Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          NWxNkiicWoHv3SaUTJR38RXX9zclGYZnbkRaj5LwiPw=
Subject key identifier:   D6:92:71:93:6A:5A:09:ED:0C:B6:7F:A6:E3:58:8C:E0:C7:0B:6D:BF
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       0199FBEB4C2EF96C21B261795FCCEBD07C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:05 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:05 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:05 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: kGgncuHmZji5gz7dWQgTmSospZM/3wC+My/7V1BZ1Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:4c:2e:f9:6c:21:b2:61:79:5f:cc:eb:d0:7c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Oct 19 10:02:05 2025 GMT
            Not After : Oct 20 10:02:05 2025 GMT
        Subject: CN=d69271936a5a09ed0cb67fa6e3588ce0c70b6dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:59:04:9e:7e:de:5f:ed:96:fe:45:d3:ce:
                    7b:d8:67:5a:d2:b9:7d:9d:40:24:61:ab:1b:4a:ed:
                    9e:c1:bd:76:ce:4c:fe:db:36:47:56:8c:ab:c8:ad:
                    0c:00:b2:67:66:ed:90:16:e8:3b:a7:5f:45:55:80:
                    7f:25:ec:59:2a:b9:57:89:5b:d4:27:35:ee:28:e9:
                    bc:26:c4:64:87:1e:61:f5:05:ee:19:2d:8e:52:83:
                    53:43:ec:85:27:71:61:dc:0b:5b:1f:39:9c:66:b0:
                    24:86:51:18:12:62:9a:29:1f:e1:f5:c0:ff:18:b4:
                    9b:76:bc:df:a0:93:b1:fa:ef:bb:3f:b2:86:82:a4:
                    19:6e:5e:a8:ba:2d:fd:62:d5:1e:d0:24:d6:43:1b:
                    39:cc:6e:d5:6e:51:ee:cd:67:71:f3:de:bb:b2:01:
                    43:38:00:24:50:33:94:f2:7a:ae:7b:de:e9:fe:42:
                    b7:2b:32:86:53:09:f8:23:08:d2:69:d5:26:ee:9f:
                    60:57:fc:9c:61:9f:97:7e:3a:5d:b1:6d:f0:8b:1f:
                    9c:4c:b1:33:f6:a1:b4:05:a4:f3:cd:18:b3:c8:aa:
                    4a:22:38:46:16:c8:fa:63:9e:27:03:5e:45:d0:5d:
                    76:b9:11:5b:15:62:b2:5c:a4:2a:77:ef:f4:00:3c:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:71:93:6A:5A:09:ED:0C:B6:7F:A6:E3:58:8C:E0:C7:0B:6D:BF
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:60:c0:4f:f5:92:0e:a0:11:ac:77:e2:8c:26:4e:ba:73:87:
         f7:6b:e7:f4:98:a8:88:2a:f8:10:49:b2:6a:e9:8e:9e:40:12:
         5c:64:53:49:f1:1b:26:2f:25:b7:47:18:c9:09:ee:23:44:8f:
         49:45:56:02:b3:2e:2c:c6:f5:23:44:dc:7d:59:fe:dc:57:f4:
         90:86:c9:70:ad:bc:a0:d7:e3:ed:8a:ad:b7:38:35:45:b3:c3:
         7f:d7:9d:c9:21:2e:08:9a:97:06:7d:9e:8e:3f:ab:37:00:9a:
         09:71:88:c4:ee:5a:e4:1d:03:76:6d:86:f4:b2:aa:40:7b:76:
         b2:b4:f2:36:e3:51:95:c0:66:69:87:00:21:c1:3c:6a:e4:fa:
         e9:a3:36:04:31:52:8a:fa:4b:58:16:95:b6:c4:ec:0b:e8:97:
         24:7c:3e:8c:d7:df:cb:ad:54:66:4b:19:02:62:38:19:aa:f9:
         6b:44:cf:dc:1f:c1:86:f0:14:da:1c:fb:f8:96:b3:b2:61:a2:
         67:c0:4e:41:a2:10:0a:57:24:37:f1:74:1d:81:0e:ae:dd:a4:
         f5:dc:2f:e9:29:22:49:c8:48:f1:15:e8:d0:ed:5d:57:8e:8c:
         8c:5c:cd:f4:de:0a:a3:3f:62:68:08:3f:1d:65:43:96:ec:44:
         39:25:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:05 2025 by rpki-client