Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          8LkneGnLIKZThrkJJs6ZE6VCqLTnZ8C3Bd6y8i+4fwU=
Subject key identifier:   72:62:5B:9E:23:76:40:65:6A:1F:E0:BA:91:6C:92:F7:B1:10:C6:C1
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       019A4E18CD0B31DBBD31A599EFBB88B71799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          058D
Signing time:             Tue 04 Nov 2025 09:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:39 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: SBdCuGOdWe85MtjXIVKzS1qnGQe/fOBaVjBScscKDGQ=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:cd:0b:31:db:bd:31:a5:99:ef:bb:88:b7:17:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Nov  4 09:00:39 2025 GMT
            Not After : Nov  5 09:00:39 2025 GMT
        Subject: CN=72625b9e237640656a1fe0ba916c92f7b110c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:42:fb:f5:91:d2:13:cd:00:33:82:8c:73:
                    c3:88:1c:a4:05:72:cb:aa:f2:be:a7:67:b8:0a:52:
                    e9:57:c5:f4:51:3b:15:0c:e7:fc:d6:b1:1f:2b:51:
                    72:bc:bf:34:0e:aa:bf:10:4b:9e:21:d5:82:e6:9f:
                    36:7a:2e:8f:1f:54:b6:45:8d:5f:5e:38:8f:58:60:
                    c4:a2:bb:7c:de:08:c6:d0:e6:33:60:f8:69:7d:1f:
                    20:f1:28:91:b1:f9:37:af:21:ef:05:43:73:dc:9c:
                    ed:ed:31:d1:e1:9f:96:25:ed:19:3a:d6:5d:5b:59:
                    c3:24:64:9c:e3:32:7b:65:ca:ea:40:eb:41:db:0f:
                    33:52:e9:d4:2a:f1:05:d7:8d:8a:70:aa:e8:df:55:
                    5a:1f:5a:9e:07:e8:4c:54:73:b1:9b:a2:a2:ce:d2:
                    eb:80:e7:be:88:89:4b:8b:46:20:28:34:3d:bb:f1:
                    02:1a:bd:a3:50:7d:f3:91:6f:69:2f:a1:e6:c9:ae:
                    46:e2:1b:72:76:ad:2c:52:06:d4:c2:9d:2f:c6:ad:
                    92:6e:12:b2:43:5d:a3:d4:b3:fa:05:a8:e8:67:f1:
                    b3:14:c9:b5:7b:16:c9:4c:37:f0:ca:cb:97:60:72:
                    c8:c7:cb:bf:67:92:47:c4:0e:74:b6:95:52:89:ce:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:5B:9E:23:76:40:65:6A:1F:E0:BA:91:6C:92:F7:B1:10:C6:C1
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:91:28:e6:b4:5b:bc:98:f3:62:cf:18:3e:b2:f4:15:5d:a4:
         6e:e3:dd:23:75:1d:22:4a:7a:01:14:34:00:3c:6c:cd:bb:54:
         17:93:0f:66:40:ea:9b:bb:a0:61:89:9b:86:e4:ec:a7:d2:78:
         cc:0f:55:5b:b1:98:5b:b3:1a:d9:d9:4a:38:89:bb:67:82:04:
         0e:23:8b:a4:48:ca:41:ca:0b:73:ae:68:d5:e3:97:0d:0e:a2:
         42:4c:20:5b:e4:67:25:37:dc:81:04:32:be:72:f2:f1:bd:9e:
         08:69:7d:92:9e:3d:82:81:77:20:59:8f:50:57:6c:59:91:18:
         b6:c9:04:38:26:8c:98:a4:30:ef:3b:15:87:1f:2e:33:e0:65:
         e1:65:23:6a:d5:78:60:26:5a:e7:ee:e2:89:66:43:8d:77:e1:
         22:0b:d8:ac:24:62:3b:19:55:7f:89:6d:7b:b1:b2:91:3d:34:
         72:7d:54:1b:8b:41:54:02:05:6c:a6:e4:3f:f0:b2:be:40:8b:
         b3:fd:eb:1e:43:a9:4a:9e:32:4f:5e:cf:7a:b9:6d:cf:ac:ea:
         40:2d:78:75:e6:6a:55:9d:f4:cf:50:75:c7:ae:74:58:4e:ad:
         1f:b6:1b:e6:e6:8e:05:21:a1:17:1f:8c:41:f3:7b:a2:1b:99:
         a0:d6:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:20 2025 by rpki-client