Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File:                     j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier:          nwkD5qSWod2/Z1qnw9eCgd77oHox2Mp2+VosTa85DkY=
Subject key identifier:   EA:10:D0:58:94:55:C1:69:C5:99:F2:7E:9B:3A:A7:1F:87:4F:09:70
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer:       /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial:       0199FD3401BDEB7CE46C48A33729ED183F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number:          076C
Signing time:             Sun 19 Oct 2025 16:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:07 +0000
Files and hashes:         1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: +mqD5QJyYJ5p3HscgZ7dAc1IawYcompG2P7vkL8tb/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:01:bd:eb:7c:e4:6c:48:a3:37:29:ed:18:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
        Validity
            Not Before: Oct 19 16:01:07 2025 GMT
            Not After : Oct 20 16:01:07 2025 GMT
        Subject: CN=ea10d0589455c169c599f27e9b3aa71f874f0970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:7b:f1:03:50:d9:6d:ac:1b:f9:2c:93:81:
                    fe:a3:44:5e:fb:41:a3:63:ae:10:d4:2a:00:60:60:
                    68:62:ea:5b:9a:b3:67:7a:67:66:18:43:44:e7:4f:
                    1f:2c:56:42:87:3d:89:ee:f4:fc:e0:41:6d:8b:cb:
                    08:8b:ad:2d:cd:88:cf:55:4e:16:70:00:97:11:83:
                    9a:1d:ea:2c:41:b9:f2:c4:24:df:0c:8b:50:9a:f3:
                    45:46:c0:08:41:d0:42:94:aa:75:7f:ae:74:ae:33:
                    bf:48:9b:e3:09:51:8b:d8:0e:55:2b:44:ad:7c:70:
                    34:a8:4c:46:fb:ae:b8:6e:44:93:5a:c5:ad:87:e0:
                    92:fa:ae:90:24:a7:62:62:5d:02:a7:8a:5d:20:53:
                    d3:84:ba:80:97:b4:b5:85:c7:0e:e0:24:0b:0b:38:
                    13:37:18:eb:71:43:8f:54:38:0d:98:7e:f6:de:dd:
                    4c:94:dd:3a:b6:db:4f:8c:89:88:3e:50:8f:ef:ed:
                    aa:fd:46:1d:f2:17:86:3c:eb:b6:92:4f:ae:00:89:
                    64:3d:66:3b:79:11:23:bf:cf:fa:07:b6:6d:1f:39:
                    7d:dd:79:7a:53:a2:de:d8:ad:46:c0:23:3f:88:f8:
                    7c:03:fa:43:54:8b:fb:88:f8:0f:ff:15:75:79:e3:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:D0:58:94:55:C1:69:C5:99:F2:7E:9B:3A:A7:1F:87:4F:09:70
            X509v3 Authority Key Identifier:
                keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:d9:c5:a1:1b:1f:c5:90:fc:96:86:3e:7f:3a:f3:e9:eb:
         65:bb:c4:74:8e:cd:1c:7a:f6:49:d3:99:e4:c3:16:ea:9c:da:
         1a:e1:be:5e:f6:f0:98:07:1d:9b:f0:a2:52:6a:54:bc:18:51:
         6f:8e:92:d3:98:fa:ae:02:cd:67:6c:80:ff:ed:41:07:47:94:
         7c:4c:92:cf:61:f9:e5:fe:a5:b4:4c:8a:a4:39:f3:fa:3e:d5:
         82:41:0e:b1:33:46:fb:96:31:63:5a:fa:df:98:1d:f6:f1:c2:
         54:00:95:b6:2d:ad:e7:62:1b:8e:ed:14:57:f3:9d:6d:46:d9:
         74:e2:71:4a:76:b7:ae:f4:13:19:d5:88:a5:ba:fd:f1:a4:ee:
         0e:33:a3:ec:48:32:32:62:9d:22:90:c0:ea:6e:af:d4:24:be:
         ae:08:de:3d:00:13:f7:2b:82:21:5b:69:a6:e9:17:5d:c5:d4:
         fb:a3:95:e6:3a:ff:c7:c8:40:7b:b0:46:37:eb:0b:9e:5a:d2:
         db:be:41:2f:8c:a3:2d:01:f8:8d:a7:38:0d:71:25:d7:bf:98:
         78:c9:b9:96:e6:05:4a:bf:37:ac:1b:55:1e:88:07:1a:fd:62:
         04:88:a0:d5:f0:fa:b9:35:90:82:2e:22:a3:c2:66:45:a2:ab:
         13:80:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:18 2025 by rpki-client