Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          630sM2J6waRrlsJP0fm0el+AMtGAWwLAt3SXfjBqE0k=
Subject key identifier:   AB:F8:17:30:54:F1:DD:A6:81:A7:DE:BC:0F:61:BD:0F:70:31:08:DE
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019A003539AE537458C41D783700A72AE3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          0FE7
Signing time:             Mon 20 Oct 2025 06:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:19 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: S1CaJs9NE1vmQqXrxQyzTmDBGQvK44ruB8HMzRCMls0=)
                          2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
                          3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:39:ae:53:74:58:c4:1d:78:37:00:a7:2a:e3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Oct 20 06:01:19 2025 GMT
            Not After : Oct 21 06:01:19 2025 GMT
        Subject: CN=abf8173054f1dda681a7debc0f61bd0f703108de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:2b:72:67:5c:7b:8e:43:d5:49:82:46:ce:
                    73:50:0f:f7:87:74:86:82:31:f0:36:93:a2:72:f2:
                    9d:27:67:77:47:c5:a0:46:21:68:fe:15:cb:b1:b3:
                    54:73:2b:89:58:23:c3:cb:f0:ea:a3:ae:6e:fa:9a:
                    02:75:f6:1b:eb:c4:23:19:85:25:b1:88:4d:e9:5e:
                    b6:6c:30:82:ce:c4:d5:34:cd:a5:1d:45:5f:9e:d3:
                    ab:29:e1:41:60:4d:ce:c4:4a:85:14:98:b5:35:1f:
                    c4:a6:7a:51:6d:06:ec:4a:6c:fe:27:d1:55:4c:e2:
                    21:64:7a:8a:24:dc:90:ce:31:25:ce:18:c2:af:94:
                    66:b7:37:7b:1f:28:68:9e:df:68:e4:5f:52:11:24:
                    1d:da:3a:0d:22:8b:07:df:5d:35:3b:b9:e3:bd:fb:
                    7b:ab:de:1c:3a:83:50:53:30:81:9d:5a:16:59:d7:
                    8e:96:5f:32:0d:c7:22:e6:26:5c:44:68:1b:5c:ef:
                    35:75:a0:03:bd:61:f3:19:53:50:97:ff:cd:14:60:
                    49:8f:6d:10:e1:9c:84:6a:e3:85:5c:3f:1b:2e:df:
                    a6:84:a8:c2:f0:07:e9:00:3c:bd:53:9d:04:d5:8b:
                    2f:52:a9:35:4d:69:b3:ca:a3:5b:06:dd:10:6f:40:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:17:30:54:F1:DD:A6:81:A7:DE:BC:0F:61:BD:0F:70:31:08:DE
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:f1:af:17:92:0a:00:0a:19:7d:47:07:c9:18:b0:5c:41:
         1d:df:9c:46:22:b8:ae:b4:84:5c:37:0d:d0:a6:ba:0c:04:e4:
         c9:b5:24:93:78:e4:cc:e7:0b:af:ab:78:ec:25:26:b6:54:05:
         48:da:90:80:c8:31:ec:12:16:56:c7:4d:cf:54:ea:41:cd:da:
         85:83:0a:c1:44:82:94:44:b7:0c:7d:4e:3a:2e:03:fc:49:b4:
         aa:a1:f2:3a:4f:d4:8f:bb:9d:17:35:30:5d:f7:f3:42:d1:86:
         67:cf:39:60:09:f2:47:f7:44:11:06:6d:3d:5a:62:75:c4:6f:
         22:f6:e4:a6:c7:66:23:86:ee:a7:c5:7a:42:71:76:b4:05:66:
         a5:5e:03:6c:8f:57:a4:66:7a:49:d6:c3:ad:59:e6:9f:37:3a:
         dc:2a:0f:e6:43:0a:30:02:16:46:61:1f:24:76:41:25:52:64:
         21:87:38:e2:bf:69:14:3d:fc:fb:88:b4:a9:3f:01:b9:da:da:
         0d:c7:98:8d:78:a4:9f:2f:04:0c:49:8c:49:d8:84:3a:3b:f9:
         c3:dc:e2:fa:b7:bd:ad:b7:b1:32:78:68:df:6c:59:f1:aa:07:
         f0:85:44:4e:f1:b7:e0:f8:3e:ae:17:d5:67:73:4f:fb:1a:cd:
         d7:37:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:33 2025 by rpki-client