Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File:                     a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier:          llOBE13nrJTYS77GwEw7IMoT82PfiqvbNReI94QznBk=
Subject key identifier:   53:7C:48:4C:BE:6C:60:59:C0:EA:5A:A2:99:54:98:C1:A5:73:6A:3F
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer:       /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial:       0199FC58BCC27775997ED7CA904AEDA83418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number:          01CE
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: UYxmt64UPfqOklF/uZVBI0Xw2loyqMfqC77PNzhcAeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bc:c2:77:75:99:7e:d7:ca:90:4a:ed:a8:34:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=537c484cbe6c6059c0ea5aa2995498c1a5736a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:ac:91:c2:b5:72:2c:99:69:f4:a2:1a:17:
                    a6:a6:5a:bd:09:a2:5d:5b:5d:44:9a:15:5b:9d:fe:
                    c7:a0:e6:3c:72:12:76:1f:8e:40:d9:e7:14:3b:27:
                    cc:19:b5:f2:3b:94:6d:74:db:18:b7:45:c1:30:b7:
                    0e:33:22:54:70:63:09:85:01:20:76:96:e1:d1:98:
                    80:f4:6c:b3:fe:c1:57:18:4a:86:f3:85:45:44:f8:
                    9e:2e:78:31:ca:6f:54:07:8e:de:f1:a5:e6:a1:71:
                    76:3f:95:81:f1:38:13:c1:d5:7f:44:c3:8d:11:dd:
                    64:61:b3:7b:1f:f4:f8:82:39:b4:1f:78:00:4d:b6:
                    a5:b6:30:39:01:0a:5d:0a:73:bf:57:22:45:76:bc:
                    c0:7c:db:ab:1f:3b:f4:43:49:df:83:25:06:a9:04:
                    bc:d6:3a:4e:7f:0b:23:d6:9c:dc:4b:1f:fe:73:aa:
                    d6:40:32:57:9f:70:84:64:fa:26:76:97:b4:04:34:
                    3f:a2:57:e9:3f:22:45:ef:97:8a:16:20:df:7e:02:
                    c4:50:03:db:fa:21:f9:81:0d:07:27:79:4c:1b:cf:
                    04:49:03:a0:b1:d6:db:35:49:26:ea:93:29:2b:87:
                    0e:10:77:0a:3e:75:f6:d3:d9:6b:21:57:41:33:8f:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:48:4C:BE:6C:60:59:C0:EA:5A:A2:99:54:98:C1:A5:73:6A:3F
            X509v3 Authority Key Identifier:
                keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:94:2d:39:ac:de:0c:62:12:66:be:f3:3c:9e:37:a7:fe:
         6a:7d:97:8a:a5:04:5f:5e:b9:c9:91:56:14:eb:91:79:5d:3d:
         5b:85:5b:c0:9b:86:42:ab:d4:3b:5b:fd:2e:9c:25:94:87:87:
         e7:01:5a:3d:8c:70:d1:dd:4d:b2:1e:7b:26:34:5d:20:87:9c:
         5d:ea:35:e3:c5:9e:4f:4d:60:a6:98:c5:e0:2e:c5:3d:61:42:
         89:ee:bc:fa:10:4e:3f:7c:74:31:ce:16:e5:f3:bc:2d:6a:5d:
         00:b3:1d:7f:34:e9:99:54:68:5f:ac:7c:1d:eb:c6:b8:42:94:
         f8:42:86:1b:18:76:1b:4a:2b:85:58:df:f9:2a:c7:41:9a:b2:
         3d:2f:62:6d:2b:87:5d:3f:cb:15:ce:a7:c5:29:cc:99:73:a3:
         21:79:97:b0:b9:a4:2d:a7:f3:29:40:37:e1:65:ef:cc:ae:fc:
         49:74:97:07:b4:24:d2:b6:4a:6b:62:3a:80:01:82:85:b6:93:
         f8:5c:e5:23:76:6b:44:23:e3:0d:d8:6d:cc:0e:74:6a:01:99:
         d7:45:41:e0:68:b1:7b:24:31:da:93:1b:51:92:4d:ea:7e:2f:
         4e:1c:ef:a8:65:71:89:57:1b:23:ba:a7:3e:cc:70:2e:4c:b8:
         5f:bd:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:10 2025 by rpki-client