Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File:                     J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier:          E8ZkrdS3kE9R1BqERF2UiFQjLXd22dNukiJc7DnY4FU=
Subject key identifier:   20:48:F8:6A:7D:82:39:0B:97:7B:F0:E6:21:07:CF:CF:0D:3D:9F:0A
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer:       /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial:       019A4EF45CD8192A15FF3BFC5A1C250EA87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number:          051F
Signing time:             Tue 04 Nov 2025 13:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:28 +0000
Files and hashes:         1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: 4Q9ll3EvR7a98UPzZj0VPpPWOWzvdxBKbcgIVLu6QLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:5c:d8:19:2a:15:ff:3b:fc:5a:1c:25:0e:a8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
        Validity
            Not Before: Nov  4 13:00:28 2025 GMT
            Not After : Nov  5 13:00:28 2025 GMT
        Subject: CN=2048f86a7d82390b977bf0e62107cfcf0d3d9f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:73:0d:b8:61:96:c2:2f:6b:63:f5:b5:a8:
                    25:81:ca:7b:31:54:ab:d6:0a:b2:fe:40:05:c5:99:
                    26:0c:c2:d2:2a:3d:c5:62:06:47:d2:20:62:49:94:
                    3c:7d:9c:5f:ae:11:27:68:a1:a9:e6:cc:4a:b3:2e:
                    a1:62:70:7f:10:56:22:28:fa:bd:e4:fd:96:39:c4:
                    d4:2b:19:09:40:5c:82:9a:25:c6:ef:bf:fc:18:31:
                    e9:70:62:90:91:19:88:21:1a:6c:22:64:1f:23:45:
                    cf:56:89:e7:7a:c3:e1:42:33:fe:5e:7e:f6:12:87:
                    cd:a1:5f:58:04:cf:96:8b:ad:58:fa:89:8f:be:81:
                    b2:d1:f1:80:fa:ba:8c:00:d9:25:c1:3d:20:53:1b:
                    cd:45:6a:d6:d5:82:fa:62:5c:fc:b5:42:0e:0e:92:
                    c6:ab:1f:00:bf:b1:0d:d9:d7:9d:5b:35:aa:31:7f:
                    40:0c:7f:6e:98:d7:b1:ed:65:20:5d:2d:6d:48:c1:
                    6a:17:bb:db:bd:d4:3c:2f:e0:25:c7:8b:c2:fd:5c:
                    d6:85:ff:7a:83:06:18:c5:ec:26:7a:ef:49:7d:bc:
                    50:10:4d:f1:59:df:91:cd:b5:82:8e:b4:c7:be:d7:
                    b1:4d:ec:a8:69:36:38:e2:c0:45:82:eb:38:e9:55:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:48:F8:6A:7D:82:39:0B:97:7B:F0:E6:21:07:CF:CF:0D:3D:9F:0A
            X509v3 Authority Key Identifier:
                keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:c9:a0:3e:b7:a5:2b:53:56:ff:d9:ba:fc:67:5b:fc:9d:
         30:28:98:a6:c4:cc:5d:f3:64:40:c6:8e:a3:57:93:34:d0:8e:
         5a:ac:f1:fb:13:f7:dd:f6:d2:b5:f8:ce:d3:18:67:c1:87:d2:
         62:be:82:b9:54:84:bb:e4:0b:9e:b4:30:f7:3f:b7:23:e8:66:
         04:87:d7:76:f6:05:8b:bd:52:9e:9f:a1:34:cb:a4:ab:5d:e2:
         f3:e8:c1:f6:26:8e:1c:e4:0d:8d:42:9f:28:b3:0f:b4:c0:c2:
         e6:c1:53:eb:d5:a1:fe:27:b3:25:e0:a6:19:36:46:bc:05:b8:
         be:be:76:09:cf:5e:b0:46:f9:e0:18:16:12:ec:72:c6:76:64:
         b8:c9:ce:45:f1:b9:4c:ab:3d:da:59:1d:1d:b3:c3:55:35:17:
         21:f6:b2:a1:c1:a7:f4:f6:36:67:a1:f4:58:1b:c2:8e:8d:0c:
         20:52:46:df:6d:0f:f1:a6:2b:35:e3:76:bb:9c:23:c0:42:cb:
         1e:4b:6d:15:77:2e:98:71:4f:b0:25:41:38:d9:61:82:dc:9f:
         9a:2d:95:d2:ac:61:6f:cc:f5:ac:61:d3:f0:7e:f0:5c:c1:70:
         f0:4e:18:50:45:b0:f7:1c:74:8a:55:43:9e:56:c9:1d:90:28:
         4f:97:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:57 2025 by rpki-client