Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File:                     6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier:          aBPnxinaQr+X6pZ1mGhkLOrzG7LZ8FhTflmRyMfz9LY=
Subject key identifier:   EE:08:DA:88:A8:60:16:C2:9A:86:B3:0A:81:DE:F1:5B:1A:B1:8A:8E
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer:       /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial:       019A503E4412BE3BCECABF5CE08BF4FB9A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number:          0168
Signing time:             Tue 04 Nov 2025 19:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:49 +0000
Files and hashes:         1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: v2SGZWwq43sOkX+oJCunkYwVW10bQvPU9l6eyWuL9IM=)
                          2: BAM3nXGrGMN-vPq2R9npnfCa7M8.roa (hash: u9Ttm9d9a7OCOprvdQDw/C2eraaJpITqpYw8QAs1tzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:44:12:be:3b:ce:ca:bf:5c:e0:8b:f4:fb:9a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
        Validity
            Not Before: Nov  4 19:00:49 2025 GMT
            Not After : Nov  5 19:00:49 2025 GMT
        Subject: CN=ee08da88a86016c29a86b30a81def15b1ab18a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:2f:d6:49:ba:05:03:d6:8e:63:37:7c:b0:
                    d6:03:01:de:fb:e8:2e:9d:a7:45:ec:6c:19:70:94:
                    d2:70:20:6a:6b:fa:9c:f1:7a:d5:2e:53:07:91:d2:
                    cd:82:97:c8:df:38:4d:b1:7d:b7:6d:ff:c8:30:43:
                    d1:b0:14:0d:c7:b3:c9:42:39:a8:b2:ad:45:f4:6c:
                    3f:df:f4:84:57:b3:3f:f4:8a:87:46:78:d3:09:fc:
                    28:c3:69:8a:08:c1:55:3c:9f:3c:56:0b:cf:43:ca:
                    d8:3e:36:e8:02:74:f1:d4:94:ff:71:f2:bf:8c:9b:
                    81:1d:f2:5a:a2:5c:1d:5f:d3:80:f9:90:6a:ce:90:
                    82:c0:52:08:d4:c7:a0:10:3d:91:25:45:2e:f3:98:
                    9e:60:f2:7a:f7:0d:4b:e6:39:98:11:2d:f8:56:ba:
                    8a:5f:c4:e6:fc:55:02:78:87:f7:9f:f2:24:34:50:
                    cb:22:ad:db:74:b6:25:e3:95:66:06:62:00:b6:d4:
                    39:b3:cf:b2:c7:ee:d9:2e:f8:eb:1c:63:d0:35:ff:
                    2f:40:a1:d6:0e:25:56:b6:8d:a4:d5:3d:cd:6f:c5:
                    6f:cd:b0:b7:af:0b:b7:ae:fe:38:2b:e3:7c:f4:01:
                    78:b1:32:d9:34:13:19:1f:7d:73:da:b1:8a:2d:a0:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:DA:88:A8:60:16:C2:9A:86:B3:0A:81:DE:F1:5B:1A:B1:8A:8E
            X509v3 Authority Key Identifier:
                keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:7f:b1:3b:54:a7:2b:54:60:c3:92:09:af:94:5f:2c:ea:
         33:b8:df:b4:44:c9:bb:90:19:bc:60:ce:ee:ac:e9:7d:a8:bc:
         49:f9:f9:83:5c:56:f5:21:ec:2f:58:ae:58:b2:04:81:c1:0b:
         27:bd:9c:6c:50:bc:f1:50:ef:de:f5:bf:c3:cf:33:75:4c:c4:
         fa:bf:cf:a7:72:45:be:50:39:e6:a4:96:db:06:9d:22:c5:2c:
         01:53:a0:88:cb:04:c1:5b:26:c9:e8:7e:52:88:46:66:a9:28:
         36:5b:25:be:84:19:69:80:9e:82:0e:62:0c:e2:24:15:b8:58:
         3b:c3:1b:22:15:6f:57:83:2b:97:e1:47:47:be:12:87:8b:49:
         e3:d9:f6:54:62:a0:1c:77:3f:39:86:c5:70:0b:ea:56:8e:91:
         41:dc:1c:13:ce:af:aa:c8:22:1e:5e:0d:96:a4:ab:f0:a4:5e:
         1d:a8:77:b2:56:db:f6:89:74:f8:d1:9e:e5:20:07:5a:a4:fe:
         eb:fb:c4:5a:f6:6f:0a:be:c0:b5:d4:09:0f:9e:15:3a:83:88:
         3c:3b:b0:a8:f1:e4:e3:39:69:c0:d2:50:df:1e:18:45:65:8c:
         ff:ec:49:b3:87:22:cd:50:53:81:3c:2e:75:2e:1a:7e:55:01:
         2f:b5:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:31:27 2025 by rpki-client