Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          7Rqg7mHhb73hulLqY/fQw4tH6XYU296mios+0J6qPMQ=
Subject key identifier:   78:4E:69:13:BE:36:6D:E1:7A:83:F4:5A:B9:F2:2C:DF:5D:8C:D0:F0
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       019A2C9FA852CC3B7494E10C710724FE3FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          08B1
Signing time:             Tue 28 Oct 2025 21:00:52 +0000
Manifest this update:     Tue 28 Oct 2025 21:00:52 +0000
Manifest next update:     Wed 29 Oct 2025 21:00:52 +0000
Files and hashes:         1: CPodE3_RIBh9_-_Q9IrXnt0jBQQ.roa (hash: +FHXKf3f9JVzV+Qw7xj+2wXQmTxWPnbFGqd+rwkbcMY=)
                          2: EMXYEynUntG8ll4EW5Q-6Hk40TY.roa (hash: Xpiy8GuGmhJYwB9WLtl0u6lzkUU+gwZPYmYDPQzDZdI=)
                          3: OikZGL2LEHpl7dY7zmLA3J5GOEE.roa (hash: M6ctsVmPoPZhMMxHtbO6g9MMFqbmRKFOMWh5oVa/f94=)
                          4: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: W2eFwIYNvf9LPQSVj3yP7W8zKEdo/srYAHX33oIA6HY=)
                          5: aeDfOfbVztGADm5NBTaLM-YRqHs.roa (hash: 0X4nT8WQ19Et5qFSAny70J/znuk2NQeORpBaCqs4M3A=)
                          6: hz6xJweyDBTu0FlGgkoGT3nyG90.roa (hash: 4L/5B8W7pat0hwm5hvGy2beSRYM1Jy9cIWMYZt0TEC8=)
                          7: l4a3XbHOtKFp0184MdRIDU-jOxk.roa (hash: q5kFgaOF3Cv5yGAbLEZMIoShfmz2+xh9WCr6tx/KZ50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:9f:a8:52:cc:3b:74:94:e1:0c:71:07:24:fe:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Oct 28 21:00:52 2025 GMT
            Not After : Oct 29 21:00:52 2025 GMT
        Subject: CN=784e6913be366de17a83f45ab9f22cdf5d8cd0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:44:6d:2a:05:20:21:ed:62:5f:a6:da:da:
                    bc:a1:b2:08:9e:38:ac:4b:e5:67:33:73:06:a9:a3:
                    3f:bc:87:21:0b:a7:63:f1:6f:89:4b:a0:4f:7d:8d:
                    0d:5e:61:f2:4a:06:37:60:76:f4:fc:83:fb:1b:43:
                    22:95:fe:b6:95:97:fb:54:8f:6c:2f:4a:0d:eb:c0:
                    b0:e8:85:82:da:6d:41:bd:f8:c9:eb:ee:fc:c3:58:
                    e8:f2:15:84:d4:37:3a:8d:0e:14:03:be:2b:09:2f:
                    af:b4:4f:8b:08:23:3a:77:73:59:af:a6:d1:e0:34:
                    9f:96:39:c8:26:d0:09:cb:04:8a:b6:a7:d7:97:f3:
                    00:46:1f:8c:dc:48:43:70:ee:0d:af:c3:08:0c:32:
                    ca:c1:7f:c7:b9:ea:1c:26:9c:8b:93:a5:da:7f:89:
                    59:0f:b6:25:d0:04:ff:95:3b:53:ac:9a:33:67:61:
                    c9:9e:8e:3d:f6:09:8e:fd:55:b5:d7:ff:ce:45:16:
                    0e:09:1c:e8:04:55:33:52:84:f8:82:98:01:e4:4d:
                    e5:b7:9d:60:33:f5:8c:c5:7f:72:20:74:66:3f:e8:
                    8f:ee:e1:7b:29:e9:5e:66:90:a5:2d:fa:48:1f:c8:
                    0c:a5:fb:dc:16:2e:58:2d:b6:9b:60:85:7a:b1:e9:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:69:13:BE:36:6D:E1:7A:83:F4:5A:B9:F2:2C:DF:5D:8C:D0:F0
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:85:b4:07:5c:77:4a:0c:57:2d:9d:12:2d:f4:67:ad:4c:bc:
         c5:4d:1e:cf:a0:6e:d6:21:a9:cb:04:fa:7f:0f:d7:5d:01:ad:
         99:59:41:f0:5a:d2:a8:6f:85:04:ab:c0:47:a5:65:3d:e8:d4:
         63:3d:36:72:0a:9f:05:b1:79:76:17:e7:aa:4d:fa:31:9a:b6:
         cf:ab:93:3f:3c:53:33:10:4a:50:e2:d6:18:a9:1b:b8:d3:49:
         ab:92:74:9b:7b:5b:da:f4:d0:a7:60:2d:ff:a9:d1:53:34:8b:
         76:73:a3:5a:91:77:cf:08:7e:5d:20:92:f1:6e:db:97:46:3a:
         2e:99:07:28:96:04:03:a0:cf:64:65:82:2e:2e:77:63:5c:2f:
         91:f8:d7:9c:89:cf:3c:ca:8e:2b:d9:20:1b:13:2f:1b:de:29:
         68:fa:c1:34:35:39:32:41:9c:0b:70:23:b5:59:0f:ff:c8:c6:
         11:3b:13:94:2c:65:37:7a:34:be:88:c2:e2:d0:6e:b8:f7:b5:
         68:bb:e0:bf:37:4b:16:04:a6:85:bf:b4:47:ec:04:17:6a:5a:
         7e:9d:90:b5:48:12:3d:41:03:e1:89:1e:9c:eb:e2:d5:9d:ff:
         de:ac:b9:a0:9e:92:9e:56:81:29:18:67:27:d5:f1:cb:61:d2:
         b2:4c:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:54:23 2025 by rpki-client