Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File:                     yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier:          7UOCHpqhWG5TxleeVxbo0l1v5pRGTHc9MlCJGBzccm0=
Subject key identifier:   E9:28:23:B6:33:6B:CE:E2:66:F7:55:EA:34:45:02:0C:8D:6C:48:67
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       019A1CF551AEF36AAF693451265C0EFBE2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number:          16FF
Signing time:             Sat 25 Oct 2025 20:00:30 +0000
Manifest this update:     Sat 25 Oct 2025 20:00:30 +0000
Manifest next update:     Sun 26 Oct 2025 20:00:30 +0000
Files and hashes:         1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
                          2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
                          3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
                          4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
                          5: YzdSzrn2g46QLg-Ab4yA5f8O1xU.roa (hash: juEIYlvSOfWVe6E6l6/j9UJcOILOSNhDvqnCdtQBLU0=)
                          6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
                          7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
                          8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: dmfbkMumr79MufOrs+9rer8K1Futgq1mH9WN/gH0p4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:f5:51:ae:f3:6a:af:69:34:51:26:5c:0e:fb:e2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Oct 25 20:00:30 2025 GMT
            Not After : Oct 26 20:00:30 2025 GMT
        Subject: CN=e92823b6336bcee266f755ea3445020c8d6c4867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:ab:a2:26:ae:b0:5a:c4:0f:8b:fb:79:fd:
                    65:f4:5e:3a:44:6c:6a:f0:4c:a6:9a:8b:26:1d:a0:
                    e6:cc:69:d2:b6:d3:89:be:91:8f:61:ac:9b:c2:83:
                    7e:3d:81:33:1a:0c:5d:93:20:45:92:87:36:da:22:
                    56:09:26:bd:37:30:1f:87:19:b0:68:72:56:85:2f:
                    ea:80:59:64:28:a6:48:4b:b7:64:86:3a:9f:1e:a7:
                    13:f1:14:93:59:e2:9d:3e:af:2a:cf:78:79:c5:d1:
                    3c:5e:d0:70:fc:82:07:98:28:d4:43:59:15:aa:80:
                    c1:67:32:c2:51:c6:d6:d1:2d:0d:04:da:1b:70:40:
                    dd:ba:25:c1:cc:eb:8a:7b:45:f1:95:df:00:a0:28:
                    63:db:9e:75:2c:7e:11:8c:14:60:f3:a2:4b:af:ff:
                    1e:f3:6e:72:fd:f0:a7:fc:32:d7:ff:0c:ad:09:c3:
                    69:34:be:17:3f:ba:f8:a4:11:4b:90:1e:2c:79:3c:
                    51:55:29:4c:6a:9d:6e:f9:e0:0d:57:bb:80:ec:2e:
                    5c:41:c5:af:83:ef:78:4f:7f:c2:a5:35:61:ea:ea:
                    86:a0:52:f1:e3:b5:0e:ba:47:ed:14:58:11:ae:35:
                    87:e0:7a:45:a4:be:5c:fa:97:a9:07:f4:d2:b8:66:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:23:B6:33:6B:CE:E2:66:F7:55:EA:34:45:02:0C:8D:6C:48:67
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:90:3b:d8:5a:f0:1f:ac:b5:a0:30:6d:5d:c0:14:1d:c5:
         53:31:2c:d2:ae:85:5e:58:bb:4f:cf:73:55:27:df:8d:51:d5:
         ed:3c:74:59:30:55:9f:ae:c7:c1:6f:b4:1c:31:9f:d8:ef:72:
         f9:c8:c0:da:65:75:5e:4b:e1:c7:a8:13:59:ae:47:6e:05:38:
         fc:44:4c:31:c3:e1:27:ec:db:69:cb:f0:f8:01:b5:98:0a:17:
         17:c0:ce:e7:c3:5e:51:8b:a8:b5:b3:5c:35:57:e5:f6:9e:37:
         d1:36:5b:60:3a:16:8a:5e:dd:d3:b1:41:c8:b8:84:45:b2:b6:
         f8:ea:ab:ae:2d:cf:0b:ce:44:4b:d4:8a:c5:43:3e:48:de:65:
         6d:ad:68:9a:57:cb:9c:eb:b8:4d:1b:ce:7c:5f:e7:13:a9:14:
         9d:dc:50:48:d7:c8:29:9a:35:ab:d4:02:e8:d7:29:f8:62:3f:
         00:2d:c9:55:63:6d:cd:22:0c:46:ef:9d:9f:59:b4:f9:d9:1e:
         0b:9f:5d:c6:c2:cd:89:4b:58:83:5f:c3:ca:34:ed:d1:9c:d3:
         15:91:9b:57:a4:82:6c:39:e7:9b:4b:fb:08:ca:c5:d7:72:e8:
         56:31:60:b3:97:49:f5:f2:ae:b6:bc:42:37:11:93:0a:53:cb:
         6f:8c:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:29:25 2025 by rpki-client