Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
File:                     6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft (raw, json)
Hash identifier:          cpT2WqVHhisu0HZFqEZIoTaEmjfI3UVWuxofCk05AUQ=
Subject key identifier:   F0:96:8E:1A:3E:39:16:BF:1C:43:3B:37:84:58:59:ED:80:00:86:5D
Authority key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
Certificate issuer:       /CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Certificate serial:       3B1D4C985E81F67ED9F6E29FAC5AB860C67EC38D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
Manifest number:          0225
Signing time:             Tue 04 Nov 2025 02:55:09 +0000
Manifest this update:     Tue 04 Nov 2025 02:50:09 +0000
Manifest next update:     Wed 05 Nov 2025 05:05:09 +0000
Files and hashes:         1: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl (hash: PGHrbBlB6cSwJXuFlO1DcKh/XqL30QRQiy2j1ww1O50=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:4c:98:5e:81:f6:7e:d9:f6:e2:9f:ac:5a:b8:60:c6:7e:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
        Validity
            Not Before: Nov  4 02:50:09 2025 GMT
            Not After : Nov  5 05:05:09 2025 GMT
        Subject: CN=F0968E1A3E3916BF1C433B37845859ED8000865D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:d2:0c:53:05:cc:03:7b:99:1a:5f:73:5b:
                    3e:92:6a:98:6e:b2:82:f1:0a:8a:46:2d:28:69:71:
                    a9:eb:97:de:5e:fc:63:b0:9e:8f:4b:2f:7c:cb:54:
                    f4:9f:29:98:79:d1:c7:4c:6d:7c:c8:3a:eb:f4:78:
                    96:df:99:fc:40:01:f1:c1:b4:51:75:a9:50:7e:44:
                    ad:e7:42:35:a3:bc:eb:28:9e:f2:35:7e:db:0c:cc:
                    2c:8b:4c:88:f3:ec:94:d7:58:b6:76:8e:a1:6b:eb:
                    47:4a:05:1f:bb:cf:90:18:fa:3c:13:1c:32:fc:56:
                    9b:10:8c:c1:db:44:eb:77:58:16:73:ed:63:33:8a:
                    e9:60:ff:c6:ec:38:30:47:d8:ab:67:ca:7a:1d:8d:
                    b4:13:66:a1:43:5e:c9:e6:b2:4a:7f:4a:46:d9:6a:
                    54:aa:74:e5:5b:cd:db:1e:c2:ae:2f:48:e8:e4:3c:
                    9c:3f:d7:89:a3:1a:6c:7e:75:d3:b1:51:f6:03:75:
                    0f:ff:f7:d9:7c:05:3a:f5:15:09:63:a2:5a:f2:2b:
                    a1:68:aa:9f:40:eb:7c:a7:67:26:4a:8f:3f:fb:42:
                    4a:42:f0:b6:1a:d9:29:2e:05:f7:86:0c:29:7c:d6:
                    4d:8d:35:03:f2:ce:d8:df:5c:1e:be:9d:8f:a8:72:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:8E:1A:3E:39:16:BF:1C:43:3B:37:84:58:59:ED:80:00:86:5D
            X509v3 Authority Key Identifier:
                keyid:6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:dd:47:73:65:3d:a5:30:d4:90:02:bb:7a:0e:0e:99:44:
         a4:50:1c:3d:5c:54:57:fa:d9:c9:4f:ed:5c:34:ab:53:ea:45:
         57:2c:d0:60:65:9a:4c:ee:47:49:fc:06:be:42:28:7c:2e:aa:
         7a:ec:95:1e:2a:cc:bc:2d:e7:aa:78:16:ac:48:3a:9f:e3:78:
         3b:b0:0c:82:e3:92:9d:45:9f:18:93:2b:17:fe:d3:21:2d:cf:
         98:45:7b:81:9a:dd:66:46:47:5f:ce:e9:7c:20:89:51:1c:c4:
         37:d3:5b:43:bb:58:91:aa:5e:02:f8:44:00:66:8f:7f:f8:e4:
         08:9c:33:89:0e:50:d9:9d:9e:39:59:7f:0c:2a:78:d7:10:6a:
         4c:2f:71:25:32:f9:28:37:ee:8f:d0:8f:93:fd:14:0b:90:96:
         eb:9d:b7:3f:14:b2:c7:45:a6:3f:97:65:93:55:a0:2b:65:47:
         0c:3a:3b:56:6b:8a:1b:4c:92:c0:76:70:65:b6:9d:5a:ad:46:
         29:47:4a:af:a5:37:f4:13:d6:91:db:9a:d0:95:0a:2e:46:9e:
         5f:a4:81:87:7c:9d:51:e3:40:be:66:5c:34:a1:78:d4:d3:68:
         6f:2d:1e:b4:37:ef:c0:3c:e8:df:d1:02:13:7c:1b:d9:7f:32:
         8f:e5:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:39:01 2025 by rpki-client