Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File:                     Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier:          19N5JPRhPE+BbW1nZ+No1t/nztV3gdEU2o2KI22YLGU=
Subject key identifier:   B4:08:57:46:4F:CD:9B:86:83:34:B1:8A:50:F3:02:BB:B1:E5:FA:58
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer:       /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial:       0199FB0EF44AD24B0AB234865C8F4AC01441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number:          6A
Signing time:             Sun 19 Oct 2025 06:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:25 +0000
Files and hashes:         1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: E8pvddw8WLj6mFSIxy3CdZ0szxEeccWf+Vu9wZvn7T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f4:4a:d2:4b:0a:b2:34:86:5c:8f:4a:c0:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
        Validity
            Not Before: Oct 19 06:01:25 2025 GMT
            Not After : Oct 20 06:01:25 2025 GMT
        Subject: CN=b40857464fcd9b868334b18a50f302bbb1e5fa58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:66:87:71:4c:f2:d0:c3:71:c9:63:40:10:
                    6c:df:3f:ad:81:e3:a9:0d:41:75:b7:a2:7c:84:ea:
                    d4:dd:76:bd:af:51:dc:b1:68:07:83:e7:63:89:df:
                    0d:63:57:bd:0e:fd:a5:1a:fe:b9:b0:1c:4b:0f:73:
                    1f:0c:97:30:b4:3c:14:82:97:96:2b:95:16:17:43:
                    b4:e5:02:5c:42:e3:36:91:c2:b4:f6:38:e9:5e:40:
                    2d:44:aa:79:0e:c0:2f:52:0c:df:d9:48:b8:f9:48:
                    68:20:05:09:21:0e:08:92:a6:4a:26:32:99:1c:95:
                    82:b4:d1:e2:f4:78:e0:54:c0:31:a9:16:a5:e9:7a:
                    f3:bd:d2:44:3e:7c:33:9d:13:83:7f:00:22:5e:cb:
                    1c:a3:e1:d1:0a:bc:35:92:6e:05:f7:f6:8d:6f:89:
                    75:35:6f:e3:19:ea:cc:a6:d1:43:f4:d0:9a:88:a6:
                    d2:4a:b0:74:52:6f:ca:3a:31:27:21:66:38:af:9f:
                    b0:29:c9:d4:88:7d:c0:a5:07:cb:b5:2c:51:a6:03:
                    2f:84:cf:23:e1:f9:d2:aa:a8:d0:65:28:58:25:99:
                    97:cb:1c:0c:10:a1:26:c4:0d:56:be:fd:d3:f3:b5:
                    b4:2c:a3:d7:ed:fa:39:92:f3:fd:95:60:d4:c7:19:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:08:57:46:4F:CD:9B:86:83:34:B1:8A:50:F3:02:BB:B1:E5:FA:58
            X509v3 Authority Key Identifier:
                keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:de:61:fa:b6:b6:6c:36:fd:d8:25:15:64:88:84:56:64:
         cf:10:a9:62:dd:8c:c8:43:a3:6a:6b:4c:c8:b0:54:33:15:1b:
         89:5e:15:e1:d0:9a:d9:37:18:08:1c:ea:29:0b:b4:35:a3:e8:
         f5:5b:4a:85:94:47:bf:ec:4d:2c:59:07:1b:f2:95:76:1c:3f:
         a9:4c:4a:c2:7a:c6:27:14:87:26:c6:8e:40:22:ca:bd:5f:5a:
         50:97:e3:bf:96:c5:6e:03:37:ff:1d:8b:05:2f:d3:a4:f2:34:
         a9:8c:d6:4e:b3:92:c1:1f:6f:76:9e:f3:f3:7d:62:d2:c7:0c:
         e1:6b:99:98:67:f0:d5:0e:d1:84:55:5a:8d:df:7c:44:a0:5f:
         32:b8:fc:1a:f5:c4:bf:a6:7a:0c:5c:d5:b6:8c:00:4d:e4:29:
         e6:ad:00:c0:47:21:29:3c:f3:0d:50:8d:eb:07:5f:5e:1e:27:
         a3:ef:06:79:84:07:61:96:b4:81:fb:51:c2:3d:46:27:c7:72:
         8c:0e:fe:7f:06:a4:bf:21:a4:43:12:c6:30:93:3f:1b:ec:ea:
         4b:88:9d:a9:a7:af:d4:a6:71:f6:21:2f:af:b3:ee:ab:28:5f:
         7e:5e:ca:19:03:20:9a:33:85:b2:24:1f:ff:14:08:9d:a6:2f:
         86:51:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:18 2025 by rpki-client