52 2025 by rpki-client