Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File:                     rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier:          bTr3qxa9iULhdPOOnYmc9adjp54EF8qsL2Q9i2MWYKw=
Subject key identifier:   E9:5A:12:83:91:1F:86:90:74:E5:89:25:7E:EC:59:15:63:C9:D3:81
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer:       /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial:       019A4D747D0B381CBA1D94AE5A56A10FDEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number:          1143
Signing time:             Tue 04 Nov 2025 06:01:11 +0000
Manifest this update:     Tue 04 Nov 2025 06:01:11 +0000
Manifest next update:     Wed 05 Nov 2025 06:01:11 +0000
Files and hashes:         1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: zcFiqH7M/deyc1W9cO2+tYCkAr5CxCXOdeHOx/g/3lM=)
                          2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:7d:0b:38:1c:ba:1d:94:ae:5a:56:a1:0f:de:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
        Validity
            Not Before: Nov  4 06:01:11 2025 GMT
            Not After : Nov  5 06:01:11 2025 GMT
        Subject: CN=e95a1283911f869074e589257eec591563c9d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:ac:bb:34:11:b9:a2:b8:38:6b:78:bf:27:
                    55:9a:8e:5e:a3:f6:e1:2b:9a:24:6b:73:c9:b0:7d:
                    14:24:69:a6:cc:98:ea:ad:b0:36:16:8b:85:d6:0f:
                    8c:9b:9e:f7:f0:0c:79:66:e3:f3:4a:c5:d6:9d:dc:
                    74:f8:c5:50:a7:33:36:45:85:fe:3a:29:0e:34:82:
                    6c:b9:73:6c:c7:b3:b7:af:35:15:03:65:86:b6:61:
                    04:d9:90:99:7e:17:38:a5:4a:67:ea:6d:48:e4:bd:
                    56:46:0c:6e:bd:3f:4b:76:5a:0e:16:03:06:8f:1c:
                    b8:13:c8:9e:a0:72:38:10:1a:b3:81:eb:b9:11:04:
                    bc:23:5e:04:2f:85:16:91:29:20:6e:55:7e:7e:4d:
                    b8:9e:78:ed:62:4a:28:57:d3:ca:27:76:76:70:8b:
                    6e:b8:58:b9:07:fc:73:6c:1e:a0:c3:b3:23:59:64:
                    31:ab:02:7e:87:ba:af:35:a5:10:55:21:87:d1:ff:
                    b8:b3:4e:2c:57:ec:51:3d:40:ff:80:8c:eb:05:ce:
                    cb:60:4f:a9:ea:7e:b4:5e:2f:8d:9a:c8:7c:d3:f9:
                    53:2a:1c:83:b5:f4:1f:f8:e4:c0:e1:c2:40:16:6f:
                    69:8a:b1:ca:12:4e:66:90:30:b9:c8:89:5c:95:03:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:12:83:91:1F:86:90:74:E5:89:25:7E:EC:59:15:63:C9:D3:81
            X509v3 Authority Key Identifier:
                keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:30:34:17:13:b2:b6:cf:98:6a:52:00:b5:09:5c:bf:37:13:
         1b:70:92:80:a3:60:a4:8b:6b:15:48:db:61:f2:ad:5f:09:ef:
         bd:e0:06:05:a1:4d:de:83:96:af:e6:45:e7:4c:47:32:59:a8:
         09:8b:d8:4e:2d:4c:79:0c:5d:6a:ee:88:cb:2f:af:aa:21:e3:
         59:19:fc:6d:c1:69:cf:64:bf:99:d6:3b:37:05:47:5b:02:77:
         1e:41:86:70:00:b8:49:9c:f1:a4:d5:b5:b0:6c:6c:e5:e4:b5:
         cb:7f:54:a2:58:b5:e9:40:13:f7:e0:0b:70:90:90:e1:f9:06:
         ad:b8:20:dd:3f:2d:f5:97:33:77:20:7f:95:d5:30:6f:56:5c:
         94:7f:3a:69:bb:f0:74:da:60:e7:58:9c:80:76:0f:8d:40:c2:
         fd:e1:c8:fc:16:b5:7a:21:9a:8f:c0:4c:21:91:10:be:b4:3b:
         83:4c:56:15:6f:70:61:98:2f:e8:8d:95:e4:87:47:ad:78:4f:
         ef:d3:35:f7:ef:a4:c7:dc:6b:02:2b:e4:ff:27:9e:53:ee:0f:
         c3:26:b1:a1:79:22:2d:1a:0d:0b:39:8d:87:24:33:dd:4f:cf:
         27:e2:a4:d8:b5:f8:ca:bb:73:44:e1:27:17:43:a5:89:b3:5f:
         b9:1b:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:44 2025 by rpki-client