Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File:                     GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier:          2nbrlL9LlZzdJ5wxHHf2kgASeoNuoN0rNu8gQKeXmgY=
Subject key identifier:   55:C0:90:A8:22:69:C0:97:08:8D:F1:28:2E:75:76:6C:09:29:A7:A1
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer:       /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial:       019A4D73B7D960F41E276FAFB2C505865C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number:          0E6A
Signing time:             Tue 04 Nov 2025 06:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:20 +0000
Files and hashes:         1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: S7i5bKRyn9xaf3Zo5XwIDjhZtiqLDODhBQpwyafBhuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:b7:d9:60:f4:1e:27:6f:af:b2:c5:05:86:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
        Validity
            Not Before: Nov  4 06:00:20 2025 GMT
            Not After : Nov  5 06:00:20 2025 GMT
        Subject: CN=55c090a82269c097088df1282e75766c0929a7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:90:a0:d0:2b:b5:21:3e:b3:1d:b1:32:fe:
                    59:07:bc:08:74:14:90:da:c8:9e:21:bd:e8:95:f9:
                    e6:80:22:3b:96:df:b1:ce:88:af:29:5c:17:f3:0d:
                    0d:af:c8:6e:d0:4d:7d:06:00:20:8a:2f:0c:0d:72:
                    50:a7:6d:ad:b9:8d:b7:28:90:9b:6a:43:4a:7a:56:
                    75:78:e5:93:d0:28:54:df:35:dc:b2:f2:17:3d:17:
                    d2:8f:f3:e8:5d:74:40:20:7d:fe:74:48:bd:c5:44:
                    a4:9f:8f:9a:df:ac:43:c2:98:3e:4a:16:20:aa:c1:
                    bf:0b:a2:e6:c3:78:a1:52:92:bb:43:67:0b:bb:36:
                    2f:ee:10:af:95:2e:3f:81:1e:42:cc:12:42:65:c2:
                    a9:98:4b:b4:3e:27:f2:3a:a6:72:35:b9:6b:59:da:
                    02:b2:41:81:30:24:0a:78:b9:ff:83:61:a8:3e:07:
                    f3:ab:2e:0b:b8:82:c1:34:70:28:5e:86:25:93:af:
                    62:d0:0a:64:c2:32:61:d0:d5:8b:35:a6:70:45:b9:
                    be:14:b1:dc:9f:e7:c8:ef:17:04:5f:1a:7a:04:a0:
                    e8:49:9b:05:a0:e6:9a:04:46:bc:88:da:55:6c:5c:
                    d4:0c:9a:81:14:bb:16:c5:25:68:12:8e:f2:7b:1c:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C0:90:A8:22:69:C0:97:08:8D:F1:28:2E:75:76:6C:09:29:A7:A1
            X509v3 Authority Key Identifier:
                keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:08:d1:c6:4a:58:50:f1:1c:67:97:03:49:b6:b8:e0:02:
         2b:48:7b:33:b3:7f:b9:bc:57:13:3e:41:f2:91:4a:91:53:5a:
         ca:50:ec:a7:21:f3:12:7e:f0:c1:8a:ec:6b:d0:5e:ab:c8:6e:
         11:8d:f9:61:02:3d:4c:a4:15:0d:45:23:c6:60:a4:3c:b0:ab:
         cb:0b:9e:0a:0f:70:73:b0:a4:1b:25:f7:06:aa:64:47:0c:3c:
         ed:1e:bf:0c:8b:27:fe:6d:d7:09:73:5a:c8:16:c3:cc:83:e0:
         ff:ce:f3:47:c1:a9:70:bf:c9:dc:a6:a3:a9:f0:25:78:f5:91:
         b4:d2:d8:37:e2:26:ae:dd:df:75:a1:87:46:da:55:ef:1a:b4:
         2e:e3:32:f9:ae:e3:b0:38:07:30:d0:59:1c:9d:cc:32:36:3c:
         c1:c1:69:23:18:5d:94:ad:fd:93:f3:c2:11:aa:0f:0d:62:38:
         ac:25:7e:db:c9:5e:8f:54:ee:99:0d:c8:5c:c6:d6:eb:96:ae:
         01:34:e6:38:70:d8:18:5e:e3:20:59:6d:bf:9f:16:f6:c9:04:
         11:da:41:a2:91:15:0e:e6:bb:62:96:d5:f0:c4:67:a0:d7:ed:
         02:05:f3:e3:83:d8:f8:91:c4:bd:e3:23:e9:f5:8c:99:c0:d0:
         3e:ed:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:46 2025 by rpki-client