Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          C+SAhv2iAChXNvhLz6kJxga8+qUwAucgCDNe6HoFC3w=
Subject key identifier:   40:72:4F:A0:94:9B:1E:27:85:6B:56:FA:2B:53:38:39:DD:5A:81:83
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       0199FBEBA00D1C11CDF9669D2733BECBCCC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          01C1
Signing time:             Sun 19 Oct 2025 10:02:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:27 +0000
Files and hashes:         1: 4Gofx77thE1H70ueVHLD9j47btM.roa (hash: 9EbLzC5Y1+8DffIsLyCHPxc8JLdUo3GxnL9ubC3vyyI=)
                          2: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: jm5XPhIQFlSA7Pt43+3cpFsuQVFk1Vy4MzPKSuf1PAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:a0:0d:1c:11:cd:f9:66:9d:27:33:be:cb:cc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Oct 19 10:02:27 2025 GMT
            Not After : Oct 20 10:02:27 2025 GMT
        Subject: CN=40724fa0949b1e27856b56fa2b533839dd5a8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:e6:68:f5:9c:22:61:80:1a:01:3e:66:ad:
                    cd:04:0c:ce:bd:8d:41:4d:5a:75:96:fe:9b:b8:cc:
                    0e:70:ff:9d:3f:83:2c:c2:f2:69:d5:06:89:99:4f:
                    7b:17:fa:ae:11:fc:af:2d:9d:35:b1:a1:d9:28:9a:
                    f5:35:b6:b3:3f:a4:3a:b1:f0:50:78:d4:37:4c:1a:
                    e8:01:7c:08:fc:51:02:ec:e0:f7:55:21:5e:ec:92:
                    8a:2b:0b:8b:49:e0:67:dd:df:9b:06:7f:58:9d:1f:
                    7d:ed:ae:69:c3:ea:4f:c9:4c:d5:b3:2c:34:b7:74:
                    d3:78:8e:a2:4d:a2:46:c7:fe:2f:43:4b:10:ce:0f:
                    ab:2d:f1:48:47:4f:11:b1:39:20:4c:32:d5:d0:75:
                    91:7d:55:75:39:81:7b:13:5a:57:b9:e4:49:2f:d8:
                    1a:45:68:63:d2:35:cb:03:e8:ae:e7:c9:a2:df:8f:
                    e2:df:5f:60:49:1b:c9:ee:c5:26:88:33:40:7d:67:
                    27:e7:3b:8e:4a:c4:b8:85:98:f1:8a:b7:e1:e9:43:
                    3c:64:50:00:b6:b1:e3:eb:70:b5:98:71:e5:a7:64:
                    61:a7:e6:df:52:78:f5:47:50:74:42:24:eb:e3:bb:
                    97:af:ae:0f:37:08:18:64:74:4f:3e:43:29:78:5b:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:4F:A0:94:9B:1E:27:85:6B:56:FA:2B:53:38:39:DD:5A:81:83
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:f0:d4:49:9b:6a:45:2c:f2:f9:46:f4:93:d1:3a:52:18:
         5f:e6:a3:6a:7a:cc:df:00:91:8c:dc:e0:33:f0:bd:e3:cb:ba:
         95:7a:9f:14:5b:bd:f0:94:21:51:dd:2d:6c:ce:68:29:ac:9f:
         12:be:98:82:8d:2c:dc:85:c5:e1:98:51:e5:08:24:cf:cc:dc:
         04:01:92:8a:90:79:e2:85:57:36:84:7b:41:57:b8:67:57:99:
         28:32:6e:35:3c:95:b4:d4:7c:2e:8e:a1:dd:b8:ee:7b:f9:92:
         a2:8f:a8:87:79:2b:bb:6d:7c:6f:55:65:16:50:eb:39:ac:01:
         a2:e8:57:ba:0a:19:cf:c3:bd:1c:54:6e:d2:23:2d:eb:cc:62:
         d3:3b:c4:b6:aa:3e:b2:db:da:d9:10:ca:55:7a:67:34:d9:38:
         07:16:c0:26:a6:b2:d4:0c:b1:eb:a2:48:12:15:88:99:60:8b:
         b5:b8:20:f5:ec:d6:5b:87:17:45:df:ff:a7:e9:bc:7e:26:e9:
         b6:53:59:5d:17:80:66:49:29:fb:47:95:7e:22:27:23:ff:d8:
         a7:4d:7f:89:b4:be:6c:10:b3:a4:28:85:0e:1a:9d:a6:92:dd:
         a2:e3:91:90:20:45:05:ee:cb:b5:8a:cf:84:76:d0:b3:89:6b:
         5f:83:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:31 2025 by rpki-client