Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          zpCYL5ye05acz9W+PD35bt9HRC3HD5HzkTdvrjh0UXI=
Subject key identifier:   A1:BC:A7:CF:67:EC:DB:FA:81:6D:B1:31:97:EB:A7:42:E4:1D:D2:BC
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019A50E423E01522B0DA8E42DF39FAA37B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          0F35
Signing time:             Tue 04 Nov 2025 22:01:59 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:59 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:59 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: ZHdWLvCaIztG9v5FM+1olIHTVd6K+RLzzPV/CNfS8TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:23:e0:15:22:b0:da:8e:42:df:39:fa:a3:7b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Nov  4 22:01:59 2025 GMT
            Not After : Nov  5 22:01:59 2025 GMT
        Subject: CN=a1bca7cf67ecdbfa816db13197eba742e41dd2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:74:49:72:7a:ba:bf:9f:1b:8c:38:13:9c:
                    50:16:b2:37:93:5b:f3:d8:a1:33:b6:5e:ed:be:36:
                    ba:b5:3b:d5:9b:df:85:b9:58:91:22:1f:4a:49:8e:
                    ff:f6:65:64:37:f2:be:83:1f:57:6f:c1:76:e4:b2:
                    ae:69:cc:03:6e:77:9c:8a:8d:fa:08:78:62:6f:ae:
                    6c:23:ce:9a:dd:99:d6:92:4f:ac:c0:82:e3:aa:76:
                    d3:df:05:db:3f:5d:f4:c1:15:b1:bf:a4:99:73:3d:
                    07:2b:3d:ee:ef:db:6d:d1:c2:7d:29:0e:c4:55:a4:
                    8d:ec:6b:c9:e7:32:d8:05:e2:cd:6c:4d:b8:7a:a5:
                    9f:67:e7:e4:d5:1b:fa:3a:71:c6:88:aa:a0:c4:06:
                    b0:cb:5b:4b:d9:c9:b5:76:d2:28:b0:c0:f8:45:70:
                    f8:ec:17:9e:b4:d9:52:68:b4:8b:56:97:63:3c:1d:
                    8a:2e:3b:15:f9:c5:57:48:e2:8b:7b:cf:b0:7c:db:
                    df:2f:fb:eb:80:f5:1f:51:d9:67:4a:92:db:7d:49:
                    9d:9f:6a:31:3c:fb:90:e4:91:dc:44:60:e3:6c:91:
                    d7:d5:31:24:1f:8b:96:d0:39:63:17:d4:7f:91:e5:
                    2c:80:42:eb:21:1b:48:36:fd:c8:1e:27:d0:15:71:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:A7:CF:67:EC:DB:FA:81:6D:B1:31:97:EB:A7:42:E4:1D:D2:BC
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:c0:7c:90:5f:0c:bd:b6:86:a8:33:f2:44:28:6f:c3:e4:
         26:4c:a4:96:3a:b3:29:46:6b:e7:b0:24:02:4b:74:45:3a:ae:
         c7:6b:51:e0:78:e2:3d:a2:d9:42:25:54:7c:9d:9c:82:cb:2a:
         9f:6c:57:52:5b:59:fc:3e:55:98:80:3c:ea:e9:1d:32:d9:f8:
         70:85:b8:82:0d:02:68:3a:12:13:69:28:78:3b:a4:9a:af:ab:
         70:20:f3:d3:af:1d:c4:71:27:8d:53:72:35:05:0c:a9:fb:c9:
         05:da:90:26:53:91:96:d9:d4:e6:5e:1d:9d:0a:3e:a5:94:35:
         bf:77:5f:a1:2e:42:2e:47:20:f8:68:6d:5e:fc:78:c9:0e:8a:
         48:cb:ee:f7:5c:40:77:8f:18:2a:e4:dd:16:7d:90:a9:6b:d0:
         37:cc:b7:2e:ff:11:81:a4:d5:ec:e4:13:d9:80:a8:2c:c0:92:
         cb:d0:f0:bd:2b:44:0d:ab:9a:27:a4:3a:40:ae:c3:0d:79:b0:
         ef:86:f2:50:07:14:38:42:db:f8:87:e0:f9:86:c0:48:88:70:
         09:e5:c8:e3:be:31:ce:c8:f2:2e:1e:71:a4:ec:71:cd:8a:ff:
         e5:01:1e:28:f5:c3:1e:c7:44:55:d0:64:1b:2c:ed:0f:a0:6b:
         91:6a:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:34 2025 by rpki-client