Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          0t7Gq/jwkdL+sUqHW02Z0TCnChdmzm60MW/JuBPeWV4=
Subject key identifier:   97:15:CA:F4:0D:94:09:FF:B5:41:36:DA:C0:72:F7:C4:C4:37:A5:0B
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       019A4E18CE2D3D6067C00891E318D2BC6239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          1023
Signing time:             Tue 04 Nov 2025 09:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:39 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: +i1TBIweLF2DmlMB4PCCQJxMEUNWoU6KCVgO8fsS1DA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:ce:2d:3d:60:67:c0:08:91:e3:18:d2:bc:62:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Nov  4 09:00:39 2025 GMT
            Not After : Nov  5 09:00:39 2025 GMT
        Subject: CN=9715caf40d9409ffb54136dac072f7c4c437a50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:77:d0:1a:e7:a5:0f:2b:43:7d:4c:ac:2f:
                    89:14:9e:0a:61:26:64:f5:91:4d:c1:2e:fb:d7:3b:
                    2b:2c:5d:f1:35:a0:de:66:3f:90:4d:85:14:fd:c2:
                    05:db:13:12:f0:4a:cc:61:fd:b1:c2:bb:66:36:2e:
                    c9:8c:90:67:17:2b:58:c4:dd:aa:b6:e8:9d:af:7d:
                    f8:e4:aa:25:f4:e1:7e:12:50:bb:86:2a:77:08:51:
                    05:8b:9d:37:f1:83:db:d3:e0:7b:00:08:14:21:d5:
                    fe:83:0a:9d:e9:bc:a6:51:1c:61:a8:e8:4c:bf:81:
                    ad:6c:59:aa:46:c8:5e:8d:28:89:f0:ea:83:c1:cf:
                    79:bd:cc:8d:8a:79:64:57:90:f7:31:29:fd:1f:8a:
                    49:d6:e7:8d:ba:03:1d:58:2f:24:18:6d:9c:80:a1:
                    a4:c8:a1:b6:90:c0:b1:d1:83:01:2b:b0:b6:7b:a7:
                    d9:51:a5:db:13:f6:68:de:8f:1e:58:37:53:1e:0b:
                    35:7c:6a:bb:5e:49:b4:56:2b:ac:bd:9f:07:d0:cc:
                    0c:fb:e1:c1:24:2b:cd:f1:10:0b:28:06:44:2c:60:
                    63:9a:f0:4c:28:fb:03:3e:21:c6:a8:7a:1f:1f:5c:
                    af:3e:db:a7:72:62:71:ba:52:e1:d4:63:b7:68:d5:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:CA:F4:0D:94:09:FF:B5:41:36:DA:C0:72:F7:C4:C4:37:A5:0B
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:20:95:40:7e:d8:20:b0:2f:1a:3a:12:c1:07:20:3c:1d:
         95:19:33:93:db:9b:9d:e8:ff:6b:42:8e:8e:51:99:52:b7:33:
         d3:b0:38:50:fb:c3:c9:8d:5a:59:90:b1:ec:ed:de:1b:f7:03:
         1a:14:36:c8:13:1f:19:7b:0e:4a:19:1d:4f:59:6e:f7:31:59:
         02:f7:39:d1:ea:fc:71:f2:cb:4e:3b:48:da:0d:ff:e6:e8:3d:
         25:dc:ad:bb:a0:0b:9f:02:43:58:e3:9d:55:d5:f1:bc:3d:c5:
         67:c4:4e:45:44:f3:97:24:aa:dc:a9:ff:60:67:13:e8:f1:ac:
         a5:88:9d:08:a5:12:08:25:3f:23:05:0f:3a:a1:75:94:2f:80:
         38:79:ff:be:9e:b1:59:82:44:ef:72:55:08:36:c9:d9:94:fd:
         a3:c0:09:de:37:d1:77:62:4f:e2:5b:19:02:c2:e3:1b:21:32:
         a8:b1:df:23:a2:c4:44:81:a0:c3:d6:95:71:c6:4d:ce:3b:7a:
         f7:88:c9:83:f0:ea:eb:7d:eb:8a:f4:88:ec:3c:e2:44:82:5a:
         ba:c8:92:50:db:8b:7a:f6:df:8a:65:82:fd:a6:91:0a:d8:37:
         1f:d0:bc:fd:f7:41:98:aa:e3:c5:59:f3:bb:ae:9e:85:06:04:
         ca:0a:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client