Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          vdgCRVvHxcH9+tXogqZNMq3wa1jy355Bn/KuvszXD8o=
Subject key identifier:   46:9D:1B:BC:D9:48:FD:BE:4B:A3:EF:6D:27:1B:0A:41:0E:7B:B4:5D
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       0199FB7CA6E6A6E36EBE0FFCA412C85599E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 08:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:14 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: 85DY6mTSVWCjpMVLPkk862Kd5tSg8671pIgRm+xwdas=)
                          2: geha7iQ1rH3EuPcaRcUifOKzQvU.roa (hash: +mhm2AbX83eujN7tnN0AlZkDl8/zUPKZGbQPpl0Ndlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a6:e6:a6:e3:6e:be:0f:fc:a4:12:c8:55:99:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Oct 19 08:01:14 2025 GMT
            Not After : Oct 20 08:01:14 2025 GMT
        Subject: CN=469d1bbcd948fdbe4ba3ef6d271b0a410e7bb45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:0e:dd:5b:ba:d0:80:6b:18:ac:50:0d:ad:
                    7b:fb:5e:39:28:93:79:db:6f:5c:1c:3e:2f:bf:07:
                    98:75:1d:a0:9b:3e:43:dc:7d:f8:9a:f2:67:de:6e:
                    5d:0a:cc:d8:12:a9:44:2a:3e:3b:14:31:41:37:c8:
                    84:53:b1:31:27:e4:75:22:18:7b:6f:2e:4b:75:a4:
                    67:56:cd:dc:32:49:7e:92:4e:13:6f:a4:cc:65:ee:
                    f9:b5:9f:2f:49:59:5d:7a:8e:84:b1:e9:e7:99:0d:
                    26:e9:a3:a5:42:3d:e9:69:aa:64:aa:bf:6c:04:ae:
                    1b:57:bb:0d:e3:0a:9d:6d:70:7b:89:fd:4d:5e:c3:
                    19:55:27:15:13:9f:7f:a7:4a:f7:af:9e:da:9f:62:
                    53:76:ef:55:49:e2:e2:3b:95:19:17:30:ce:13:c3:
                    06:a1:1a:4f:31:3e:8d:8c:27:df:46:00:d3:d5:55:
                    c0:36:47:4d:3d:e9:2a:f0:6e:32:5c:7b:73:2c:bb:
                    30:27:ce:49:e5:fc:1d:df:67:f4:4a:8e:41:1e:0f:
                    0f:bf:f1:bb:9f:6b:37:2e:bb:12:4d:85:1f:ed:b8:
                    d2:de:a0:1c:47:0f:5e:30:e8:a0:91:1e:ec:12:32:
                    98:5c:f5:36:08:a2:3d:8c:27:be:f3:db:f0:39:a4:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:1B:BC:D9:48:FD:BE:4B:A3:EF:6D:27:1B:0A:41:0E:7B:B4:5D
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:90:86:88:af:20:fe:f4:62:47:1f:cb:2a:f7:ce:6b:a5:03:
         af:d6:05:1b:14:a6:6c:83:33:09:00:d3:1d:b6:17:86:4f:4f:
         ad:f6:34:c0:69:1d:89:4a:fe:fb:4b:32:b4:19:19:ea:a2:f6:
         ad:45:d5:e9:2c:95:d7:25:47:4c:64:b1:49:16:9b:02:dc:df:
         2a:72:a5:b9:08:78:d4:16:e1:2c:4f:ea:f8:d8:3b:cf:9c:c0:
         58:66:f3:dd:df:52:09:dd:a8:49:1b:07:d8:47:38:28:17:d9:
         ad:48:c0:84:2e:52:e0:4f:66:f4:64:bc:33:c0:4a:4c:c5:4a:
         7f:a0:ff:8d:d5:07:68:24:a4:68:1e:9a:fc:1c:cc:64:5e:eb:
         70:6d:1d:68:01:52:d0:d8:6f:55:d2:1a:ce:f4:b2:9b:61:d9:
         6c:b6:57:30:86:32:2f:5c:f1:f1:e0:42:f3:64:b1:ec:4a:41:
         00:eb:82:97:a1:ec:ca:97:45:db:66:a3:a1:d2:c0:00:df:84:
         51:4d:6c:3b:50:a5:2f:97:01:63:59:b6:7b:ba:29:21:39:a5:
         85:56:8e:ec:f6:38:8a:45:9b:0a:dc:5d:af:c2:22:5b:08:31:
         38:2b:ca:c6:fb:87:fb:d0:5e:72:a9:c1:77:3a:3b:92:c0:fa:
         f0:4f:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:25 2025 by rpki-client