Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File:                     w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier:          iOE4VLQEFznEVyDiXOQoE5XSv6B/mUv339uXoT+Bh1E=
Subject key identifier:   0E:FD:A2:71:AF:7D:CF:34:56:5E:60:48:38:FA:A1:B5:C1:DA:A9:A8
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer:       /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial:       019A4DE1D5076E1E53B30EE44C8CFC06DD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number:          0693
Signing time:             Tue 04 Nov 2025 08:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:36 +0000
Files and hashes:         1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: grgWsVUl7ZHQFiMVuZBfrxH45RaFHQJ9iagWKFJpJ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:d5:07:6e:1e:53:b3:0e:e4:4c:8c:fc:06:dd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
        Validity
            Not Before: Nov  4 08:00:36 2025 GMT
            Not After : Nov  5 08:00:36 2025 GMT
        Subject: CN=0efda271af7dcf34565e604838faa1b5c1daa9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:95:54:6d:bf:a7:bc:14:7c:ea:d4:1c:30:
                    df:43:27:a2:62:06:8d:a1:85:ed:dc:e9:a6:69:49:
                    37:dd:1e:d1:24:9c:3c:9c:bc:c1:6d:46:ca:78:84:
                    9a:68:72:cb:5c:e6:70:73:f5:9d:87:41:f7:f3:12:
                    7e:8d:91:11:cc:b4:3b:07:6a:3a:f6:7f:89:3a:96:
                    9c:85:b6:9d:62:af:f7:72:6d:b8:99:0b:27:be:c1:
                    0c:60:98:f5:52:39:b6:c2:e0:ac:29:3a:c5:8e:8b:
                    e8:18:a6:c5:0f:e4:f6:6b:d4:b7:6b:fd:45:02:e5:
                    50:2a:70:62:06:53:ed:be:55:89:28:c1:bb:76:55:
                    05:55:01:c0:13:80:cb:ca:7d:76:e6:85:75:3b:11:
                    99:bb:e6:35:c0:8e:9f:cd:2e:56:91:f6:38:8f:7f:
                    c5:59:af:67:7a:a9:ac:2c:05:9a:32:6e:b7:a5:a8:
                    fa:3a:32:6e:9c:ce:10:34:4a:31:fe:a9:49:9e:10:
                    23:27:84:9c:71:19:b6:c0:ed:25:eb:89:25:9f:3e:
                    21:08:e6:a5:3a:01:53:4d:f3:27:cd:b4:1f:0f:69:
                    ae:1a:14:2b:f8:46:6f:04:e0:f2:8c:6b:e7:46:c9:
                    77:c0:a8:26:6a:d2:8b:53:01:81:79:19:9b:c0:b5:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:A2:71:AF:7D:CF:34:56:5E:60:48:38:FA:A1:B5:C1:DA:A9:A8
            X509v3 Authority Key Identifier:
                keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4e:8d:9e:ef:5d:cf:5a:c2:27:ba:fc:a7:31:de:78:aa:99:
         e4:94:40:2c:b8:09:e9:47:84:94:2f:52:f5:d3:6f:9e:8d:8e:
         35:57:40:9c:e7:bd:a6:62:8c:47:b4:c8:90:0f:a0:4f:ed:e3:
         cf:c1:00:18:0f:00:b4:b0:72:8d:97:44:4e:de:15:32:4c:93:
         87:b5:f4:b8:fe:57:ad:5a:b4:7b:07:00:67:d6:a1:de:81:fd:
         e7:50:cb:f1:95:39:1d:ed:4b:68:b3:dd:96:48:47:34:eb:d7:
         be:ec:f8:33:1a:ce:59:97:7b:2e:fe:3a:d6:4f:f1:b8:a8:7a:
         44:3f:5f:43:50:ee:8d:56:e0:b1:91:a2:b9:8f:16:07:d0:b8:
         a6:85:d5:17:68:fe:7c:63:f3:e3:a3:03:91:af:b8:f7:1f:4c:
         b0:90:21:6c:e5:7b:f8:dc:20:bc:fc:bb:be:bc:15:ee:d5:6b:
         e9:98:36:0e:7e:f8:a0:48:a8:85:ed:ec:83:94:4a:77:8e:81:
         b3:0f:de:84:1b:2e:d7:87:6b:89:83:05:a6:5f:4b:1f:54:ce:
         06:e7:ff:2b:03:ac:17:b6:a6:db:20:0d:53:a5:56:36:a7:07:
         74:b1:7c:b3:b0:0c:33:73:10:31:b1:86:1d:ad:5d:42:9c:f9:
         7e:4b:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:48 2025 by rpki-client