Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          dPJWmVYUlxxzcPfxDlODn1BHRD4EIkRh29SylVCT+Ms=
Subject key identifier:   D4:D7:AC:73:CA:76:22:FB:2E:AC:ED:78:68:B2:0D:3B:43:E0:77:FA
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       0199FE7E1294F8512ACD8E85713013824EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          12A5
Signing time:             Sun 19 Oct 2025 22:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:39 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: lRMJXRZbdhpDwgWTT5TranrBtC+mMU8pb1bsnqahI4Y=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:12:94:f8:51:2a:cd:8e:85:71:30:13:82:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Oct 19 22:01:39 2025 GMT
            Not After : Oct 20 22:01:39 2025 GMT
        Subject: CN=d4d7ac73ca7622fb2eaced7868b20d3b43e077fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:6d:0e:15:b6:c2:a6:5b:ea:0a:19:3c:4f:
                    d3:a9:3b:94:90:72:9b:f0:f2:2d:96:e1:1d:38:70:
                    75:0b:b5:fb:75:d7:5e:cf:a6:53:b1:76:fd:8a:9f:
                    fd:21:20:ca:50:f2:0e:e2:ba:1b:54:05:47:8f:c6:
                    e6:4f:f3:0f:05:2c:9c:6f:c6:28:84:7a:f7:2a:02:
                    83:a9:18:f8:b0:db:1e:ac:d2:9f:a4:f2:ac:79:75:
                    57:5c:fe:6c:73:3f:00:83:f6:f0:fe:26:8e:8e:9a:
                    e9:b2:d6:45:35:b2:84:05:6f:3d:e8:fa:63:13:22:
                    7b:6e:fd:6d:f3:d2:1b:0b:50:ab:46:87:b9:8d:01:
                    b0:d2:6a:77:87:82:82:22:75:41:57:70:54:f5:ce:
                    88:fd:b0:62:0b:0d:1b:3c:ca:8b:ca:41:96:bf:a3:
                    53:30:50:5e:45:9e:0e:c6:ee:44:ef:22:0a:60:ab:
                    fd:8c:29:91:0c:a9:f8:a3:b8:6a:5c:74:b9:02:52:
                    75:fa:ac:36:06:42:39:be:8d:37:1d:51:33:6f:e1:
                    fb:a5:b2:69:2e:a8:60:bb:ec:0e:e5:6e:45:84:c5:
                    fe:15:33:da:41:37:61:78:e2:72:07:3c:dc:63:5b:
                    88:a7:ab:d0:e8:c1:f6:b5:e5:8f:93:b6:6a:09:18:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D7:AC:73:CA:76:22:FB:2E:AC:ED:78:68:B2:0D:3B:43:E0:77:FA
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:b7:cc:60:5e:f2:1f:be:fe:00:c2:96:67:9e:f5:ff:1e:
         e4:32:62:49:55:3f:c3:62:d1:03:a3:4c:06:9d:d9:1c:35:12:
         7d:36:9c:75:d4:91:b1:bc:c4:65:64:0a:f8:dd:91:95:a8:ed:
         33:e8:73:ea:53:2b:ad:41:ae:4d:02:fe:31:e6:3b:cd:03:12:
         65:e1:64:54:54:d6:fa:6e:d5:d6:cd:4e:ba:25:98:4e:aa:3d:
         c9:63:e8:04:14:16:85:a7:a5:de:ab:03:3e:0e:ef:e9:f0:cd:
         6e:07:82:0e:a5:88:2e:81:b5:ed:a9:70:e1:4f:55:20:7d:68:
         b7:c7:70:2a:ff:2a:93:c0:fc:a7:ed:a5:a9:d1:79:64:81:c9:
         e8:cb:5b:2e:d2:e9:db:3f:be:b0:a1:56:cb:a6:33:59:08:aa:
         91:0c:57:11:e1:90:59:0c:48:a4:0c:03:18:4b:c8:6c:a8:c5:
         6b:a6:58:67:d9:32:2e:2c:13:a6:62:02:20:47:38:65:84:4a:
         1e:af:a1:46:85:08:76:53:7c:cc:30:a9:dc:a4:22:af:59:b9:
         e8:08:65:5e:ba:8c:6d:44:8b:5a:6e:71:60:b0:00:51:34:4c:
         fe:19:70:eb:0f:50:39:c3:1b:51:ba:0f:c7:d0:f9:a1:00:fa:
         7f:ac:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:25 2025 by rpki-client