Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          bo8dYV2Uwx70B+CZtmseZ1w/aAQEV1M978WovFEyPGg=
Subject key identifier:   CB:46:85:B3:27:09:82:7C:C1:2D:6B:47:C2:AF:D1:8D:0B:D2:05:85
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       019A51BE5C3712D838396B7DE9F1B05FD349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          0EE6
Signing time:             Wed 05 Nov 2025 02:00:21 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:21 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:21 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: IfD2BYd1ak5iocgJk39VZOGQzakXqDrpzuHp4A/O4eg=)
                          2: jJb63WHX8LsB3QDuigxBrD65ZR0.roa (hash: +ilD7JtRRxaEC6UNmKq5fdG6fZrQuNb1tHL4KgM7JRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:5c:37:12:d8:38:39:6b:7d:e9:f1:b0:5f:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Nov  5 02:00:21 2025 GMT
            Not After : Nov  6 02:00:21 2025 GMT
        Subject: CN=cb4685b32709827cc12d6b47c2afd18d0bd20585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:01:ba:a8:6e:be:48:e7:c8:4f:38:55:31:
                    cd:a2:03:eb:f7:3c:40:a1:61:ad:b4:f7:b2:e3:5b:
                    fc:6d:b9:9d:64:08:76:8b:32:29:36:51:d4:45:00:
                    53:93:14:f4:de:fb:ae:19:47:aa:b1:95:c4:c5:5c:
                    34:4e:b7:d9:f8:c0:2c:c4:a5:90:d3:9e:fd:0e:f0:
                    b9:0d:59:f6:55:64:f1:7b:10:b8:0d:12:53:80:52:
                    e6:56:27:fa:4e:4d:09:d7:15:04:13:fc:1f:6b:d0:
                    cf:74:7e:08:22:eb:83:b9:f5:fe:4c:d8:ea:ac:7a:
                    a3:37:64:53:b9:2c:28:90:63:54:80:10:be:3f:56:
                    a9:c0:be:e9:8a:38:f8:26:5c:29:6c:de:a7:33:b2:
                    be:4b:84:24:44:3a:27:11:03:c1:08:0e:29:ea:64:
                    f4:ee:bc:5e:13:02:66:f6:f1:3a:6a:5a:a3:cf:b9:
                    23:a5:60:a8:8b:dc:25:21:eb:1a:4e:11:38:b3:14:
                    2f:24:55:51:75:61:08:44:0a:d8:89:05:1e:87:1f:
                    d0:97:c9:57:b7:f7:08:7b:27:66:b2:03:89:01:d0:
                    06:24:25:21:f5:0e:91:64:18:0e:19:e1:09:ec:fe:
                    38:6b:37:77:81:7d:b1:48:61:42:e7:b9:e7:86:75:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:85:B3:27:09:82:7C:C1:2D:6B:47:C2:AF:D1:8D:0B:D2:05:85
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:cb:a7:dd:ba:5c:cb:e0:d9:1f:2f:8d:32:10:27:95:21:
         1c:ba:e3:b2:33:4f:4a:07:99:b4:0c:5b:48:3c:58:8c:3a:32:
         dc:73:e3:f0:a6:4f:93:74:09:cf:1b:66:bd:3c:38:81:78:ff:
         88:4d:67:09:4f:15:bc:1b:9e:b7:0d:9e:50:f5:d3:06:ea:f1:
         43:ab:8d:11:cb:04:12:33:1c:f1:7b:8b:dc:7a:cb:95:2f:7a:
         95:81:0b:a6:be:fd:17:77:9a:3f:2c:cd:59:05:a0:29:d7:e5:
         d0:26:36:3c:fe:1d:78:0e:e0:ec:72:32:c8:98:89:af:4a:c1:
         11:8d:5d:db:6f:c7:e1:97:05:5d:25:cf:32:45:2d:60:36:cc:
         09:70:19:bc:8d:c4:4f:76:0f:5b:be:a3:1b:ac:60:86:4b:d1:
         36:7d:23:f7:2e:c0:c8:17:d3:1d:67:6b:67:44:9b:bb:ca:24:
         7e:cd:16:bf:3d:6e:40:e5:d6:68:f8:66:1b:0c:3a:4c:a0:8d:
         d4:f0:85:54:ab:33:76:01:82:ad:5f:a7:88:79:af:76:62:84:
         84:63:85:1b:e4:29:04:b1:55:07:cc:98:56:47:bb:b1:ea:83:
         6f:22:0f:3d:1c:38:47:82:dc:56:e6:f6:f4:26:39:9f:2a:ec:
         a1:7f:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:29 2025 by rpki-client