Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          4H8cfP9lyzI8YAou/Pwq55AWZRJpnNQGamxfM73qDgo=
Subject key identifier:   F6:CF:1C:B3:E7:88:BE:5A:2C:E9:5D:3E:04:69:26:52:E7:7E:2B:63
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       019A4D3CE1FDCAB00241CAC20372F760B30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          1213
Signing time:             Tue 04 Nov 2025 05:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:26 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: Rq3eddmlHei+6xfLqkPkwcxWeb7jNe8MjcK1YchexHU=)
                          2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:e1:fd:ca:b0:02:41:ca:c2:03:72:f7:60:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Nov  4 05:00:26 2025 GMT
            Not After : Nov  5 05:00:26 2025 GMT
        Subject: CN=f6cf1cb3e788be5a2ce95d3e04692652e77e2b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:73:b7:ca:c3:66:8a:4f:3d:b9:32:e6:7d:
                    f8:d3:18:d0:e7:43:0b:34:d9:36:81:40:70:c1:9c:
                    33:a7:92:eb:c6:0b:3c:ef:f3:92:ba:1e:f8:87:94:
                    8a:31:71:89:68:04:18:4f:ea:31:af:3b:77:a6:eb:
                    8e:d6:e9:b2:13:46:56:5d:11:4e:7d:25:63:c9:bd:
                    a1:c7:13:6a:92:9f:1b:fd:d1:7a:41:f2:aa:a5:37:
                    7b:86:c0:c8:3c:7c:40:ca:63:e8:4c:2c:b3:85:05:
                    bf:87:2f:46:1b:d1:c5:cf:29:af:4f:e0:0b:3e:15:
                    16:8b:0b:f8:27:fb:ae:f7:1b:99:30:08:37:f4:19:
                    21:6b:82:22:ec:2f:62:1c:c8:ee:7b:98:b6:38:a3:
                    26:88:18:98:ed:bb:53:f8:d7:72:f0:75:4d:0d:9e:
                    95:82:68:1b:81:17:4f:e6:25:c4:54:e2:5b:8d:f2:
                    ca:a0:2c:8f:3d:43:23:4e:07:02:6e:ab:b6:20:03:
                    82:12:48:7d:2a:5f:ff:9a:f3:73:8b:1b:44:24:af:
                    a0:8d:41:d4:44:06:2d:30:e0:25:13:d0:81:5d:84:
                    8d:75:2d:e4:c4:82:a5:1c:fa:9a:36:16:20:58:ee:
                    60:2d:99:a0:86:82:23:45:47:a7:01:40:b4:90:00:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:1C:B3:E7:88:BE:5A:2C:E9:5D:3E:04:69:26:52:E7:7E:2B:63
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:2a:9b:24:1e:66:18:9f:bd:db:d0:c3:50:41:95:95:9b:
         bc:fe:c7:e4:9b:1d:c2:b9:15:08:7e:96:7d:38:cc:84:6a:a7:
         ab:ea:f0:1b:44:3c:41:a5:e4:05:47:86:af:ce:45:95:bc:1d:
         31:93:40:4e:66:ed:df:c8:9c:03:32:a2:ac:52:5b:79:be:9b:
         65:51:6f:d7:7e:3c:75:7f:ca:cc:e8:fd:f3:92:b3:2e:3d:01:
         2b:aa:0e:18:07:df:8f:0a:0e:dd:52:83:07:ab:3d:f7:46:dd:
         00:01:da:5b:e8:ed:07:77:ff:f6:9a:1f:68:15:ca:af:99:2a:
         d1:7a:2f:ba:e8:0d:2b:57:82:c2:94:bf:f2:46:88:45:da:ed:
         cd:6a:ba:c6:f2:01:0d:f0:c9:01:ab:a1:02:14:8a:a1:7e:85:
         d1:d1:2a:27:75:ce:ef:07:c6:8e:ad:8c:a6:85:59:3b:ea:64:
         ac:f1:60:c6:8f:a7:e4:1d:cd:14:b1:2b:e8:77:f2:93:1b:b0:
         a9:2d:a2:e4:f6:52:03:6e:81:94:16:d1:3f:3c:8e:39:70:4a:
         27:8f:dc:ce:26:2d:a2:37:a1:dd:19:35:b6:51:bf:73:0f:9d:
         ec:d4:ac:d6:26:2e:35:0b:d1:cc:a0:c0:8b:81:8c:5c:90:df:
         36:cf:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:30 2025 by rpki-client