Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          aoeVdUGn0Em0hxogauonpyc7mi65TA9Bd34IQWWHnT0=
Subject key identifier:   B4:23:74:D9:5A:72:8B:24:D6:79:90:A5:DE:13:F7:2A:CD:C8:65:0F
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       019A4E4FDF0588712A08AA9EB99AF3F96A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          0DA0
Signing time:             Tue 04 Nov 2025 10:00:48 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:48 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:48 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: XuKVQ9Nft3GhA0jxoTi5DW2z2nOIXWmwfHrXxooleq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:df:05:88:71:2a:08:aa:9e:b9:9a:f3:f9:6a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: Nov  4 10:00:48 2025 GMT
            Not After : Nov  5 10:00:48 2025 GMT
        Subject: CN=b42374d95a728b24d67990a5de13f72acdc8650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:01:17:eb:1e:69:35:f5:a7:7d:15:58:27:
                    d6:a5:16:cf:dd:bc:89:4b:66:58:f9:4d:68:13:a9:
                    11:6a:ae:ec:85:3e:9c:9b:b1:6b:90:86:52:76:6d:
                    3a:15:4b:61:bd:cc:9b:1c:90:79:4d:ee:8b:b1:f8:
                    9a:b3:dc:30:69:07:2e:75:ff:0e:35:62:98:a6:26:
                    79:2e:9f:46:3a:b8:f6:46:37:d3:5e:9e:dd:3a:00:
                    98:6f:c7:b2:5c:5e:cc:79:42:2e:fa:dd:c5:c1:a0:
                    69:e9:30:eb:23:3e:6f:a3:75:93:7f:52:48:af:ee:
                    96:5e:5d:36:3d:a8:b2:c0:d2:5d:08:23:27:6a:b3:
                    d1:d3:fb:e4:1b:94:be:2a:f3:69:d9:6e:d2:43:bd:
                    f8:eb:2b:d4:33:33:8f:6d:b9:f2:cb:4d:ba:7e:bf:
                    ae:6a:10:f5:5d:55:fe:98:bb:62:e2:0c:c9:ae:51:
                    be:94:5f:70:86:d9:e7:d8:cf:4e:04:3d:19:62:f9:
                    0d:6f:6a:60:1a:75:73:36:de:c1:3f:17:88:fe:d3:
                    e4:1b:db:2c:0b:d8:b3:50:16:02:4f:ae:ed:ef:e2:
                    78:e7:6f:df:52:03:e7:78:df:eb:87:f5:cf:30:0a:
                    2a:51:97:07:51:03:01:04:67:49:f8:15:66:bf:98:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:74:D9:5A:72:8B:24:D6:79:90:A5:DE:13:F7:2A:CD:C8:65:0F
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:89:1d:a5:26:5a:28:bf:d9:15:9d:ca:17:85:40:79:86:
         9a:ae:86:f8:7b:e9:4c:9f:e8:e1:9f:34:45:84:5b:c7:b4:36:
         68:70:8b:96:a7:b3:56:2a:d4:d7:96:b4:d5:40:c6:6c:b9:2a:
         73:b6:25:f5:0a:d7:c2:34:cb:12:26:0e:ee:3d:c1:1d:36:45:
         97:6e:46:bb:da:37:53:df:6b:93:27:39:1f:b8:41:32:b7:13:
         cc:7a:a5:48:06:62:05:0f:1c:77:5f:01:42:ed:da:e0:15:0e:
         2f:5e:34:2a:cd:68:2d:4a:66:59:cb:f9:8e:99:ad:45:76:7a:
         a4:b4:33:83:03:3f:d0:ff:fa:fd:f8:e2:a0:c9:5a:55:e3:6f:
         03:54:dc:f1:3e:fd:f4:5b:4d:8f:39:fc:30:d4:99:b3:a5:c4:
         af:00:6e:3c:37:58:3e:0c:81:d6:cb:48:f5:4e:d4:e0:7d:1c:
         45:a9:97:b6:92:09:22:fd:eb:49:e1:3e:76:89:a9:f6:c7:28:
         bb:f3:e4:ab:d3:87:2a:f1:45:c5:99:59:c5:d9:c8:10:fe:f1:
         e0:f0:be:c8:37:46:a9:51:0e:e0:12:1b:14:b3:b6:cd:56:5b:
         6c:bd:fa:5d:44:a7:6e:4c:33:a0:3e:90:73:13:d6:df:7a:b8:
         9f:7d:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:57 2025 by rpki-client