Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier:          A31ibifYMqxjj3uuMEo/Z09XSAT8NfzYHF6CzsdrrSM=
Subject key identifier:   EC:0A:89:CC:E7:65:9E:29:4D:29:E7:FA:9A:25:5D:9C:40:33:A0:B8
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer:       /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial:       019A1F1AAD32DA7C1D6C3EEE888E62FD6362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number:          12BF
Signing time:             Sun 26 Oct 2025 06:00:33 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:33 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:33 +0000
Files and hashes:         1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
                          2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: jX1XcLUnPcszbaUwbVmZ2WTXhkGNBFUxwNmLVwuYNCc=)
                          3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
                          4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:ad:32:da:7c:1d:6c:3e:ee:88:8e:62:fd:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Validity
            Not Before: Oct 26 06:00:33 2025 GMT
            Not After : Oct 27 06:00:33 2025 GMT
        Subject: CN=ec0a89cce7659e294d29e7fa9a255d9c4033a0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:08:b4:df:71:9a:0f:f3:e2:1d:88:26:2d:
                    6a:14:05:f0:b7:2c:bc:29:1a:5f:8f:9b:ff:c6:56:
                    0f:7b:04:c1:16:40:fb:eb:02:4d:80:55:f7:d2:1c:
                    c8:4f:f4:fa:3b:09:dd:41:6f:47:6f:2a:d6:3c:ec:
                    7d:25:80:eb:74:c1:da:66:6e:4b:1c:94:fb:57:59:
                    e7:c8:63:7f:bd:8b:bc:f0:83:c0:21:53:4b:d0:13:
                    51:c6:b2:f0:cf:3a:03:cd:ba:a2:23:20:2f:f5:aa:
                    c5:ff:c8:ab:1e:58:f1:49:c2:cf:64:a6:38:a9:a0:
                    39:23:9a:1f:86:58:8a:c1:77:8a:5b:61:c0:47:e7:
                    48:60:b1:73:09:0c:53:c2:39:20:d2:85:24:5a:21:
                    16:65:58:6b:dd:2a:46:a7:1e:68:9d:b7:8b:f1:c9:
                    23:03:ed:73:b7:6d:3d:22:fa:6c:35:d1:da:6f:66:
                    9b:2e:4a:bd:e6:f0:10:3c:d2:b9:44:a1:ab:bb:a2:
                    5d:d4:86:d1:02:00:f2:71:67:7c:df:6d:1f:9f:9e:
                    4f:96:05:f8:a9:d8:5d:78:d4:a1:06:0e:11:82:51:
                    7d:77:d7:82:de:4c:e0:75:f7:74:0c:00:71:3f:6a:
                    26:6e:59:69:09:63:cb:98:ac:8b:0e:35:e5:48:c4:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:89:CC:E7:65:9E:29:4D:29:E7:FA:9A:25:5D:9C:40:33:A0:B8
            X509v3 Authority Key Identifier:
                keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:d4:25:eb:fd:22:d7:be:c3:35:8d:de:ab:88:e8:df:2b:
         89:bc:a6:31:35:5d:7c:e4:ab:2c:c3:c5:26:d1:b6:8a:3e:03:
         69:0c:d8:fa:a6:d6:5a:19:f6:e5:09:77:3b:2f:27:e7:5c:58:
         01:4b:ac:13:63:13:9f:65:3c:15:5b:43:3b:fd:c1:bf:5f:ce:
         37:d8:76:55:63:13:2c:b8:b1:42:6a:4b:64:3a:7a:e8:a9:68:
         5c:25:b3:1c:41:36:10:de:5f:49:00:d5:69:de:4f:d8:f0:2c:
         cb:12:29:ab:d8:ca:e0:d4:38:0a:cb:64:18:b9:ca:fd:79:cc:
         90:59:47:4a:38:9b:42:aa:6b:dd:f1:f4:08:7e:24:19:fa:8a:
         cc:ce:e2:8e:51:ad:cc:59:47:6a:f8:35:dc:3e:d9:85:78:43:
         d7:5c:aa:a2:61:12:d1:33:30:52:1a:48:bb:51:26:c6:64:19:
         66:3f:a6:2e:cc:06:44:c4:74:df:7a:1a:bc:30:69:60:5b:f9:
         a0:c1:36:8b:e3:40:6c:46:0d:b4:86:ea:60:78:bd:5d:71:40:
         cf:e6:d2:a5:62:5a:d0:87:77:1f:3b:17:e3:a8:6d:63:61:1d:
         f7:4f:b3:a1:50:71:42:c7:7b:fc:86:e6:db:58:0b:54:49:22:
         d7:49:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:55:18 2025 by rpki-client