
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          04JwDIa0st/2EdLVqXGh9RpfMyt3ZN06AUpc7D2A834=
Subject key identifier:   45:1C:18:DC:80:DF:6F:45:92:94:DF:4B:18:6E:DA:3B:03:4F:E6:DE
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       019A4EF5DB0A3793BD4E7ADD988C3E7B46F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          0AB2
Signing time:             Tue 04 Nov 2025 13:02:06 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:06 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:06 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: sKBwtkEpUPAq7SwvGRIV5N51k3T0N5fEGCcLhM2wYtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:db:0a:37:93:bd:4e:7a:dd:98:8c:3e:7b:46:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: Nov  4 13:02:06 2025 GMT
            Not After : Nov  5 13:02:06 2025 GMT
        Subject: CN=451c18dc80df6f459294df4b186eda3b034fe6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:7a:11:b9:ea:71:43:ac:d6:0e:31:cc:a5:
                    3a:19:bc:28:f6:39:c5:0e:59:b1:a3:30:eb:a7:19:
                    46:df:08:56:06:32:94:98:a1:59:db:09:a8:25:ab:
                    1a:52:c9:32:ec:69:c6:e6:46:5c:a5:5f:8b:56:c8:
                    70:8c:3c:41:b6:20:c4:e0:7e:8a:e9:4f:e9:1b:88:
                    d0:99:90:d6:bf:24:9f:eb:b2:30:b6:4d:33:39:97:
                    3a:9d:80:4a:d7:43:cf:0f:14:88:f9:38:73:75:17:
                    9d:74:13:c1:14:59:5b:ef:ec:c4:69:f0:e2:ff:9b:
                    ed:96:82:7e:7d:34:45:df:10:8f:c5:20:57:65:e7:
                    c4:29:37:08:dd:f4:cb:9a:10:48:dd:ef:00:a1:9e:
                    27:50:9c:6f:fc:c3:d8:eb:98:cb:73:6a:b2:91:67:
                    4c:13:fe:91:23:aa:db:44:48:bb:72:9c:d5:18:a4:
                    d7:00:a5:00:f7:e6:34:f3:34:39:af:74:c2:92:f5:
                    8b:80:87:53:99:58:57:24:a0:b4:be:4a:0c:1d:d3:
                    7a:a8:bb:d3:c5:0e:87:1b:b2:3f:6a:39:51:00:62:
                    f1:ed:41:70:3f:b9:66:f3:0b:df:c8:b4:f0:01:2b:
                    67:76:73:91:74:0f:b6:3d:b1:20:fd:cd:9b:ef:2d:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:18:DC:80:DF:6F:45:92:94:DF:4B:18:6E:DA:3B:03:4F:E6:DE
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         16:d8:bb:1a:1d:d2:c2:5e:78:a6:6e:6f:59:c6:42:0a:ee:5b:
         de:23:c9:80:f7:3f:b8:ab:a7:0c:fd:a8:d2:fd:a9:b6:cc:77:
         be:82:f9:26:34:fb:ed:57:19:e1:7e:a6:6f:2d:2d:b9:7c:c8:
         c0:25:90:10:c7:05:8d:a4:8c:c8:3d:a5:6d:46:9e:8c:18:d4:
         e6:1d:a9:dc:14:d7:12:72:10:fa:56:5d:a1:6a:e7:45:08:f9:
         8a:40:14:56:26:90:02:34:5d:6c:ed:06:b4:59:43:ce:52:b3:
         3b:4f:cb:0b:cb:d6:ad:c4:81:f3:de:d4:e4:15:10:4b:8a:44:
         5b:6d:d4:d1:b9:e1:03:58:23:07:f4:27:d5:6f:e0:74:b2:38:
         34:b3:9d:9a:07:97:02:6e:6a:81:3f:48:ba:d3:08:48:c4:23:
         14:4c:89:6e:24:93:15:17:5a:98:ae:ee:a4:4f:91:bd:d8:44:
         47:25:4e:af:7f:4e:45:c9:75:6d:3b:d7:41:ea:4e:ca:7f:9a:
         e9:05:a8:e6:16:ea:ce:3e:ea:f9:83:de:08:77:66:be:90:e3:
         a5:7c:a1:bf:f3:88:31:c8:24:c6:0d:b6:00:e0:d6:e6:9e:97:
         b2:46:16:82:55:2d:75:e7:f3:0a:ad:74:d9:17:3b:1b:52:2f:
         e3:33:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:56:00 2025 by rpki-client