Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          AdBd0RUvPY1W+rsv4ztsVm1R9kN8BLYIB7xLbWuJI+w=
Subject key identifier:   8F:2C:8C:5D:2E:40:FB:F9:F3:67:5D:B2:C0:2F:1C:DB:20:8B:21:D1
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       019A537652D1577C3B2E2D765CF4F91CA99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          15C2
Signing time:             Wed 05 Nov 2025 10:00:54 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:54 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:54 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: c2BCcSpdSHUziEWSs6h4aJSKHlV18bUp77Q/qqdVthc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:76:52:d1:57:7c:3b:2e:2d:76:5c:f4:f9:1c:a9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: Nov  5 10:00:54 2025 GMT
            Not After : Nov  6 10:00:54 2025 GMT
        Subject: CN=8f2c8c5d2e40fbf9f3675db2c02f1cdb208b21d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:d9:4e:2e:a4:5a:74:f7:0f:bb:28:75:3a:
                    d2:b1:1d:cd:75:7c:ac:b9:19:f9:5b:ad:c9:8f:70:
                    b6:8f:11:3a:53:18:e9:1e:95:cc:58:cb:34:40:21:
                    21:44:35:f3:c7:0e:29:99:82:9e:80:a2:99:26:b7:
                    52:65:3d:54:24:ab:c9:5d:f9:e7:ec:03:d5:9d:1b:
                    fb:f8:8d:0e:21:35:f9:93:a0:21:6f:6b:3f:b8:76:
                    ef:32:95:c7:24:cd:37:46:28:8b:39:78:90:c6:52:
                    21:f2:b4:12:d6:0a:72:45:ca:ca:2e:12:55:73:c0:
                    77:75:e5:cd:83:87:40:fd:01:47:38:f5:43:c8:e7:
                    d0:f8:c8:58:81:e3:db:8e:9e:06:52:aa:9c:59:ac:
                    fe:ed:d4:1e:dc:94:e8:b3:83:36:65:cc:d3:58:39:
                    48:97:f8:f7:fc:ac:55:a6:44:54:5f:22:09:95:51:
                    b7:39:64:cf:61:b1:42:68:31:d3:bb:a7:9d:07:a5:
                    cf:ee:36:e5:8e:8b:96:f8:91:8c:a2:53:48:da:6f:
                    e5:5a:90:8e:cb:38:e4:12:80:8e:f0:53:0a:d7:61:
                    20:3c:ac:29:b7:c8:d2:be:d4:c7:4c:a1:80:ad:38:
                    db:56:21:ee:9b:51:c0:8c:74:1b:22:f0:08:da:81:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2C:8C:5D:2E:40:FB:F9:F3:67:5D:B2:C0:2F:1C:DB:20:8B:21:D1
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:13:84:3b:ba:49:14:01:78:0d:8d:f9:05:d5:23:c0:33:a2:
         d1:9e:3a:b8:84:7b:ff:db:6a:af:43:bf:0a:13:e6:bf:1f:9e:
         bd:17:0a:19:f2:95:fb:dd:1e:16:5d:ce:e4:9e:cb:57:69:57:
         1d:a2:b4:f7:46:7e:4e:62:a9:eb:46:a4:f3:3f:4c:ad:71:a8:
         52:af:2e:62:88:66:d0:c0:75:67:3b:e9:ac:bb:c7:64:a1:66:
         51:6f:cc:81:eb:35:83:85:2a:40:ef:b7:c7:78:6b:50:2a:ea:
         60:7d:9e:2d:79:84:53:e3:1c:0f:5c:c5:bf:c4:3a:60:c2:39:
         3b:67:2f:85:6d:00:ef:d0:4f:63:69:33:46:c0:00:4f:6c:25:
         24:4e:51:a5:01:d2:f8:76:62:80:d3:0e:0f:5c:41:55:69:b4:
         12:7d:11:c5:6f:ef:59:57:e3:e9:29:d8:ee:ab:b5:6c:46:a4:
         1b:d6:e0:bc:16:49:60:69:30:ec:6e:fc:49:38:ee:a8:80:22:
         eb:dc:36:d7:a1:0d:f8:ad:47:47:6d:07:90:c6:5e:cd:3e:90:
         83:2b:57:a6:2c:6d:48:90:89:b2:6d:4f:6a:4b:49:fe:99:41:
         80:8b:26:c8:32:40:9b:bc:76:b0:8c:48:aa:af:aa:35:45:76:
         57:50:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:12 2025 by rpki-client