Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          NN2XeX8Q6OcmpM5j4MUP7KjGaAr3YwgGRGPVA8DGGBM=
Subject key identifier:   51:55:40:FF:24:F5:03:93:1D:53:57:25:5C:68:4D:F1:9B:E0:3F:75
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019A1CBF01525EDBB26291B5E1A101237F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          140F
Signing time:             Sat 25 Oct 2025 19:01:10 +0000
Manifest this update:     Sat 25 Oct 2025 19:01:10 +0000
Manifest next update:     Sun 26 Oct 2025 19:01:10 +0000
Files and hashes:         1: Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa (hash: zHQ4G3ozImFZmCROGDcBHxKHHzDIQqVZcTlnWGds6nA=)
                          2: R9mkDG939Vi0V6WPYxWOdOia5yY.roa (hash: 4NF69kzNZytc4pvaMVN/lUR5TCOBAdYZbJ6/RSZBFvw=)
                          3: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
                          4: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
                          5: l3ZDT2gNOtZjLuBLuwpE6ZnBm-s.roa (hash: 1+yCgtq5Im5Fg/SSqsuub6MIDinjmkRADHcXtUuHpR8=)
                          6: p6BywI9GGwmeb7zmkwPwYCeFaw0.roa (hash: FmT1evBUP1t9QXDygh7a4PaImArT/MjNy+wH/psOeog=)
                          7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: qBpWhXQsJBmQwKA6mF1YxBOVfekTW/cfFmOxwDBAjL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:bf:01:52:5e:db:b2:62:91:b5:e1:a1:01:23:7f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Oct 25 19:01:10 2025 GMT
            Not After : Oct 26 19:01:10 2025 GMT
        Subject: CN=515540ff24f503931d5357255c684df19be03f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:71:81:28:b8:66:51:2f:ac:67:22:7c:cf:
                    13:7f:33:f3:2e:35:9e:e7:62:11:26:e2:d2:6a:53:
                    e3:52:a6:75:a6:26:bc:5c:f2:68:76:db:86:77:e6:
                    1b:80:5c:05:c3:0f:fa:be:19:ed:33:6c:b6:a3:30:
                    8e:1c:11:88:da:3a:93:23:01:bd:c4:4d:ea:22:c7:
                    54:bc:b0:08:47:c8:4d:8f:82:39:04:4c:0b:08:5a:
                    a0:fe:f1:17:d8:9b:10:eb:32:9a:a5:91:cd:3b:f9:
                    65:67:2d:bd:91:c7:3f:b0:5f:88:b3:04:70:02:bf:
                    50:b7:ae:03:79:86:82:6c:b9:0b:56:e3:c0:8e:9e:
                    63:49:47:99:e7:0c:01:10:80:57:e3:e9:52:aa:d5:
                    42:21:fc:76:5a:c0:bc:2d:39:7f:4b:4e:9d:aa:9c:
                    81:e1:61:4c:34:45:a8:c1:1f:e1:0d:5d:35:d2:34:
                    e6:f0:36:04:ae:50:b3:d5:53:ab:ab:29:98:a8:06:
                    4a:ff:c6:a1:57:8a:a4:2e:e1:1f:2d:a2:f9:3d:4f:
                    53:0e:cb:01:86:c3:f7:6f:d1:be:5e:33:4f:f3:10:
                    7f:6f:ad:a2:a3:d3:3d:d5:33:7b:c3:24:2f:d4:88:
                    77:ed:5f:f9:d4:5b:17:a7:87:13:91:4b:f4:cf:ed:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:55:40:FF:24:F5:03:93:1D:53:57:25:5C:68:4D:F1:9B:E0:3F:75
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:61:1c:56:1e:ef:90:92:ba:53:79:13:c5:62:eb:62:8d:e6:
         ca:52:a5:f9:6a:59:94:6b:a8:7c:19:de:07:ea:9e:5e:30:76:
         57:22:15:75:87:0d:e2:ee:1f:f4:ea:15:c1:31:19:03:bf:ec:
         e0:8a:20:d7:b6:00:77:30:a1:53:bc:db:01:89:f2:1c:c5:56:
         a7:6b:42:cf:71:47:5f:36:fc:a3:f6:98:56:9b:4c:57:9d:42:
         ff:6e:0b:9d:64:bf:3c:83:17:66:37:62:06:97:9d:e8:db:a6:
         6a:02:a3:bb:c8:9b:27:7e:af:67:04:1c:74:10:fc:e2:a2:aa:
         ed:a9:f4:e2:d3:90:36:e4:66:1c:71:a9:65:88:42:f9:53:e6:
         8a:85:d3:74:4c:c0:ca:e0:9b:6a:4e:99:5e:b0:9d:ca:b2:82:
         ac:82:c0:3e:4f:fc:80:a1:d4:99:f0:f0:5f:79:44:e4:f5:f8:
         5a:24:f7:44:4f:a0:f2:3d:97:74:15:44:05:bd:a8:59:00:4f:
         15:e9:75:db:36:00:69:69:71:84:e4:b8:59:12:b0:5f:f6:bd:
         f6:91:03:02:7b:4b:3d:79:da:f8:bd:26:6b:53:bd:cc:4a:3b:
         48:df:46:a2:a3:5b:75:e5:28:f0:fd:5e:a3:2e:6b:16:80:a5:
         d1:c0:d4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvwFSXtuyYpG14aEBI38nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjUxMDI1MTkwMTEwWhcNMjUxMDI2MTkwMTEwWjAzMTEwLwYDVQQD
Eyg1MTU1NDBmZjI0ZjUwMzkzMWQ1MzU3MjU1YzY4NGRmMTliZTAzZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj1xgSi4ZlEvrGcifM8TfzPzLjWe
52IRJuLSalPjUqZ1pia8XPJodtuGd+YbgFwFww/6vhntM2y2ozCOHBGI2jqTIwG9
xE3qIsdUvLAIR8hNj4I5BEwLCFqg/vEX2JsQ6zKapZHNO/llZy29kcc/sF+IswRw
Ar9Qt64DeYaCbLkLVuPAjp5jSUeZ5wwBEIBX4+lSqtVCIfx2WsC8LTl/S06dqpyB
4WFMNEWowR/hDV010jTm8DYErlCz1VOrqymYqAZK/8ahV4qkLuEfLaL5PU9TDssB
hsP3b9G+XjNP8xB/b62io9M91TN7wyQv1Ih37V/51FsXp4cTkUv0z+1yywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFVQP8k9QOTHVNXJVxoTfGb4D91MB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGEcVh7v
kJK6U3kTxWLrYo3mylKl+WpZlGuofBneB+qeXjB2VyIVdYcN4u4f9OoVwTEZA7/s
4Iog17YAdzChU7zbAYnyHMVWp2tCz3FHXzb8o/aYVptMV51C/24LnWS/PIMXZjdi
Bped6NumagKju8ibJ36vZwQcdBD84qKq7an04tOQNuRmHHGpZYhC+VPmioXTdEzA
yuCbak6ZXrCdyrKCrILAPk/8gKHUmfDwX3lE5PX4WiT3RE+g8j2XdBVEBb2oWQBP
Fel12zYAaWlxhOS4WRKwX/a99pEDAntLPXna+L0ma1O9zEo7SN9GoqNbdeUo8P1e
oy5rFoCl0cDUpg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:16:42 2025 by rpki-client