Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          w/f8NSFf+F16cPDcbcaDAwjlrF2YyyT5BqKqXCKqa3M=
Subject key identifier:   F7:4F:03:49:E0:88:C3:25:F9:88:5E:B1:27:E6:F4:75:5F:3D:2A:41
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       0199FB45A41B7D2C5358983D28390580F655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0C3C
Signing time:             Sun 19 Oct 2025 07:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:09 +0000
Files and hashes:         1: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: wyNqiFGQYGWvFsplwWjNzxOJaMLdoxwVibq0ZfbUkI8=)
                          2: zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa (hash: us40hEG1NcVWjJDpzrMVHHjC6ox4uAMOwbjwuL6+2HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:a4:1b:7d:2c:53:58:98:3d:28:39:05:80:f6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Oct 19 07:01:09 2025 GMT
            Not After : Oct 20 07:01:09 2025 GMT
        Subject: CN=f74f0349e088c325f9885eb127e6f4755f3d2a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:2a:38:7a:e4:4d:1a:71:c9:bd:fd:da:03:
                    00:54:c0:94:78:d1:d8:3f:82:20:2d:3a:90:d3:33:
                    e2:1e:02:fc:a6:97:2d:45:c7:7c:3b:f0:54:27:ca:
                    c9:bc:fc:99:56:1f:49:ad:33:b5:80:df:c6:cf:31:
                    1d:a5:c3:d6:d6:38:41:8c:58:6c:57:7c:51:ed:e9:
                    d1:84:c7:19:04:5b:ff:72:46:e1:bc:b4:d8:7f:ef:
                    51:38:cc:63:d7:d3:7a:d7:90:9e:8f:e5:de:11:48:
                    32:41:b5:dc:42:54:40:7e:33:31:ed:9b:1d:02:04:
                    6c:42:b6:de:6a:49:19:17:f1:f6:c7:02:3c:e1:d7:
                    89:ab:6c:29:7d:43:7e:0c:04:3d:ee:b3:31:08:72:
                    34:b5:87:f1:cd:2e:ef:27:03:02:7f:fc:63:9b:80:
                    1c:12:f2:1f:45:e8:db:57:04:6c:91:65:44:3c:91:
                    9f:e7:18:54:14:5b:c7:00:60:1e:72:2e:e6:e0:73:
                    b7:bd:d1:7c:e6:02:a8:06:6b:f9:2f:d7:6c:0c:b2:
                    b4:95:d0:48:9a:d9:4f:f2:98:fa:de:13:ef:b3:c0:
                    7c:8a:79:b1:4e:62:c9:64:11:3f:ef:94:c3:b4:32:
                    70:97:41:e8:6e:fc:c7:5d:30:fb:34:24:c8:12:a1:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:03:49:E0:88:C3:25:F9:88:5E:B1:27:E6:F4:75:5F:3D:2A:41
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:65:4f:e1:8c:21:fa:96:71:d8:77:1e:33:d1:d7:ee:52:
         9f:e7:3a:db:c1:ee:ce:df:ec:6a:75:b7:5e:06:a2:05:2a:0c:
         89:6a:ac:db:7e:cf:37:fe:88:72:f2:fa:d6:0f:48:41:ae:2d:
         af:46:01:ba:60:af:f5:cb:2e:13:97:3e:8d:08:ed:3a:92:07:
         7b:c3:bd:d6:da:bc:29:ce:21:54:25:9e:e7:64:ba:e1:00:09:
         60:2c:8c:0e:4c:e8:a9:68:89:6e:2d:79:7c:b7:02:43:f4:03:
         5b:c5:40:fc:c3:3c:98:97:af:ef:bd:05:d3:47:91:ee:76:75:
         93:c3:3b:bc:6b:03:02:4e:29:27:ee:8b:1e:15:84:d8:a5:a3:
         23:6d:4d:b2:82:bf:30:1c:08:12:19:d3:6a:48:77:96:74:e1:
         14:58:e7:d7:34:7d:6f:96:54:bf:3f:1f:75:ad:ed:47:79:21:
         bf:fb:ae:94:a4:d0:d9:52:c2:c1:93:3f:b7:73:eb:0e:42:69:
         b2:4b:8f:33:cd:00:2d:0d:59:aa:f1:10:72:5a:98:4f:aa:b9:
         fb:05:0c:27:84:e6:e8:83:76:64:d2:8e:bf:63:ba:31:8d:45:
         82:e6:ea:06:2c:80:77:25:06:0f:49:f3:02:7d:c7:ea:cd:7a:
         0f:d5:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:02 2025 by rpki-client