Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File:                     YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier:          Y1qc0N36ytPEK8Fsve9iiu8+bYdPrD4/lAEATX9FfOA=
Subject key identifier:   44:C1:78:48:41:E7:E3:BA:A6:67:F0:9B:7C:78:D1:68:09:05:46:54
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer:       /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial:       0199375D48505A91E5D296EB408E3F5F37EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number:          167B
Signing time:             Thu 11 Sep 2025 06:01:24 +0000
Manifest this update:     Thu 11 Sep 2025 06:01:24 +0000
Manifest next update:     Fri 12 Sep 2025 06:01:24 +0000
Files and hashes:         1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: Fyx1TJsBG6/i6xzHzS7SYHkMcISwrQsnOBlvOM6hZhg=)
                          2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
                          3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5d:48:50:5a:91:e5:d2:96:eb:40:8e:3f:5f:37:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
        Validity
            Not Before: Sep 11 06:01:24 2025 GMT
            Not After : Sep 12 06:01:24 2025 GMT
        Subject: CN=44c1784841e7e3baa667f09b7c78d16809054654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:8a:f9:f9:ab:3d:ab:df:7a:27:8e:72:b2:
                    3f:50:38:c1:93:ba:0f:9d:82:72:79:b5:1a:84:19:
                    11:1e:cd:f3:2d:ae:3c:59:59:d8:fd:e7:f4:2b:3a:
                    14:a7:0d:11:a6:20:1c:65:fe:83:d2:70:eb:e7:8b:
                    bd:b3:4b:2a:7c:d4:ed:4a:15:64:b8:19:ce:e3:06:
                    f3:94:93:7c:29:ea:fc:11:d2:9b:53:61:f2:cd:a0:
                    a9:2a:1e:c3:db:7c:84:a1:c8:e3:ec:29:28:c6:1b:
                    72:00:e7:60:ea:75:bd:49:b9:6b:82:ca:82:18:c2:
                    96:fa:e6:b0:76:8e:07:d6:b6:f9:f7:0b:bf:d9:0c:
                    55:9d:d4:55:20:d8:97:09:a6:77:76:71:f9:ea:a0:
                    84:9f:d8:be:dd:84:62:d7:bd:74:19:ff:18:a0:78:
                    50:f0:1b:5e:da:56:58:e4:56:8e:11:4c:12:89:af:
                    44:e1:9f:4d:0c:e2:73:df:80:4e:cb:84:e6:1e:e5:
                    0c:c1:e3:0c:0b:cd:22:08:6a:a4:f8:84:f4:b1:24:
                    12:2a:48:ce:f4:70:7d:19:84:fd:b2:74:a9:2f:9c:
                    fd:88:6b:2c:53:04:29:67:96:0a:0c:ab:88:77:f3:
                    94:d9:ed:c2:2b:c5:ab:20:51:c2:2f:ba:f4:8c:4b:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:78:48:41:E7:E3:BA:A6:67:F0:9B:7C:78:D1:68:09:05:46:54
            X509v3 Authority Key Identifier:
                keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:45:1e:6b:ff:0c:02:7c:44:2b:5e:28:fc:ff:c9:2b:4d:
         c2:e7:fb:c9:fd:db:12:d5:66:a7:31:ee:e4:6a:f1:c0:80:45:
         85:df:a7:94:fc:9b:2e:01:52:4e:7e:fa:27:53:87:15:97:23:
         5e:43:ef:a4:63:20:42:a7:30:24:e1:9a:1b:98:28:d5:8c:ca:
         30:9c:9f:5c:08:bd:21:38:c6:c9:5b:de:f6:b3:c1:1b:6f:6f:
         68:4b:aa:3e:8e:bc:72:32:60:67:a1:0d:8a:51:96:c4:b6:1a:
         7a:dc:cc:eb:5f:01:3d:b4:8a:b6:c6:85:1a:d5:35:e1:d8:b3:
         65:a9:5c:c9:ca:54:38:a6:0a:a5:56:44:ea:1d:60:1b:22:b0:
         91:ee:53:09:52:70:f1:b6:7e:da:cc:67:17:0a:04:73:e0:a7:
         be:c8:3c:92:8f:e3:b1:db:59:63:52:ae:04:0d:3b:e0:b8:80:
         39:d2:d1:24:ef:a8:ec:2e:8d:4d:4d:d3:85:cb:2f:32:33:cf:
         df:ec:d3:49:9e:ec:31:d2:11:c5:ba:0b:57:8a:2b:0e:5b:a7:
         b4:29:28:07:7e:26:35:64:f6:a6:66:ab:ba:63:de:57:09:f6:
         bf:c0:b3:32:7f:15:84:b0:69:19:98:4c:8f:b6:2f:4f:e1:fd:
         f8:0b:8a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XUhQWpHl0pbrQI4/XzfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjUwOTExMDYwMTI0WhcNMjUwOTEyMDYwMTI0WjAzMTEwLwYDVQQD
Eyg0NGMxNzg0ODQxZTdlM2JhYTY2N2YwOWI3Yzc4ZDE2ODA5MDU0NjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiK+fmrPavfeieOcrI/UDjBk7oP
nYJyebUahBkRHs3zLa48WVnY/ef0KzoUpw0RpiAcZf6D0nDr54u9s0sqfNTtShVk
uBnO4wbzlJN8Ker8EdKbU2HyzaCpKh7D23yEocjj7CkoxhtyAOdg6nW9SblrgsqC
GMKW+uawdo4H1rb59wu/2QxVndRVINiXCaZ3dnH56qCEn9i+3YRi1710Gf8YoHhQ
8Bte2lZY5FaOEUwSia9E4Z9NDOJz34BOy4TmHuUMweMMC80iCGqk+IT0sSQSKkjO
9HB9GYT9snSpL5z9iGssUwQpZ5YKDKuId/OU2e3CK8WrIFHCL7r0jEuSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETBeEhB5+O6pmfwm3x40WgJBUZUMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxZFHmv/
DAJ8RCteKPz/yStNwuf7yf3bEtVmpzHu5GrxwIBFhd+nlPybLgFSTn76J1OHFZcj
XkPvpGMgQqcwJOGaG5go1YzKMJyfXAi9ITjGyVve9rPBG29vaEuqPo68cjJgZ6EN
ilGWxLYaetzM618BPbSKtsaFGtU14dizZalcycpUOKYKpVZE6h1gGyKwke5TCVJw
8bZ+2sxnFwoEc+Cnvsg8ko/jsdtZY1KuBA074LiAOdLRJO+o7C6NTU3ThcsvMjPP
3+zTSZ7sMdIRxboLV4orDluntCkoB34mNWT2pmarumPeVwn2v8CzMn8VhLBpGZhM
j7YvT+H9+AuKcQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:44:58 2025 by rpki-client