Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          Vwid8aBcnQnIOp9erDuUhcV7mxREQZPmMsZHiOXeXR4=
Subject key identifier:   D7:4B:13:1F:AE:CB:F6:50:58:0E:6C:1C:B1:3A:F5:2E:30:37:98:CA
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       0199FD6AEBAEA6C10E2BCFF3ED5C1FDE7645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0DC9
Signing time:             Sun 19 Oct 2025 17:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:06 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 2t2pv64yh+1+fr4Pe48of7JN8S1T7sh++ReXAPQ9Kqs=)
                          2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:eb:ae:a6:c1:0e:2b:cf:f3:ed:5c:1f:de:76:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Oct 19 17:01:06 2025 GMT
            Not After : Oct 20 17:01:06 2025 GMT
        Subject: CN=d74b131faecbf650580e6c1cb13af52e303798ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:be:f4:82:1b:6e:74:26:de:64:11:fd:d3:
                    26:27:12:39:54:6f:90:28:df:9e:82:de:8d:df:c2:
                    4e:f9:ea:40:66:9c:f9:e2:00:39:93:52:c1:dc:1b:
                    03:69:a6:e9:c3:43:9a:83:ee:ba:46:3d:55:e7:64:
                    b4:67:c7:97:66:c8:c4:71:d5:7b:42:a7:2e:0e:15:
                    f9:f1:8f:d6:f3:ae:a4:b8:9b:63:cf:8b:f9:74:ff:
                    9a:04:d0:3f:81:06:df:cf:0b:35:9d:32:72:0e:cf:
                    a8:63:c9:bc:82:83:91:8c:be:c0:db:38:7e:14:4f:
                    dd:af:2f:45:df:5a:75:27:1b:34:f9:97:88:50:dd:
                    e6:d6:3c:5a:ea:da:a7:56:8d:57:25:8a:81:2a:50:
                    1d:73:a7:3d:26:65:92:61:df:d3:e6:c6:ab:1d:e8:
                    3a:59:6e:95:be:a6:13:85:8c:1c:9e:e6:8a:03:62:
                    1d:a7:49:47:0a:e5:47:f9:33:95:60:ad:d2:bb:eb:
                    d8:ba:0b:1b:9e:04:09:5f:4e:54:4d:54:0f:87:da:
                    ea:c5:62:7f:76:10:2c:c7:0c:97:d3:72:52:99:8d:
                    37:eb:01:aa:9e:9e:a6:c8:a3:d7:6a:52:11:89:c8:
                    fe:f7:6d:3d:5b:cb:3e:d4:05:db:ca:88:b5:e6:72:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4B:13:1F:AE:CB:F6:50:58:0E:6C:1C:B1:3A:F5:2E:30:37:98:CA
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:89:9f:df:c3:53:04:1b:af:6b:2b:36:54:f3:86:3c:16:
         bf:be:df:66:57:f2:47:bf:07:c9:18:01:d0:c8:6d:f0:52:9d:
         6d:79:c9:d3:d5:a9:e6:eb:bc:05:66:81:b3:aa:db:1f:68:5f:
         38:19:87:02:0d:9c:84:4f:f4:7a:cf:6b:63:dc:3b:ca:db:64:
         f4:8f:15:2e:52:d1:a7:1f:85:d3:07:21:32:40:ae:d9:fe:d7:
         b5:69:68:64:2a:30:a2:53:ab:85:3b:ed:e4:6d:b8:d3:50:24:
         4b:17:ee:71:d7:a6:ef:42:aa:1f:5c:7c:39:9d:ea:ae:e2:4f:
         47:43:90:3e:b5:a1:5e:45:66:73:53:06:ad:02:0b:e3:29:1a:
         db:a2:49:5f:68:78:73:f2:1c:8e:a7:a4:ca:03:66:c0:6d:3b:
         85:1d:32:7e:79:98:d5:8b:34:ae:f1:cc:d1:15:8c:7c:2c:a7:
         c3:f3:98:03:2a:f5:0b:eb:53:9a:dc:91:81:3c:8f:93:3b:21:
         9d:07:8d:25:9e:85:b1:48:99:68:20:f0:df:97:17:29:15:8c:
         94:c7:10:c1:5c:ab:e3:91:77:a3:07:54:d3:ae:f2:0d:37:5b:
         7d:e3:96:32:73:60:9e:be:aa:57:34:f1:ea:94:69:c1:16:6f:
         54:f9:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:20 2025 by rpki-client