Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File:                     fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier:          jDEB4jSunbHY7hmBlvabQSLp7teuhh0Ntghn63Fzmf4=
Subject key identifier:   6A:E8:5F:D4:D0:FD:8D:44:70:FC:9B:74:A1:A5:97:B5:2D:4D:12:00
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer:       /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial:       019A4F622D8C7EA213D40B57C247CA7E4C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number:          1709
Signing time:             Tue 04 Nov 2025 15:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:25 +0000
Files and hashes:         1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: tHDvb/riGxe5izsq4MNT4VHJu3nSJWtrRBxk+gT0Msg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:2d:8c:7e:a2:13:d4:0b:57:c2:47:ca:7e:4c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
        Validity
            Not Before: Nov  4 15:00:25 2025 GMT
            Not After : Nov  5 15:00:25 2025 GMT
        Subject: CN=6ae85fd4d0fd8d4470fc9b74a1a597b52d4d1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:f4:a1:46:cc:a1:1e:7d:14:8e:f6:fd:8e:
                    a5:45:09:ee:1f:98:08:09:55:79:36:e9:f7:45:e0:
                    41:61:25:94:60:43:73:cf:fe:c8:8a:0e:3f:39:5c:
                    a7:2e:52:c9:77:5d:66:43:47:9f:2e:08:fc:19:ae:
                    c6:84:16:c9:a6:c3:13:b4:36:d1:6a:d9:5e:11:68:
                    85:99:26:8b:67:de:7d:9e:73:09:55:7f:bb:dc:ee:
                    fb:71:7f:88:ab:68:a9:3c:ab:8b:5d:ad:f6:ed:da:
                    cb:92:d7:aa:93:f0:66:65:dd:2c:97:9c:ea:e1:79:
                    02:d5:26:6d:5f:c9:fe:be:68:be:8f:d4:fb:83:0d:
                    3e:46:99:aa:6d:20:83:8d:14:fb:71:d6:0a:d5:d8:
                    77:ca:00:03:cf:30:9b:9a:c0:ec:d2:2e:0f:3b:63:
                    8e:a2:25:de:50:5e:85:4e:44:73:68:7a:12:3f:0d:
                    79:e5:93:70:da:b9:a0:a5:af:83:69:aa:1a:5f:8f:
                    c9:d6:62:89:72:91:21:51:07:05:61:79:a9:21:1b:
                    ec:f7:3d:9c:5f:bf:ae:a9:40:f5:11:d1:09:dc:1f:
                    23:a9:5d:04:93:c1:58:ad:73:2e:a8:16:42:fb:85:
                    88:9e:57:11:8f:0c:b4:c6:6a:6c:c4:79:23:5e:b6:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:5F:D4:D0:FD:8D:44:70:FC:9B:74:A1:A5:97:B5:2D:4D:12:00
            X509v3 Authority Key Identifier:
                keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:61:56:23:cb:2f:71:d0:fe:8c:7f:cc:61:20:a4:e5:dd:80:
         62:86:c9:99:98:dd:bb:ff:d7:41:32:bc:d3:16:db:02:a3:25:
         4a:7b:e4:d6:89:cf:94:ce:97:51:03:45:f8:79:bc:d5:a4:9d:
         1e:c8:56:8c:4a:e2:0a:6a:eb:5a:b3:c0:3c:34:78:4a:55:34:
         90:8f:46:94:bb:76:96:5a:70:b2:37:9e:0e:76:f1:75:51:59:
         ba:0e:7b:ec:0c:6a:23:26:20:61:25:73:cb:94:af:ee:d4:18:
         aa:f0:6f:28:4f:05:9b:b1:e1:5a:06:e4:57:a8:37:ef:fb:aa:
         67:d4:d8:ea:69:9b:8a:5d:43:9c:6d:a2:b2:06:0d:23:56:a8:
         9e:a0:de:59:d2:96:88:d2:5a:f6:67:07:62:6b:f9:6c:3a:d4:
         8d:cb:8b:83:67:28:44:7f:4f:e9:cd:1d:4b:fb:9d:95:a4:e0:
         4a:41:a0:4f:e4:d2:09:91:e6:e9:3d:9f:51:b7:be:d8:fb:c2:
         cb:37:dc:81:46:32:e9:10:2c:6f:ad:10:f5:25:28:33:aa:73:
         b9:f7:c3:83:24:13:9a:84:33:be:94:4b:72:a0:8f:7b:9a:02:
         e8:e9:1e:1c:1f:56:49:a4:04:a1:a7:fa:6f:bb:e9:5e:8c:1a:
         c6:0b:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:56 2025 by rpki-client