Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          cV9x9J8ytdhJzphoGDNuYIEMm47QRz9cuOmgzx1Lgi0=
Subject key identifier:   C7:27:7C:AF:E1:F4:01:7B:33:57:ED:68:43:D8:7D:C5:02:F1:3E:71
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       0199FDA1CA6782480A9F69ADE9260231222C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          12F8
Signing time:             Sun 19 Oct 2025 18:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:02 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: i3wFGjKsPIfLRZQJP0rDQgSKBMr535ACE4s0mBHjc5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:ca:67:82:48:0a:9f:69:ad:e9:26:02:31:22:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Oct 19 18:01:02 2025 GMT
            Not After : Oct 20 18:01:02 2025 GMT
        Subject: CN=c7277cafe1f4017b3357ed6843d87dc502f13e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:5e:00:39:cc:6b:61:06:31:87:c0:e0:92:
                    cc:35:61:67:27:f2:f9:1b:24:7a:d8:ec:00:5d:1d:
                    35:c7:21:81:23:16:a0:93:2f:61:ad:6d:44:94:10:
                    23:aa:18:fa:12:4c:3b:fe:a4:a0:af:ef:3e:41:6b:
                    6f:00:b1:69:16:82:0e:9a:e6:e1:fa:41:fd:7a:03:
                    9c:a5:57:4a:b1:f2:d0:51:91:46:d9:2f:98:13:d1:
                    69:a9:e8:8b:d4:22:43:ea:cb:18:6e:e3:84:ec:d2:
                    26:3f:c3:9c:e9:98:b3:3f:bf:35:a1:76:03:2e:d1:
                    27:91:89:6f:09:23:7e:30:69:21:3f:95:d5:2a:c0:
                    08:3c:5b:0a:57:73:7c:6a:a1:50:51:58:12:7d:18:
                    19:5c:a9:ae:a2:5c:a7:39:6f:45:14:18:44:fb:a0:
                    6b:eb:1b:af:e4:e2:38:4f:59:30:65:40:66:81:6f:
                    5b:76:c3:d5:25:e2:14:ff:9c:96:9c:ee:b2:bc:e5:
                    66:d1:65:ca:92:ea:37:b2:8b:78:d7:e7:be:3f:13:
                    ab:58:55:67:9d:0c:08:25:09:ab:dc:83:fe:e7:e1:
                    42:56:21:82:0e:ac:bf:81:fd:3a:cc:07:47:fa:64:
                    69:35:ca:c0:8b:b9:15:91:2f:cf:88:3f:24:9e:7f:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:27:7C:AF:E1:F4:01:7B:33:57:ED:68:43:D8:7D:C5:02:F1:3E:71
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:11:a5:47:ab:e6:13:91:bb:73:c3:da:c3:4c:1d:a7:a1:
         32:91:ac:cd:b2:28:90:f9:d7:32:ab:56:30:95:7a:57:bd:00:
         e7:7b:b2:00:98:3f:36:be:c9:b2:6c:4f:06:6f:b7:58:0d:26:
         5f:b3:54:70:3a:0f:8c:91:e4:0e:51:f4:6e:bd:3e:a3:fb:11:
         52:b3:88:76:e2:de:e3:fd:b5:46:74:02:96:e9:c0:a9:46:cb:
         65:ca:90:f0:50:54:7d:0d:cd:30:b8:af:f6:00:4c:1d:2f:a3:
         e6:35:5d:bf:16:5c:f3:4b:ee:a4:0e:0c:cc:13:90:3c:07:42:
         cc:6d:e3:10:6f:6a:ec:f0:52:b8:8d:29:62:a1:f1:f9:d9:71:
         ae:f1:38:9e:d8:83:f5:76:1a:6a:94:24:3a:07:6e:e9:6c:b8:
         e2:08:e8:85:d6:b9:e2:a9:a4:3b:82:a4:5a:67:30:20:59:14:
         7d:95:7c:ee:c1:a1:d1:cf:bf:ce:bb:80:b8:2d:c2:dc:cb:8c:
         e9:5c:0a:f4:e9:2e:70:ff:74:65:67:af:bd:3f:b6:02:97:a8:
         64:78:35:43:57:31:33:04:11:c6:9f:b8:2f:11:fd:79:9f:ca:
         a1:3b:f7:e7:d8:5e:ce:79:67:1e:5b:75:68:89:d8:ce:bf:9c:
         2f:be:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:46 2025 by rpki-client