Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          PkHJHYiuQ7v7cF1xZYECxWmQEmf0ojFUCOehtmL4riQ=
Subject key identifier:   D4:97:17:66:BD:E5:F8:FE:53:43:88:0A:72:A2:D4:E1:97:ED:35:3F
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       0199FC8F1912747797A7C4C2C2041ABD7BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          06BA
Signing time:             Sun 19 Oct 2025 13:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:00 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: 4jR7i++Zj0ie3JPWQO74TTOJ4prcHcZy1TNazDszVTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:19:12:74:77:97:a7:c4:c2:c2:04:1a:bd:7b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Oct 19 13:01:00 2025 GMT
            Not After : Oct 20 13:01:00 2025 GMT
        Subject: CN=d4971766bde5f8fe5343880a72a2d4e197ed353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:4c:f5:e1:02:0c:cb:41:d2:b2:29:c1:9e:
                    ee:7c:49:05:3c:f0:c0:4f:8d:a5:dc:a5:48:08:bb:
                    76:a5:3e:da:54:e8:4b:81:cd:22:73:29:56:a0:f7:
                    8e:fa:b7:9c:90:d0:89:fe:59:47:57:53:b7:ac:4b:
                    f9:21:0a:a5:38:66:42:ea:9f:5b:9e:8f:6e:c2:12:
                    7a:30:c7:e4:eb:14:a5:cc:43:1a:9e:3c:f3:7b:ed:
                    12:29:95:dc:e7:47:e9:07:0c:56:9c:18:3c:47:42:
                    f4:9d:42:db:23:b2:53:b6:45:28:b3:40:15:2e:60:
                    20:57:2e:4d:dd:63:d5:93:6b:7e:7a:57:2b:b5:df:
                    bb:b4:ae:9c:02:7a:65:0b:21:bb:2d:18:06:a9:a4:
                    6b:f1:24:da:45:3b:f0:2a:6c:e4:fc:81:e6:c0:be:
                    78:9c:79:78:2b:3d:a6:e8:94:ac:0a:cd:f0:65:d9:
                    43:be:b6:5d:00:d7:70:46:1c:8f:37:0a:49:61:04:
                    0a:f8:c9:45:f8:d4:86:85:cc:f1:65:f9:3b:5e:7d:
                    bd:7f:b8:76:b6:93:f9:f9:77:d3:15:e5:a8:1b:fc:
                    3f:6c:25:75:6c:9d:21:85:80:98:a7:ae:fd:44:45:
                    ad:7f:25:8d:aa:3b:15:1e:be:f2:45:40:a6:39:01:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:97:17:66:BD:E5:F8:FE:53:43:88:0A:72:A2:D4:E1:97:ED:35:3F
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e7:82:e2:1c:bc:f8:c7:28:12:86:95:96:f0:0c:72:56:64:
         62:1b:fd:99:19:f7:f8:cb:a2:db:4d:24:bd:b8:0d:d2:eb:d3:
         d1:7f:a4:7b:c4:84:96:20:ef:f5:93:a8:af:07:f0:dc:1d:f7:
         eb:68:71:4e:7a:d3:aa:18:82:37:f0:cb:84:7c:03:2a:41:31:
         72:35:27:dc:3d:d4:39:a4:a4:e6:36:76:fb:94:ec:41:af:d5:
         fb:37:0f:45:8e:7d:36:67:47:43:18:2d:5d:cc:ce:28:df:59:
         ed:c1:38:28:1e:ed:88:2e:86:4f:d7:ee:50:96:7d:aa:da:38:
         b9:cf:69:96:f5:96:99:dd:0a:34:05:43:11:f5:61:cf:4b:cb:
         f7:18:63:49:69:1c:75:bd:80:44:16:11:a7:2a:09:47:b4:88:
         72:ed:e6:4d:82:ae:d7:4f:2e:50:50:f6:55:67:6d:83:25:91:
         0a:ad:d4:0a:1f:d7:52:4f:d2:f4:8d:54:b7:fe:70:47:da:6e:
         1f:5b:47:f4:bf:28:7a:7f:37:79:c1:10:90:8a:01:a0:91:8c:
         43:74:1e:5c:f7:a2:55:19:7e:53:b2:85:f2:4f:1c:0c:57:28:
         05:7d:e7:a5:d1:98:5e:bf:98:89:20:b3:08:d3:1b:30:f8:c8:
         12:4d:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:24 2025 by rpki-client