Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          G9jYlwyX7e0kUntp04+7RA6I8BlyFrG7bc0KNceqiZs=
Subject key identifier:   EC:7E:59:86:D9:42:ED:6A:A8:65:11:76:C4:4C:B6:BD:17:5E:0D:E3
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       0199FAD7EB04026142C8F0B2955181D24E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 05:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:18 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: vrjcnHwet+/NHsXOJZC3sQ1+zUkxj2P1coFCViuqsFE=)
                          2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:eb:04:02:61:42:c8:f0:b2:95:51:81:d2:4e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Oct 19 05:01:18 2025 GMT
            Not After : Oct 20 05:01:18 2025 GMT
        Subject: CN=ec7e5986d942ed6aa8651176c44cb6bd175e0de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:09:95:2c:db:d7:3c:8d:57:96:bd:cc:3a:
                    6a:c5:80:b0:39:08:37:da:81:50:e3:d7:11:2c:11:
                    c9:3c:b4:94:00:0b:a0:08:f6:22:aa:9e:ef:db:b9:
                    55:5a:82:a4:0c:97:e6:99:f6:84:1e:b4:69:0a:85:
                    e0:3a:fd:08:cc:71:bf:43:fa:17:51:76:97:71:3f:
                    3a:44:67:4e:d9:16:5c:a6:a5:79:98:23:2a:1d:5c:
                    ed:4c:8e:26:7a:59:c0:4b:7b:b9:40:84:9b:12:d2:
                    c2:fd:a1:46:6d:d9:ce:5b:aa:9e:5b:aa:df:27:bf:
                    43:be:ef:0c:7c:b5:77:18:c4:fc:3a:84:8f:dd:9f:
                    6c:86:be:3e:da:5b:bc:7a:cb:50:6d:cc:2d:9e:99:
                    ac:25:bf:e1:78:94:5b:74:e3:3a:b8:ff:f4:55:48:
                    89:7d:11:c2:ee:bd:89:57:10:55:79:6b:62:03:59:
                    52:59:ab:f7:02:56:53:18:1d:dc:7c:ee:1d:4a:2f:
                    1a:0a:ae:ed:d9:3b:83:cb:62:2d:ef:d2:f3:8d:e4:
                    88:47:a6:0c:ed:d5:cb:d7:bd:69:63:c4:a2:ec:90:
                    ad:bb:b6:48:ec:a3:de:c7:92:84:de:c6:32:38:8a:
                    dc:1f:1e:08:57:94:11:5b:93:06:b5:58:70:10:00:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:59:86:D9:42:ED:6A:A8:65:11:76:C4:4C:B6:BD:17:5E:0D:E3
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3f:99:99:37:0c:d2:1f:09:9a:8f:a0:36:12:c2:0b:7f:f3:
         a6:80:4b:5f:09:13:13:f4:0d:5f:b6:9e:d5:b9:51:23:63:51:
         b2:ff:f2:6a:6d:f0:14:a1:e2:ac:44:c7:5f:13:f6:7b:3b:3b:
         ad:29:83:f0:ac:ac:f3:30:6c:27:84:ec:40:8d:a9:0a:a8:c3:
         38:e9:23:20:b2:f0:25:c9:4a:68:d0:84:05:2f:6a:91:9e:88:
         20:7a:cc:aa:12:6e:7c:06:68:d9:41:dd:1b:df:a0:25:d0:50:
         67:66:c8:70:c4:65:ca:79:4b:e5:c2:08:bc:fa:03:76:70:91:
         f2:11:67:03:d7:6d:67:65:ec:0f:69:fb:67:5a:68:20:b5:ea:
         37:75:a8:fc:b1:e1:eb:1f:ec:c8:a3:9e:0c:18:42:91:37:95:
         fb:88:ec:05:ea:63:ea:ef:7b:85:42:71:21:a4:09:90:a7:60:
         48:82:76:ee:0a:79:ce:af:f6:4f:e8:17:8f:d8:1e:46:2c:a6:
         46:eb:f5:b1:73:15:58:ce:f5:fb:7f:e4:2c:b0:fc:65:16:56:
         82:a4:82:21:75:c0:21:50:54:8d:5e:b8:3a:ea:3b:ee:8e:0d:
         f2:c9:94:fc:83:b4:db:73:04:6e:0f:6d:0c:d0:d9:a0:1d:31:
         81:a9:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:37 2025 by rpki-client