Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          VYOfG07brRkaU9nXZ3TcSm5U3uDppBr6Xm6GOhzJYsQ=
Subject key identifier:   21:62:B6:6B:45:55:F9:16:09:2E:0A:3E:91:A4:DF:62:06:19:60:15
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       019A56AE0120661B758F63100BC32F20B0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0D8E
Signing time:             Thu 06 Nov 2025 01:00:35 +0000
Manifest this update:     Thu 06 Nov 2025 01:00:35 +0000
Manifest next update:     Fri 07 Nov 2025 01:00:35 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: TXd0f7CyaGP8EhxiILJziD7RcrE/BdJ10OQb4g1U5dw=)
                          2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
                          3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
                          4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:ae:01:20:66:1b:75:8f:63:10:0b:c3:2f:20:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Nov  6 01:00:35 2025 GMT
            Not After : Nov  7 01:00:35 2025 GMT
        Subject: CN=2162b66b4555f916092e0a3e91a4df6206196015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:a5:ae:77:a5:fd:57:9f:7f:fd:2f:27:9c:
                    c4:9c:f3:7a:dc:56:4c:a5:21:3c:52:3b:37:ba:71:
                    c3:2a:4b:fd:33:73:42:69:91:f7:77:a2:18:80:f9:
                    18:6c:79:09:ff:d4:7b:52:12:2d:cd:98:3d:54:ac:
                    d3:d8:55:88:3e:a7:a6:dc:84:45:91:23:2a:e2:14:
                    d7:d5:a5:65:fd:01:6c:31:57:89:81:b9:2f:f0:be:
                    0c:88:06:57:2a:5f:91:db:ee:38:4d:46:ce:aa:51:
                    f9:3e:be:30:d3:49:af:55:a0:6a:2d:9e:37:82:fc:
                    79:d7:08:73:87:a5:85:24:88:68:a8:32:56:2a:98:
                    8d:1c:0f:7f:bc:4a:32:14:4d:1c:7c:9d:96:da:66:
                    3a:82:0c:e4:29:6e:19:61:59:9e:f9:ff:da:2c:e6:
                    d3:e0:43:d2:17:ef:57:e9:73:77:42:af:2b:87:6b:
                    2b:ca:56:95:0f:54:fd:22:4f:e3:17:50:a2:1e:50:
                    48:bf:cc:27:ae:6b:ce:80:56:40:9c:cf:86:f6:9b:
                    66:bd:63:e2:d7:8f:b4:bf:f2:17:69:01:0d:8d:01:
                    54:26:14:02:2b:4a:9d:c4:ff:6e:f0:a4:b2:da:33:
                    a4:b0:4b:e0:75:3c:6b:23:ab:fd:fc:5f:80:05:9b:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:B6:6B:45:55:F9:16:09:2E:0A:3E:91:A4:DF:62:06:19:60:15
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:46:ff:78:15:6b:f3:ec:ce:79:87:61:25:f7:60:a7:ac:
         8f:a3:f8:96:6d:27:e0:58:3c:70:47:5d:b8:cc:91:e7:a1:a7:
         ed:3b:95:13:10:d9:f9:ae:0c:57:39:25:5c:04:fd:3f:51:8c:
         b4:37:fb:87:d7:9c:4e:18:b7:d7:bc:98:00:a7:c1:ec:28:e7:
         87:32:57:9d:cd:7c:13:db:c4:98:df:aa:19:35:9a:cc:fd:8b:
         4b:37:95:ad:b3:2c:c1:0b:77:56:80:f8:eb:b8:26:17:f5:c0:
         d5:f8:5e:07:b3:05:4d:5c:3c:42:03:fe:24:9a:2c:92:88:97:
         3d:40:6c:81:e7:7b:84:ea:71:00:e4:3d:6a:48:0d:a1:b1:8a:
         ee:a3:da:01:26:0d:b4:c5:7b:e1:73:be:21:67:d1:fd:c8:22:
         e3:71:15:94:a9:f3:8e:55:08:1f:04:55:47:b6:37:86:17:93:
         2e:0f:7d:1a:5b:dd:ad:b7:1a:39:ea:c5:0c:49:41:da:6a:bc:
         38:0a:be:47:be:b4:af:f9:03:d9:0c:70:ff:a3:a1:a7:11:0d:
         4b:1a:40:b3:45:82:a3:f5:1c:c2:55:30:56:21:7b:b1:8e:87:
         1a:57:fc:e1:e5:92:58:36:c6:e6:c7:bf:af:77:0d:0a:3e:91:
         1d:63:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:52 2025 by rpki-client