
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          1L19F4jMwmAWwLGSzdFLQ4PUiriZZVz4WHl0/ugkVHU=
Subject key identifier:   9F:33:80:11:DB:95:4E:8D:FA:33:93:E9:92:54:43:0E:04:86:0B:F3
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019A4EBD4A325BC1E16D66AAF07213B7371E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          1322
Signing time:             Tue 04 Nov 2025 12:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:19 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: 8vLrog05z1BzwbiceCwbE2Ak8JydJhHlihdU1yMmqgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:4a:32:5b:c1:e1:6d:66:aa:f0:72:13:b7:37:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Nov  4 12:00:19 2025 GMT
            Not After : Nov  5 12:00:19 2025 GMT
        Subject: CN=9f338011db954e8dfa3393e99254430e04860bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:09:9c:97:8f:e3:1d:ec:9f:83:78:9c:fc:
                    33:b1:a6:f7:b8:a0:19:dc:1e:d0:f5:21:8c:eb:7d:
                    1d:df:3c:7d:37:4b:0b:cb:96:27:32:76:7a:21:d1:
                    5c:c3:15:cc:3d:f6:74:4b:c1:e6:90:64:43:86:b0:
                    39:3e:bc:44:a7:7c:d0:57:de:35:09:d5:5b:a7:d2:
                    36:16:63:e0:be:a4:18:17:99:e5:fb:c6:ee:6c:e6:
                    13:cf:d3:cd:13:6e:5d:ce:aa:a9:25:ac:60:d1:7d:
                    9f:6a:9a:5b:3d:b9:d8:d8:0d:20:5d:e4:33:ab:e9:
                    5c:d5:3f:17:69:6e:28:a9:ce:97:b4:d4:83:5c:00:
                    cc:1a:70:89:f1:5f:b6:e7:bf:fc:10:73:45:99:f1:
                    dd:1f:11:d2:6c:0b:19:9b:7b:d5:d3:0b:9c:9a:44:
                    e1:54:dd:5b:d9:dd:87:a5:da:a3:11:1d:60:8d:0b:
                    00:25:63:02:e4:a4:cc:fc:c6:98:bb:98:a4:ff:b7:
                    8e:25:c0:de:44:ed:39:90:f8:a7:83:55:77:79:74:
                    d4:32:d5:8c:61:8e:b7:8c:69:9d:01:a2:92:ff:1c:
                    4f:fb:49:84:24:29:5a:a6:b9:53:e2:36:b3:aa:fb:
                    cc:0d:ea:2a:79:af:6c:9c:d2:17:76:6a:57:54:d2:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:80:11:DB:95:4E:8D:FA:33:93:E9:92:54:43:0E:04:86:0B:F3
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         90:05:ec:2e:32:a7:f7:66:de:08:42:7c:e5:53:82:ff:ec:7d:
         1d:26:df:9b:fe:b3:94:b2:57:ee:d7:86:d4:4c:2c:b9:bc:d8:
         6d:b4:02:d6:08:a1:98:ec:84:98:19:7f:05:e1:db:83:c4:05:
         7f:71:92:6b:43:23:5b:bc:12:95:20:d7:ab:a7:fd:e2:1b:60:
         46:78:3b:b2:64:fc:5e:ce:b7:6d:e5:65:70:20:d7:c3:d8:92:
         9d:45:78:ab:50:7c:b8:08:1e:3b:40:cc:04:2b:b0:bd:e4:20:
         60:1c:d9:7b:51:85:14:76:af:1f:7d:b4:ac:81:c8:ae:59:db:
         19:db:26:63:55:4c:fd:e5:5f:97:5f:74:70:f3:24:25:df:46:
         17:1d:15:08:83:97:49:c4:8c:1a:0a:23:1e:45:2a:ab:a8:e8:
         9e:6e:a0:32:5c:ff:d4:08:60:75:ce:69:09:74:b3:a5:68:3b:
         bc:4d:9c:fd:18:b0:d0:7c:c8:26:75:27:3b:f6:f0:44:5e:d1:
         e4:0c:2a:bb:f2:96:b8:b8:36:fe:8c:6f:2b:4c:20:ad:1f:04:
         07:5d:e3:91:79:39:df:13:d9:73:fe:31:9c:b2:d4:d5:13:e7:
         1f:8b:6a:17:2b:96:92:83:1f:c4:03:99:95:74:06:93:1a:00:
         1a:2f:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:06 2025 by rpki-client