Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          /HeM46NL0zPImxvrdUVk0gz10qg1SFubr4xOplZQ3cI=
Subject key identifier:   FB:18:9D:A3:08:20:03:B6:4A:03:69:85:A4:56:2D:01:E7:20:E9:17
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019A4EF4CB08811A22A17C6BA6D858C8416E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0EA3
Signing time:             Tue 04 Nov 2025 13:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:56 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: eiStisAsiWEeUg0Zw6ztVN2M1O9M99GR6Mb4nbqxr9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:cb:08:81:1a:22:a1:7c:6b:a6:d8:58:c8:41:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Nov  4 13:00:56 2025 GMT
            Not After : Nov  5 13:00:56 2025 GMT
        Subject: CN=fb189da3082003b64a036985a4562d01e720e917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:92:00:bf:3e:11:2d:a1:0e:a2:32:83:e2:
                    63:e4:34:d2:71:06:43:55:ab:74:92:34:74:7c:f7:
                    c8:56:42:0e:85:5a:1e:31:eb:6f:88:93:96:0b:d0:
                    84:9f:26:a6:12:63:8b:54:5b:70:4d:e6:6b:47:06:
                    73:6f:74:c4:b1:7c:19:2f:d4:b5:ec:ca:21:25:fc:
                    1d:cc:1f:41:b3:71:4f:8f:03:4f:8e:ea:c6:86:69:
                    df:a7:06:87:1c:40:ce:03:a6:af:1b:8c:8a:19:1f:
                    5c:f7:8b:6a:b3:c2:04:9c:91:98:62:fb:7c:90:6b:
                    44:5a:05:63:5c:21:08:a0:27:fd:41:df:5f:5c:c9:
                    e4:18:ce:ca:f7:79:a2:00:02:e9:30:91:30:ef:4b:
                    17:3a:b8:ce:99:88:77:86:99:54:8a:70:64:5c:c2:
                    3d:13:fd:cf:52:82:ee:0e:c1:88:4d:3e:1b:83:99:
                    94:23:38:d1:e8:44:80:8c:9e:06:55:b7:96:b4:c7:
                    cc:5c:d7:84:4b:4b:c6:9b:01:b5:65:d7:61:b2:79:
                    0c:db:d7:12:75:7f:bb:b9:c4:7c:64:63:c4:ab:3a:
                    dc:be:93:94:5e:47:d9:a2:15:98:17:a9:21:28:8f:
                    38:0f:11:09:88:c7:d6:da:37:80:ba:c1:ed:fa:b5:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:9D:A3:08:20:03:B6:4A:03:69:85:A4:56:2D:01:E7:20:E9:17
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:28:cf:ee:21:ae:98:b9:11:3a:e5:fa:9f:58:5f:50:17:
         d6:26:96:51:10:5a:a4:47:35:9f:1c:47:f5:cd:07:36:8e:48:
         a6:bf:8e:32:ab:b7:2c:bc:8c:f0:96:41:1d:d1:b5:77:41:9d:
         4c:39:e2:67:c9:31:82:66:44:c7:db:c3:24:33:d8:9a:3b:af:
         4e:2d:fc:d7:07:6a:1b:0f:0c:e0:aa:df:a6:ae:8e:ef:0d:81:
         0a:f1:37:bf:e3:60:6a:24:a9:a1:50:d8:4a:f0:c4:d7:56:23:
         63:88:93:f9:8a:4e:08:11:ed:53:7c:56:92:be:08:e4:1f:67:
         4c:e9:92:33:54:6b:76:45:e6:35:a2:a1:30:1e:9c:2d:53:08:
         e5:ef:72:e3:9a:47:3f:9e:96:73:6e:a8:88:c3:97:72:97:9f:
         14:0b:aa:b6:ef:1f:e2:88:88:0e:bf:29:a1:bf:e7:97:8d:0d:
         8f:fc:4e:64:5f:fb:53:7a:77:e9:cf:1e:6b:79:d7:68:88:ed:
         3a:62:0b:43:fd:c0:0d:29:94:1e:84:25:22:01:13:43:e7:18:
         ef:2d:fc:76:76:37:61:af:08:2f:04:7d:c8:dd:ae:79:1f:d9:
         db:ec:30:e1:1f:b0:d9:1d:23:33:d8:37:b9:fd:16:a9:15:f1:
         9d:57:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:14 2025 by rpki-client