
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          TPnXPausOACN2LasG1gU/UnGqy1H9fbHPlcmw3Uy+rI=
Subject key identifier:   30:8A:5E:3E:6C:5C:FC:8B:86:CC:28:38:52:ED:EB:66:46:F3:BF:BF
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       019A4EF4972A8C8D1371962566033993F671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          1200
Signing time:             Tue 04 Nov 2025 13:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:43 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: x+fuvQ5LX8+hayIYu1vWEfeHAk1z4KHZzlCvR89NrPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:97:2a:8c:8d:13:71:96:25:66:03:39:93:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: Nov  4 13:00:43 2025 GMT
            Not After : Nov  5 13:00:43 2025 GMT
        Subject: CN=308a5e3e6c5cfc8b86cc283852edeb6646f3bfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:84:e1:3f:f2:ac:b4:80:8b:d0:8b:f4:13:
                    ce:a5:ab:43:12:82:03:96:31:d6:35:86:9a:55:25:
                    33:6f:03:d5:c4:41:1d:0a:11:8a:1c:82:7b:20:77:
                    7d:06:5d:45:9a:8c:26:23:8d:7a:b2:9e:82:b6:8c:
                    ed:92:03:a5:ab:5d:81:f6:ac:a3:2a:67:0a:a4:f4:
                    41:5b:5a:12:79:96:33:8d:47:d2:a6:8a:3f:ac:99:
                    43:b0:7f:46:c0:c2:23:01:f4:38:a1:9c:a9:37:70:
                    26:6c:b8:e7:71:18:db:ca:80:f4:70:d6:47:ff:c1:
                    48:2c:09:6c:c3:2a:4e:b2:16:05:f0:34:1f:ea:25:
                    56:3d:e5:e9:64:8c:ca:ad:93:89:39:a6:ad:68:c1:
                    49:79:3a:94:82:8b:0a:ef:7f:19:bf:fc:e9:ca:f6:
                    02:87:18:1f:e2:53:06:82:23:3e:9a:ce:7e:62:cf:
                    d9:07:16:93:1b:65:43:77:c3:5a:da:a5:a4:71:5b:
                    2f:34:a1:79:79:26:c2:f6:fe:3e:e3:a2:f8:dc:c1:
                    22:cc:d6:36:e9:6f:60:ec:d4:dd:d6:44:f8:c0:f2:
                    17:8e:e1:10:5d:a9:43:55:fb:6e:c4:7e:6e:9a:18:
                    a8:e6:d8:ce:85:1b:5b:d3:90:3e:ef:51:d3:6b:49:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:5E:3E:6C:5C:FC:8B:86:CC:28:38:52:ED:EB:66:46:F3:BF:BF
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         93:14:2c:0d:ea:ef:07:5c:6f:bc:e5:f4:b2:86:44:18:30:11:
         f3:90:23:66:b1:82:6e:0e:45:99:33:0d:d6:2a:41:22:34:8a:
         b4:c3:6d:f1:9f:02:e8:4b:1c:31:f8:93:ea:40:cd:0b:ea:f9:
         b6:e4:c7:42:cb:dd:14:c3:fc:b6:bf:da:20:c3:61:c1:3d:3b:
         54:55:72:18:12:7f:ee:57:69:5a:ef:f8:39:02:35:e0:fd:a8:
         05:3d:6d:76:c9:78:2a:a8:f9:21:82:42:be:30:23:db:df:b9:
         f4:bc:2f:8e:4f:c0:92:a6:f9:0c:e1:d4:b1:03:36:29:c4:55:
         00:b3:c0:c6:ec:df:a2:d8:86:79:8e:40:0f:a6:01:19:e1:1c:
         85:bd:5e:e7:4c:c4:c3:6a:0e:70:f3:35:3f:88:20:94:93:40:
         f7:d2:5b:9b:30:82:0e:e0:57:29:a6:03:1f:60:9a:54:a6:e8:
         cb:60:2e:61:fd:49:37:24:9a:6f:4a:89:3d:96:39:a5:78:72:
         57:3c:b5:90:19:b9:88:e3:8b:b7:25:0e:22:3f:db:2a:99:68:
         f4:d4:a7:62:1f:3a:9b:74:74:77:73:a8:5e:7e:2e:5b:8c:52:
         57:1a:c1:f8:dd:4c:ae:eb:04:cd:7c:dc:11:e4:0e:73:15:a7:
         d9:05:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:22:19 2025 by rpki-client