Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          9ZGurMulzo2Vb/kSe/0sLbCa6LXdGpdvZ5QeBKrSzMg=
Subject key identifier:   3B:73:50:24:71:B3:73:B8:AB:7E:0A:4F:E6:E5:80:2B:3D:67:48:BC
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       0199FD349FC0E2F32FCED385C7D89541985A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          166A
Signing time:             Sun 19 Oct 2025 16:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:48 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: lqrh+Z+rhYUo5nc77ssX4XXb8fFOtDABaE1K1SUvCOs=)
                          2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:9f:c0:e2:f3:2f:ce:d3:85:c7:d8:95:41:98:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Oct 19 16:01:48 2025 GMT
            Not After : Oct 20 16:01:48 2025 GMT
        Subject: CN=3b73502471b373b8ab7e0a4fe6e5802b3d6748bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:36:67:a4:33:7b:b6:ac:18:9b:cc:91:66:
                    72:2e:8d:5c:a3:c7:8d:d4:dc:dd:8d:66:2f:c6:92:
                    52:4b:b8:d7:08:fc:12:d2:ee:95:f3:bf:01:71:55:
                    ed:ba:31:51:d5:2b:96:e3:3c:41:7b:2a:d9:64:e4:
                    9d:8a:e6:3e:2e:77:69:f8:04:a4:a9:1d:68:81:a1:
                    04:d2:06:1d:1d:ae:60:07:5d:62:1e:4a:62:e3:32:
                    ec:6e:49:21:21:40:2c:f0:dc:18:02:33:7f:07:cc:
                    9d:37:bb:0f:0e:92:78:b9:f9:f8:19:70:1b:97:e4:
                    cb:01:dc:bf:85:17:a9:76:c4:4e:67:2b:eb:8b:66:
                    6a:a9:d1:dd:28:cd:01:9e:4d:79:73:61:12:aa:56:
                    83:2d:65:86:c6:31:c1:46:ab:64:c3:69:0e:9a:65:
                    6b:09:d6:7c:bb:e0:aa:db:49:ff:9f:23:09:3f:70:
                    18:66:d8:5f:9a:e9:d1:f6:4e:aa:35:1c:29:51:a3:
                    77:98:5b:4a:23:d1:9f:5f:6e:2c:bb:1b:a2:8c:d2:
                    f6:9e:ff:46:c6:3a:d8:72:cb:88:01:fc:1c:0f:dd:
                    14:d9:53:ac:99:0a:fc:dd:32:6f:0b:88:59:51:06:
                    80:01:d7:1b:47:d1:1f:51:79:34:af:89:13:aa:11:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:50:24:71:B3:73:B8:AB:7E:0A:4F:E6:E5:80:2B:3D:67:48:BC
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:d5:fa:12:a3:a6:18:36:f7:d9:a3:ea:b3:7b:c2:c9:a5:
         33:b0:1f:19:49:80:65:6d:ee:88:74:f1:81:ea:04:e2:20:0e:
         84:14:ce:47:5f:50:5b:d4:8e:ba:6a:3c:11:c5:4b:1a:69:74:
         c5:f0:75:a9:46:c7:8c:5c:cc:5e:6d:bc:74:9f:48:1a:28:b1:
         5c:a1:12:32:aa:6d:30:dd:30:2a:f4:32:2e:18:65:df:d9:42:
         3f:01:eb:97:83:0c:0d:57:99:55:41:af:ff:85:cd:56:ff:74:
         62:af:e7:65:38:b4:9a:ca:68:39:7e:10:90:e6:38:ce:13:0b:
         a5:ae:ca:8e:a8:a4:ba:95:08:fd:89:b5:b9:9d:08:22:e8:c9:
         5a:f4:09:84:e5:fa:f6:f3:34:71:b5:91:cd:75:82:51:75:c7:
         9b:ac:2a:1c:6f:81:39:de:5a:66:ea:b9:80:6a:da:eb:22:81:
         35:5b:c0:dc:ce:f7:c9:81:61:25:3d:12:2d:c0:fd:12:a1:fc:
         d5:3a:0a:97:51:da:90:74:7a:fc:e7:cb:6e:ad:bc:f9:82:1e:
         c3:3e:00:c9:d5:c8:5a:83:f1:0e:d6:c2:b8:b1:44:0c:e0:1f:
         6b:60:5c:68:6b:99:91:c3:92:fa:85:e6:e0:9a:ab:88:b9:8a:
         90:c4:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:37 2025 by rpki-client