Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File:                     biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier:          vpE8WqAKYz8QDpdfThHtmB/PxR/qLp03CzIzz3OUsJc=
Subject key identifier:   56:FF:5E:B7:54:7C:A7:37:F9:7C:93:9E:DB:5B:ED:0A:BC:2A:C6:54
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer:       /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial:       019A50E403E36662B8382D3E53F3B1C1608F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number:          0F6A
Signing time:             Tue 04 Nov 2025 22:01:51 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:51 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:51 +0000
Files and hashes:         1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: HhMIElB4tf3vVlTe2BIseEjvLYY1K37m/9Cljz4E9Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:03:e3:66:62:b8:38:2d:3e:53:f3:b1:c1:60:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
        Validity
            Not Before: Nov  4 22:01:51 2025 GMT
            Not After : Nov  5 22:01:51 2025 GMT
        Subject: CN=56ff5eb7547ca737f97c939edb5bed0abc2ac654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:6c:9f:4d:51:e8:0d:17:ac:24:a9:2e:39:
                    dc:99:c0:89:3f:eb:94:e1:69:7a:b5:b3:9c:b5:ec:
                    d4:1b:7c:a2:1c:e9:e6:3e:65:cd:9b:68:76:03:d4:
                    31:e2:7a:9a:c5:ef:7b:60:20:b6:26:3e:48:01:bc:
                    19:11:2e:e5:3d:ae:7c:65:dd:c4:d7:31:19:36:6a:
                    fc:3b:7f:4d:c2:64:02:08:23:0d:73:ae:42:5a:45:
                    67:36:fe:84:2a:4c:c2:ce:60:ba:2a:b2:4c:2d:aa:
                    fc:d0:20:25:fd:70:ed:c1:fd:10:44:41:04:28:a2:
                    4f:31:e8:dc:81:79:16:69:61:21:2c:02:41:5d:89:
                    a0:05:02:97:cc:8c:29:1a:d7:24:2e:dd:12:a4:8a:
                    84:f1:23:a5:02:97:29:75:f2:46:84:c2:df:25:52:
                    b7:30:d0:92:08:1e:b0:b1:3f:97:4e:1c:0b:3a:a0:
                    8b:8b:d4:20:40:22:d0:11:d7:d9:4c:54:b4:b3:55:
                    2f:c2:c6:63:46:56:15:d4:59:31:0c:e6:56:46:10:
                    23:ff:03:d1:31:da:b6:f8:e4:83:39:e7:8a:9f:a1:
                    6a:17:31:a4:9f:b4:3a:c6:82:42:05:c9:92:d9:c9:
                    8e:45:c9:e6:ae:ad:93:18:93:d6:0f:13:e0:c1:7d:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:5E:B7:54:7C:A7:37:F9:7C:93:9E:DB:5B:ED:0A:BC:2A:C6:54
            X509v3 Authority Key Identifier:
                keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:d1:32:29:db:77:c1:9d:cf:c2:18:c4:0e:e9:b6:bb:15:f9:
         11:ec:65:f2:a6:fd:a3:ef:55:b1:90:1e:35:23:a3:be:25:0f:
         37:43:ab:7b:42:a4:59:d2:a4:57:a5:71:1a:1d:5d:c4:54:7b:
         09:98:86:0d:9a:74:4b:aa:65:6e:a2:4d:3a:de:bc:cf:b9:8b:
         ac:78:a4:50:fa:49:54:e8:f9:d4:18:ec:d6:0c:bc:3a:69:ce:
         fb:dc:3b:c0:40:0a:14:28:a2:ac:ed:d7:92:a4:1e:18:d0:f9:
         8b:88:22:c9:bd:29:07:ad:81:eb:c4:ab:a8:2a:8f:90:5f:b8:
         c7:fb:e2:ab:3f:cd:4c:23:0d:19:a6:54:09:a1:7f:15:3a:41:
         6b:12:b4:5d:7a:ef:c9:65:30:0d:7c:d5:d0:1f:6d:c3:e3:55:
         37:93:c9:59:5d:9f:ea:d0:66:18:05:13:cc:c7:f8:e4:40:5b:
         d6:86:28:d5:8f:3d:e2:76:06:09:a1:b8:c8:c5:4f:62:d1:d3:
         7c:e4:4d:bb:fa:3f:aa:ca:0c:7b:0a:bb:27:d0:cc:bf:b2:15:
         dd:b2:e0:f3:02:ee:ae:8c:9e:69:74:73:54:a2:e6:f2:70:84:
         28:29:3f:ca:6d:0c:17:1d:7f:fc:64:9d:23:3f:e9:6b:10:95:
         ec:09:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:15 2025 by rpki-client