Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          4PkZAO06icNC11E4FQ19zFzOXJvSJir5ZR3/BFakw2w=
Subject key identifier:   88:45:48:7D:AE:C3:1A:56:BA:DB:4A:D7:FD:8C:23:3B:35:8B:ED:BE
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       0199FCC6821CC3EDED62BF0DEFB08AF2B2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          0FE3
Signing time:             Sun 19 Oct 2025 14:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:31 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: WB55VCfBUf1pmy2z1jDX3C11KLGBR9Owk1/bzYoR0wA=)
                          2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:82:1c:c3:ed:ed:62:bf:0d:ef:b0:8a:f2:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Oct 19 14:01:31 2025 GMT
            Not After : Oct 20 14:01:31 2025 GMT
        Subject: CN=8845487daec31a56badb4ad7fd8c233b358bedbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:b1:5e:d0:31:ce:14:8f:f8:4b:a0:f0:ad:
                    6a:90:cb:6d:08:fb:cb:f0:fa:e6:99:c6:a8:cd:13:
                    70:ac:2d:f6:09:cd:8d:34:96:11:86:57:68:bd:6b:
                    01:c4:39:50:fe:b8:f5:24:41:1a:ce:8a:6f:92:3d:
                    d5:97:b0:ba:2d:74:c8:5e:ba:54:d3:a0:84:50:bf:
                    75:54:b3:b2:e8:29:e0:9f:74:cf:dc:ae:37:4c:28:
                    43:e2:21:33:3d:db:7a:b5:f4:e9:0a:71:69:0e:c6:
                    80:e3:70:1c:3a:3d:ef:78:71:e7:0e:dd:79:44:3b:
                    73:fb:04:00:e4:87:6b:51:3d:de:a1:52:f9:a3:87:
                    68:68:da:63:39:7a:99:69:08:fe:cb:a5:84:94:63:
                    e1:ee:8e:21:96:34:1a:a1:f9:38:52:cd:63:b4:e7:
                    23:7f:4a:09:ba:1e:da:5f:16:63:5c:45:f6:33:d9:
                    6a:2b:09:dc:4a:2b:ff:0d:62:a4:78:64:34:54:b4:
                    04:6f:97:b5:c1:44:c7:bf:0d:b0:b4:02:84:c7:3e:
                    c2:ff:01:33:2e:89:de:a8:be:09:53:65:24:88:3b:
                    19:62:3a:c0:81:63:02:14:29:54:f1:b4:3a:b1:08:
                    bf:11:55:da:7f:52:f2:49:e3:2d:8d:ad:e3:09:11:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:48:7D:AE:C3:1A:56:BA:DB:4A:D7:FD:8C:23:3B:35:8B:ED:BE
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:f2:c9:aa:c8:fc:11:5f:eb:b5:76:6e:a9:e0:95:61:f4:
         47:6e:83:5f:6e:e0:a8:8e:68:f2:43:9e:e0:ac:c8:60:bd:33:
         15:3a:d6:e9:98:2d:04:81:a5:2c:6c:f2:e8:e9:e5:a6:50:72:
         6f:fa:a4:1f:8a:93:62:88:d9:6e:61:45:00:99:69:e6:0b:49:
         4c:ec:2e:4d:fa:06:99:18:c2:01:02:a9:1c:e8:9a:aa:c2:e9:
         52:f2:9a:b1:a3:f3:25:65:9c:84:a0:bd:ec:79:79:9a:22:cb:
         96:82:a0:90:cb:ab:09:b9:3a:af:23:be:53:58:c9:99:0c:81:
         df:6f:fe:44:72:64:1c:70:ec:5e:e2:c3:a8:c8:90:38:6f:6a:
         e2:d6:5e:50:87:44:c9:03:41:81:b2:31:d6:d4:54:31:09:bd:
         17:f9:00:f6:a4:b9:a8:b4:34:c2:b1:0b:11:cc:52:1a:a4:28:
         78:69:46:3b:08:44:87:c9:6c:df:05:fb:b3:f4:fe:6e:7c:60:
         81:ff:b1:d3:8e:4f:5b:bd:79:be:96:e7:98:3a:f9:49:74:84:
         30:13:5d:22:8a:7d:3e:a3:db:f4:84:cf:92:8e:0a:b8:6e:82:
         89:c6:2d:e9:36:31:4c:91:85:3a:59:d4:77:76:f5:ca:e1:8c:
         5c:12:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:48 2025 by rpki-client