Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          qYz5WCoNNgHpnh8D7Wbn6l16hma4W0uDQVHsGpJY1iM=
Subject key identifier:   7E:29:97:39:52:25:E0:1B:5B:AF:32:19:F6:36:E0:44:CA:8F:DB:81
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       0199FE1051631429BC670CED898F34FB53C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 20:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:46 +0000
Files and hashes:         1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=)
                          2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: 71VJ2p/rSPJZfeDewdyF5OxijL08tYed9C5dRCJM0BE=)
                          4: faW_PPYk_4UD9_3RNfk7L7R4hKg.roa (hash: NsYb0FRDPoAtzYBgzGg3wYZizhwYw15oPV3lBi8uVeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:51:63:14:29:bc:67:0c:ed:89:8f:34:fb:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Oct 19 20:01:46 2025 GMT
            Not After : Oct 20 20:01:46 2025 GMT
        Subject: CN=7e2997395225e01b5baf3219f636e044ca8fdb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:6d:df:5b:ae:86:9b:94:63:3f:9e:f8:ae:
                    64:17:3f:06:25:0c:c5:2e:b0:17:e6:38:c3:b0:5a:
                    5e:06:43:1e:6a:76:45:7e:f0:5f:10:0e:2a:8e:c7:
                    b9:63:b6:9c:d8:e0:8f:d0:48:c1:87:07:eb:bf:76:
                    41:f2:f5:1f:cf:80:70:42:81:a2:cf:9c:ae:5a:b4:
                    39:d5:0b:af:5e:ae:57:82:33:b5:28:1e:77:1a:a7:
                    fb:b7:22:15:c9:75:04:0a:61:69:0c:b3:49:40:37:
                    10:32:5c:43:40:3b:eb:84:93:95:df:b6:c4:19:18:
                    ea:ee:ab:58:ff:66:63:09:9f:48:53:c7:07:67:d0:
                    8f:b7:cd:8d:04:cf:74:b9:d7:73:8d:f5:8f:cf:d8:
                    e4:d0:c3:5a:06:a2:68:b2:d5:9a:b0:1f:40:ad:6b:
                    db:97:ea:84:37:af:66:d2:3b:e6:b8:ad:2e:ac:3c:
                    51:98:05:69:41:1b:81:74:3d:6a:67:b4:cd:23:06:
                    5f:d7:be:d6:7a:49:97:46:f8:7c:5f:28:83:23:63:
                    99:ea:ad:54:41:55:05:7a:22:3d:a8:f5:95:f2:c4:
                    96:2d:79:ee:3e:87:e1:c7:5d:93:c3:da:1c:15:f2:
                    9f:0b:09:62:13:ca:d2:25:09:40:38:aa:45:e0:64:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:29:97:39:52:25:E0:1B:5B:AF:32:19:F6:36:E0:44:CA:8F:DB:81
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:88:4d:4b:a2:1e:18:f2:b7:87:c2:17:67:d6:02:25:d8:2c:
         fc:63:a4:64:1d:44:80:6d:80:a8:20:d5:a5:58:01:14:fb:d5:
         13:b9:67:c9:28:21:05:8a:08:89:dd:49:81:ea:92:29:c9:df:
         3b:0e:0c:09:a6:49:94:eb:5a:14:e3:71:3c:9d:df:7a:72:a9:
         01:91:ff:40:7a:25:fd:71:b5:9c:3a:80:1a:b5:50:c2:67:ee:
         4b:60:25:e6:58:5f:a2:b8:a2:b1:17:28:79:a4:9b:de:ba:50:
         02:59:cf:d1:ba:7d:7b:60:e0:2a:59:c5:4b:64:b9:84:15:f5:
         c8:30:63:00:e8:24:1c:4c:df:8f:d7:97:bb:37:cb:ad:f4:ed:
         ce:3d:67:1e:57:cd:21:49:1d:b8:e7:97:34:f6:85:c3:13:a3:
         d7:89:3a:ad:de:88:42:86:ae:b7:d1:de:84:d2:0e:e6:ed:96:
         73:4b:fa:40:1b:08:31:14:12:c0:99:37:3f:60:f0:13:5d:e3:
         f0:7b:d6:8f:79:23:a1:b8:45:f4:2c:c3:ea:bf:c7:a4:8d:28:
         78:9d:14:42:6f:7e:01:3f:eb:2d:1b:b7:c8:54:86:70:ab:d5:
         96:29:4e:01:15:af:75:68:5b:b8:0c:0c:bd:3d:08:30:3e:b4:
         04:2d:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:34 2025 by rpki-client