Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          E+kpDViN4s2RsxYZeYGqSGpLngRDiJl51gJGQDcD/Ps=
Subject key identifier:   7B:96:CA:D2:87:46:78:2F:35:05:BC:8B:6A:FE:01:CB:22:BA:54:9B
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       0199FB45F0B06F3C855A5F0CA07E80E8E620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          13EB
Signing time:             Sun 19 Oct 2025 07:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:28 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: fiEIl9gD92U/7yU6qvyNtAs/4fi8bVjQMewHW38vBu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:f0:b0:6f:3c:85:5a:5f:0c:a0:7e:80:e8:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Oct 19 07:01:28 2025 GMT
            Not After : Oct 20 07:01:28 2025 GMT
        Subject: CN=7b96cad28746782f3505bc8b6afe01cb22ba549b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:e4:3e:b1:4f:15:ae:ff:61:6c:a1:d4:54:
                    39:81:dd:c5:fb:f6:a5:ab:94:69:5b:86:64:77:50:
                    80:87:91:ae:24:30:c7:6e:cc:ea:ef:03:cb:df:30:
                    c2:24:df:67:f3:3a:16:73:a3:aa:50:ae:9d:88:39:
                    20:29:06:d5:c4:b0:e0:70:ed:b7:58:38:62:ef:3e:
                    4a:8d:ed:6d:4a:74:43:2d:75:ff:53:2b:5f:d6:c3:
                    4a:a2:99:8a:23:6e:e8:a7:91:89:46:3b:f5:e1:1a:
                    f3:10:87:f6:5f:dc:c4:33:fb:c5:96:d5:31:f4:fd:
                    1c:e2:92:67:ff:2a:c6:49:ef:fb:08:c4:b3:fb:98:
                    fa:a2:bd:24:3f:04:65:2b:47:23:47:74:40:5a:15:
                    3c:b3:52:3a:e6:3c:6f:60:9d:74:d5:1c:fe:fd:54:
                    9f:aa:d3:ec:07:68:47:84:7f:9a:7a:db:aa:3e:03:
                    96:42:91:c4:f7:a8:71:e7:37:da:39:57:91:bf:7b:
                    6d:58:1b:7c:40:35:ac:1e:95:ef:03:cd:43:fd:be:
                    b9:ac:78:19:b7:be:26:79:fb:c9:97:5f:98:49:10:
                    7f:5e:92:40:74:86:9c:ba:ab:f1:22:36:4a:39:ac:
                    c5:0b:89:fa:21:38:93:9c:2d:06:16:fa:0c:89:cf:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:CA:D2:87:46:78:2F:35:05:BC:8B:6A:FE:01:CB:22:BA:54:9B
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:b0:cc:1d:80:57:f1:12:7e:ff:e0:13:07:24:c9:6e:76:
         69:e0:bc:20:52:2e:3a:5a:6a:88:45:2e:d7:49:e4:63:bd:44:
         97:41:36:67:a5:2a:99:81:05:56:04:51:c1:d8:d8:5e:06:19:
         1e:06:07:32:7d:8c:50:42:6f:82:cf:d8:d5:09:42:28:35:ea:
         03:89:4a:ca:27:7b:9c:21:0b:d5:78:d7:97:b6:4d:b8:ed:1f:
         ca:74:f7:fa:11:02:68:37:30:b4:30:20:02:48:f9:59:f3:97:
         e8:e0:06:2e:ba:73:ea:69:1b:ff:03:39:79:7c:d3:5a:ed:7f:
         91:d3:cc:2f:9b:b5:02:7d:72:f5:41:f7:31:c1:be:91:24:c0:
         d3:2b:05:5d:36:d4:e3:f2:18:f9:35:d1:f4:6d:23:2d:0e:d1:
         65:60:fd:79:2e:1c:c5:16:fa:8c:ce:31:27:ff:a6:fb:16:a1:
         3f:48:d3:c0:e8:9c:7a:ca:39:ab:cb:d3:6f:b4:4f:94:31:36:
         b8:ed:f4:c4:64:9d:f4:89:c6:77:f7:ce:30:a0:0d:6c:d5:cd:
         9a:7f:70:da:46:77:f5:9e:d7:89:1d:4d:c5:ad:ca:3a:51:88:
         f5:93:f6:aa:b5:e5:77:f9:8e:45:7e:a5:72:6d:ac:f7:6e:82:
         1d:d9:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:08 2025 by rpki-client