Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          mMd5QaQpu0nBTcfXFLF5nOr5lNxouRoFXShClHNIQTI=
Subject key identifier:   F9:75:EE:D5:A2:85:4E:73:19:49:FD:A1:9E:DD:44:EE:B8:43:14:BB
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       0199FAA1185D13ED10DED364DD0690AF53CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0DC6
Signing time:             Sun 19 Oct 2025 04:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:25 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: CC9HqgaeIlU93f4lO054TGFqFkL/hFg/FKabZ4ttaYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:18:5d:13:ed:10:de:d3:64:dd:06:90:af:53:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: Oct 19 04:01:25 2025 GMT
            Not After : Oct 20 04:01:25 2025 GMT
        Subject: CN=f975eed5a2854e731949fda19edd44eeb84314bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:81:32:24:4b:cf:58:f0:bb:fc:1e:a9:a9:
                    1a:f1:d5:44:b2:33:52:a8:ea:d9:41:b4:28:51:fc:
                    8d:e2:42:4a:c5:db:0c:bd:9a:6e:97:b3:49:19:9a:
                    26:0a:00:0b:f5:63:f3:dc:3e:d9:4f:3a:20:60:91:
                    f4:c1:b9:a3:05:94:f7:6b:61:dd:fc:9a:2d:05:ce:
                    cb:94:19:43:f9:1b:d5:94:b5:25:88:3c:eb:3d:2d:
                    0e:8b:55:76:7a:94:22:3e:45:f4:62:5a:12:7a:2d:
                    67:41:32:e2:77:21:75:05:24:73:6a:7d:17:a3:af:
                    86:20:76:47:7d:81:6c:30:2d:61:47:17:27:bb:7d:
                    48:07:76:40:5c:65:c4:ba:97:55:7e:95:8a:e0:9c:
                    5a:14:a8:31:1b:b6:98:f1:99:46:19:1c:2c:c2:1c:
                    1d:16:c8:7e:c4:94:0f:73:8b:86:29:34:dc:b7:ad:
                    14:f4:d4:13:f6:47:ba:55:1c:ca:07:b2:fe:86:88:
                    65:3a:54:63:f3:7c:ab:7c:8c:8f:df:3c:f5:3a:94:
                    e6:37:2a:e4:2c:e7:5c:48:0c:e9:31:54:bd:a6:e3:
                    f3:94:19:b1:98:99:34:15:25:9c:0e:7a:72:08:c9:
                    56:00:80:8f:cb:4e:56:ae:7f:65:f6:9f:96:9c:f8:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:EE:D5:A2:85:4E:73:19:49:FD:A1:9E:DD:44:EE:B8:43:14:BB
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9f:03:b0:c2:1a:f8:b2:98:90:b6:fa:d4:89:a7:30:6d:c3:
         e7:44:34:49:9e:2c:97:53:1b:04:5d:0d:b9:c6:aa:42:a6:d1:
         d8:a7:73:74:e9:61:96:6d:a0:1b:f1:d8:74:e2:4d:ae:b9:70:
         f0:b9:ac:a5:70:e5:f6:76:01:dc:56:72:b6:6e:79:3b:1a:4e:
         3b:0b:61:ed:29:26:23:84:18:88:bf:94:b2:49:20:a2:19:bd:
         27:fb:e1:3a:6f:2b:ce:b0:f8:bb:32:93:8c:f0:89:e5:14:ac:
         13:df:ef:e5:aa:37:02:05:2a:ee:9c:d8:0c:af:62:6f:97:a5:
         cb:e0:0d:4f:e3:ce:12:e0:fb:55:7a:f6:ba:d1:1e:fa:82:05:
         42:15:38:c0:fd:03:ee:6d:94:0e:fe:18:8e:76:29:89:50:6e:
         df:ca:d0:f6:47:2f:9d:50:e1:ab:dd:aa:c3:c5:01:81:13:bd:
         31:6e:4c:b1:ec:60:80:a7:a6:c2:34:a7:1e:7a:0f:1a:f3:e1:
         ff:1c:fb:cb:31:97:95:63:f8:c3:df:25:38:d1:a8:ed:55:de:
         30:5e:78:14:9b:1b:6f:05:47:07:f3:85:6d:66:7b:c2:97:ab:
         28:ed:27:c7:3f:0c:64:43:ac:f9:82:7e:2a:1a:b4:a2:fb:7a:
         de:8c:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:26 2025 by rpki-client