
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          73COHxZl0XPqiEEWFZSnimC1e+JxsKC1bc2VnMVixsI=
Subject key identifier:   50:40:B4:EF:FA:8D:AE:C3:5D:C6:FC:B9:D0:FE:07:7E:BC:D6:9B:AC
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       019A4DE2145ACDE8689B105015FE307853CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          1100
Signing time:             Tue 04 Nov 2025 08:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:53 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: ABdBtYT92H/SnRCSS3uBY2LAyY68vEVzcu+eHmtJXBo=)
                          2: SA2FPjcpG1kQYsbun59Q7-Ncc5U.roa (hash: sLqwzq191GZfL/xfEdWZKrffVvqlf65Ic2rl/WtgP8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:53 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:14:5a:cd:e8:68:9b:10:50:15:fe:30:78:53:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: Nov  4 08:00:53 2025 GMT
            Not After : Nov  5 08:00:53 2025 GMT
        Subject: CN=5040b4effa8daec35dc6fcb9d0fe077ebcd69bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:a4:a7:1b:66:3a:0d:d4:fc:92:11:97:cb:
                    f2:92:da:d5:3c:a0:0c:eb:c1:5a:5f:30:c1:08:ee:
                    99:2d:71:45:5f:fe:7e:63:ea:50:b7:39:ab:b1:d6:
                    3e:5d:10:b1:76:9e:db:6c:1d:04:11:54:71:7d:00:
                    02:87:2f:d0:14:cc:a3:4f:45:67:8c:bf:77:b3:8b:
                    e6:12:f8:43:17:22:fe:ba:b6:52:e8:6d:80:5d:de:
                    51:d3:a2:e5:dc:64:ce:04:24:8f:da:ff:c2:5b:22:
                    3f:9a:b3:bc:16:03:72:a4:68:2b:52:70:fb:8b:3d:
                    e9:6e:2a:80:24:56:c3:66:ab:a3:f0:0d:bb:e3:ff:
                    c2:25:a9:9e:84:f4:78:ad:1c:5a:a8:59:03:74:06:
                    3e:39:36:a2:52:d8:f8:a9:d5:e3:80:f8:ab:4c:d2:
                    7a:3a:aa:94:1b:ec:8a:a7:e7:ac:54:dd:61:03:4c:
                    ce:74:7e:71:10:cf:d8:7d:b7:f8:4c:16:40:5a:31:
                    9e:59:bb:b7:e7:ff:a0:31:d0:5b:81:8a:4c:71:7d:
                    9c:4e:21:7c:83:76:4c:cf:b5:92:88:d6:60:94:02:
                    d2:a8:45:e5:cd:58:39:21:17:5a:dc:a2:da:3c:db:
                    90:9d:14:89:92:0c:39:9a:53:49:98:d1:f2:b0:b9:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:B4:EF:FA:8D:AE:C3:5D:C6:FC:B9:D0:FE:07:7E:BC:D6:9B:AC
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:06:94:e9:13:a7:75:1e:7c:cd:8d:73:04:c2:d0:e4:86:
         a1:be:80:a0:1b:3a:4a:44:e0:6f:34:45:33:a1:7c:94:8a:33:
         a0:7a:2c:8f:fc:b7:0a:16:44:fd:5a:aa:48:f3:7a:50:58:a3:
         1f:31:26:d4:68:33:e2:31:5f:e9:00:b2:ac:2d:ca:25:b2:2e:
         9f:3e:4d:1f:72:e2:63:40:9f:84:91:34:f1:80:92:36:60:62:
         02:ca:03:45:d5:96:9b:c4:64:6c:13:73:ff:8b:b8:09:ae:02:
         9a:ab:ac:94:67:9c:3d:77:25:a0:88:66:85:c1:08:f8:22:b5:
         8a:af:5f:b9:da:90:9a:d2:1d:65:88:7a:42:dc:82:d9:07:28:
         61:99:53:ef:aa:92:f1:ab:78:e1:c7:b1:75:55:88:a0:05:2d:
         14:dc:44:6a:50:35:d2:66:f6:9e:18:fa:5d:e6:2e:ee:e4:5d:
         28:48:b0:68:3d:b4:a5:fe:8e:a6:f6:c2:cd:26:e3:22:55:95:
         82:4c:60:be:9c:21:b3:d6:10:9b:bb:8c:d9:a4:87:2e:a6:74:
         56:e7:2f:dc:b6:02:12:d1:07:c2:e8:bf:4f:21:a9:0f:f3:5a:
         61:29:fb:aa:6a:72:8f:4a:5a:00:61:6b:3c:11:98:70:a2:37:
         d9:4f:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:23 2025 by rpki-client