Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          05t+PklAX+a4WpVTpGauVquA8oj60nCA757cdWa150I=
Subject key identifier:   74:BC:49:79:61:AC:20:5B:08:E5:7C:00:94:EE:79:6C:9F:5E:90:18
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       0199608FD50BBDFF0D7A542A92BE2B0E3ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          125F
Signing time:             Fri 19 Sep 2025 06:01:02 +0000
Manifest this update:     Fri 19 Sep 2025 06:01:02 +0000
Manifest next update:     Sat 20 Sep 2025 06:01:02 +0000
Files and hashes:         1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=)
                          2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=)
                          3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=)
                          4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=)
                          5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=)
                          6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=)
                          7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=)
                          8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=)
                          9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=)
                          10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=)
                          11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: bIZyKJ4ecqKUgC5kgmUdNPEiil6cEJWEgxRYpdoKWQo=)
                          12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=)
                          13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=)
                          14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=)
                          15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=)
                          16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=)
                          17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=)
                          18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=)
                          19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=)
                          20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=)
                          21: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=)
                          22: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=)
                          23: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=)
                          24: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=)
                          25: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:60:8f:d5:0b:bd:ff:0d:7a:54:2a:92:be:2b:0e:3e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Sep 19 06:01:02 2025 GMT
            Not After : Sep 20 06:01:02 2025 GMT
        Subject: CN=74bc497961ac205b08e57c0094ee796c9f5e9018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:7b:75:45:79:1b:0b:0f:c4:1c:de:28:c4:
                    b9:31:3a:5f:bc:74:16:34:5c:d9:10:a3:5d:cc:cb:
                    1d:d4:89:1b:f3:ae:35:2f:1e:ab:a0:49:46:55:a5:
                    d8:c1:69:10:4b:6e:60:48:38:48:74:4d:9c:4d:f8:
                    da:69:e5:8d:c3:b8:92:ba:10:a7:21:a8:8b:10:bd:
                    8c:d7:e3:97:5d:83:54:2d:04:d5:7f:2a:47:75:ef:
                    88:e4:f2:ec:2a:e8:11:21:96:99:86:1b:61:33:71:
                    83:ee:a4:16:05:79:6b:9e:61:81:b3:d1:68:b1:ee:
                    ce:20:52:3c:c2:d9:08:44:c2:1b:1c:19:ab:cc:c8:
                    f3:8f:5e:77:59:20:01:fe:77:1d:79:95:ad:30:31:
                    1a:67:96:cd:79:7c:f5:ab:22:f6:26:8f:b9:b6:de:
                    08:a9:4a:07:f9:7d:07:89:22:5d:b6:e0:9b:64:df:
                    75:3e:10:a1:0e:1a:12:a2:45:49:ac:30:e4:c5:d9:
                    5e:27:d7:47:ae:e7:38:2b:01:8f:01:18:da:9a:47:
                    90:c0:35:34:10:93:e2:74:7c:bb:30:28:15:1c:1f:
                    20:13:25:26:be:a2:50:dd:30:9a:94:40:45:c4:97:
                    05:f4:6e:3f:58:9a:a1:e6:b2:a1:b7:2b:6f:79:78:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:49:79:61:AC:20:5B:08:E5:7C:00:94:EE:79:6C:9F:5E:90:18
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:75:fc:ba:05:f6:0c:6b:37:59:75:78:d0:21:6b:0a:fd:6f:
         b5:3e:08:a9:04:3c:ba:e7:06:67:f6:85:ab:f0:55:11:68:23:
         dc:c0:67:19:8f:04:42:9d:b5:e1:50:7b:1e:7a:83:ad:14:46:
         f6:19:9c:d2:91:e5:b3:13:33:e5:48:e4:e1:d5:8f:82:dd:8b:
         9a:2d:1f:f1:8f:fa:fc:af:61:17:a5:64:b8:b0:3d:e7:5b:2b:
         b8:fc:88:26:dd:5f:fc:5f:08:17:ba:22:1e:a0:42:8d:85:2c:
         41:72:a6:5a:80:83:35:da:b0:29:d0:18:c1:a0:2b:0e:ec:46:
         c8:ce:fe:ac:c5:1c:c4:e2:c4:19:64:f0:76:2c:eb:56:9b:b6:
         ad:56:e7:88:ab:b8:ed:0f:58:6b:a7:0e:09:75:b2:ce:f0:74:
         08:a2:0c:90:13:80:71:2b:01:a4:4e:35:6a:56:4a:21:97:e0:
         07:c9:5a:6a:eb:3b:9e:aa:69:0c:fe:82:56:1b:dd:2c:a6:03:
         d0:e1:0b:5a:7a:4f:52:fc:d6:28:4a:0e:05:94:49:55:38:03:
         d7:6a:32:27:39:4b:18:4f:9c:73:a1:28:f9:ee:29:09:db:5c:
         a0:2e:87:fd:45:22:ce:c7:f0:8d:77:62:f2:76:df:09:2b:fb:
         50:5e:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:09:26 2025 by rpki-client