Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          VvSVoV6v8H56CxluBcgqGYdUyhCJyUjPrXVFtm6S0nk=
Subject key identifier:   7D:F8:BC:CE:02:ED:F3:EC:23:18:C0:7B:43:F4:5B:3E:B0:13:2B:A5
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       0199C4C496F2ACB60A5C606CFEF4152E8EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          0E8F
Signing time:             Wed 08 Oct 2025 17:00:41 +0000
Manifest this update:     Wed 08 Oct 2025 17:00:41 +0000
Manifest next update:     Thu 09 Oct 2025 17:00:41 +0000
Files and hashes:         1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=)
                          2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=)
                          3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: VOuBzSwmermNRjHMyIw+JXPCGizzI+6wK9nlm2XeeOw=)
                          4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:c4:96:f2:ac:b6:0a:5c:60:6c:fe:f4:15:2e:8e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Oct  8 17:00:41 2025 GMT
            Not After : Oct  9 17:00:41 2025 GMT
        Subject: CN=7df8bcce02edf3ec2318c07b43f45b3eb0132ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:59:c5:17:f4:78:32:80:a7:07:2c:94:85:
                    0a:32:94:93:6f:c3:20:a7:72:56:1c:10:5f:cd:59:
                    8c:a3:02:49:ff:42:3a:32:9c:30:6e:36:a0:32:ec:
                    ea:26:3e:c2:19:55:5e:32:d5:a0:86:ae:a2:0c:f9:
                    f8:2f:e2:4f:6e:69:b7:0d:f7:46:1b:6e:fa:24:ee:
                    e2:e0:b0:0c:1d:11:be:9d:e9:db:dd:5c:fd:be:78:
                    c1:b0:f3:b6:2a:ed:68:9c:e8:fb:9b:58:c2:51:ca:
                    ed:da:3c:c9:c7:79:bd:d9:62:4a:a7:41:e0:a9:24:
                    f4:b0:66:01:19:03:13:ed:b8:e9:4c:7d:27:08:ec:
                    ad:fe:cd:c1:e2:c1:84:7d:91:65:60:8c:4a:7d:1d:
                    7f:81:b6:11:21:66:c6:fd:1d:59:0f:90:0e:2a:f8:
                    ce:cd:12:52:ac:51:2e:5b:b6:c0:88:10:3a:61:bf:
                    2e:cd:40:7c:ce:e0:ae:45:c4:ee:a1:66:d1:bf:bd:
                    fb:04:4a:d6:cf:77:28:db:c1:93:51:d3:01:ec:2f:
                    45:7f:6a:09:a1:be:7c:5e:e0:f9:ab:f7:be:60:b3:
                    a6:bf:03:d4:85:90:6d:91:63:dc:59:eb:cf:4d:3a:
                    ea:cd:f0:3f:b6:d9:7f:6f:2d:79:63:10:94:6c:80:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:BC:CE:02:ED:F3:EC:23:18:C0:7B:43:F4:5B:3E:B0:13:2B:A5
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:c0:50:12:5b:01:b3:c7:e2:38:b2:fe:42:2d:8f:78:87:
         61:a8:6d:5d:17:85:66:4d:89:df:93:ec:15:98:a6:4d:f6:b7:
         d8:89:74:3a:4d:e5:79:55:be:ba:1f:bb:35:08:30:6f:a2:00:
         54:ef:0c:5c:04:98:3f:50:a5:12:41:e3:db:aa:66:0f:c1:e4:
         92:f9:45:24:97:3c:30:2a:d1:ff:0d:31:39:c1:66:4c:b0:1d:
         df:ec:9e:a2:8b:c2:2a:e7:f3:dd:fe:97:7d:87:24:46:82:de:
         0d:4e:a7:d2:2b:d5:9b:89:59:81:fe:6e:03:ed:58:e8:93:5b:
         18:a8:29:15:2f:d8:32:c9:33:d9:ad:25:95:12:03:37:e9:84:
         b7:f7:f2:dc:8c:96:4d:46:b6:45:80:54:50:8b:10:15:61:cd:
         5f:26:9a:06:dc:6e:d8:36:21:c6:93:91:73:15:f1:2f:6b:f9:
         b2:c2:44:02:4c:99:e6:e6:f0:c6:f9:6b:a5:dd:3b:d9:84:47:
         47:14:04:66:72:96:0f:3d:44:4f:46:0b:60:d0:2a:b2:78:4b:
         b9:f2:b1:96:13:d5:60:df:ca:b3:5f:74:16:01:7b:c7:0f:64:
         51:f3:3e:45:e5:8e:17:f7:90:39:7a:69:b3:b3:94:09:76:10:
         4d:14:1e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnExJbyrLYKXGBs/vQVLo7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy
NzIzYzMwHhcNMjUxMDA4MTcwMDQxWhcNMjUxMDA5MTcwMDQxWjAzMTEwLwYDVQQD
Eyg3ZGY4YmNjZTAyZWRmM2VjMjMxOGMwN2I0M2Y0NWIzZWIwMTMyYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05NZxRf0eDKApwcslIUKMpSTb8Mg
p3JWHBBfzVmMowJJ/0I6MpwwbjagMuzqJj7CGVVeMtWghq6iDPn4L+JPbmm3DfdG
G276JO7i4LAMHRG+nenb3Vz9vnjBsPO2Ku1onOj7m1jCUcrt2jzJx3m92WJKp0Hg
qST0sGYBGQMT7bjpTH0nCOyt/s3B4sGEfZFlYIxKfR1/gbYRIWbG/R1ZD5AOKvjO
zRJSrFEuW7bAiBA6Yb8uzUB8zuCuRcTuoWbRv737BErWz3co28GTUdMB7C9Ff2oJ
ob58XuD5q/e+YLOmvwPUhZBtkWPcWevPTTrqzfA/ttl/by15YxCUbIBJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH34vM4C7fPsIxjAe0P0Wz6wEyulMB8GA1UdIwQY
MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt
ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl
LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMfAUBJb
AbPH4jiy/kItj3iHYahtXReFZk2J35PsFZimTfa32Il0Ok3leVW+uh+7NQgwb6IA
VO8MXASYP1ClEkHj26pmD8HkkvlFJJc8MCrR/w0xOcFmTLAd3+yeoovCKufz3f6X
fYckRoLeDU6n0ivVm4lZgf5uA+1Y6JNbGKgpFS/YMskz2a0llRIDN+mEt/fy3IyW
TUa2RYBUUIsQFWHNXyaaBtxu2DYhxpORcxXxL2v5ssJEAkyZ5ubwxvlrpd072YRH
RxQEZnKWDz1ET0YLYNAqsnhLufKxlhPVYN/Ks190FgF7xw9kUfM+ReWOF/eQOXpp
s7OUCXYQTRQe7g==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:09 2025 by rpki-client