Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          qSiIzdIaglst3yrU5cH0l631Tvib+3vHyZOsz4XKzpM=
Subject key identifier:   1B:20:16:C6:FE:54:0B:6C:13:EC:4D:22:B3:BC:32:BC:90:8A:17:91
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       019961D8E54757CDB37C5F45C41B77AD5978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          1102
Signing time:             Fri 19 Sep 2025 12:00:28 +0000
Manifest this update:     Fri 19 Sep 2025 12:00:28 +0000
Manifest next update:     Sat 20 Sep 2025 12:00:28 +0000
Files and hashes:         1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: MAWBTVcOHxURAViApqZUB/gOCAJcLR3Lm6fl+qsgNjs=)
                          2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:d8:e5:47:57:cd:b3:7c:5f:45:c4:1b:77:ad:59:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: Sep 19 12:00:28 2025 GMT
            Not After : Sep 20 12:00:28 2025 GMT
        Subject: CN=1b2016c6fe540b6c13ec4d22b3bc32bc908a1791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:65:c3:93:8d:d7:8e:c9:f0:33:98:68:58:
                    2f:e5:32:41:82:b1:bb:c1:d6:41:c2:b7:9d:ee:f5:
                    70:5c:af:5b:35:83:70:84:de:ed:9e:49:33:34:f7:
                    8d:5a:cb:fa:53:b2:70:bd:ab:e1:1e:b7:89:33:79:
                    65:d2:80:0d:64:88:ba:b3:14:7e:66:f7:4a:9f:b6:
                    62:6e:1e:0a:9a:6e:3d:c2:1b:61:54:e7:bd:15:e9:
                    e4:f2:f9:b3:9d:bf:2d:a1:37:92:61:18:92:07:26:
                    39:37:43:6d:69:d3:87:4a:bb:92:ab:a3:c3:cd:df:
                    5e:a2:c5:d6:ed:05:8b:20:2b:14:0c:df:4c:57:fa:
                    41:e8:a3:68:a0:a1:89:08:1b:bd:36:d8:5b:af:38:
                    e4:6c:52:4d:62:b1:7f:4f:f1:9c:f4:b2:a3:3b:34:
                    83:1c:50:c1:42:0f:de:97:c4:fa:4c:8d:6a:3a:4c:
                    04:66:96:55:64:34:0e:d8:3f:56:5c:2c:4e:33:0a:
                    d5:82:9a:1f:52:12:d3:49:22:df:86:5b:59:19:d0:
                    3e:29:08:d2:de:06:ea:f4:34:76:64:c3:d0:09:17:
                    d4:e5:e8:32:c5:76:b6:bd:83:b3:04:f2:b0:33:11:
                    72:fa:40:e2:95:07:b0:c1:ff:93:a3:c0:a7:50:ad:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:16:C6:FE:54:0B:6C:13:EC:4D:22:B3:BC:32:BC:90:8A:17:91
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:11:4d:55:8d:9d:cc:86:9e:c3:ef:2f:99:46:22:af:a0:
         57:2b:f6:b2:44:b8:7a:41:8a:c3:96:93:05:a5:63:44:c8:8e:
         f4:42:7a:fb:b0:bd:74:40:13:e4:83:81:d6:1e:cb:45:93:51:
         f9:a4:5f:59:b5:a4:4a:be:7c:e9:40:2d:ba:f2:55:68:26:68:
         b4:aa:8c:b8:20:49:d3:97:0e:3a:ce:2f:64:5f:8e:b4:28:7d:
         70:c0:d2:d0:cf:71:4b:b7:2e:31:b9:1b:6b:74:da:b6:19:5a:
         bd:25:31:f7:4d:7b:77:e3:33:e4:ce:2c:fd:4b:cf:f5:f1:ca:
         d3:89:b0:e1:6c:6f:1c:b2:28:99:27:dd:a3:f0:2b:95:65:3b:
         8c:4f:5a:be:f8:ec:6e:69:24:c8:ba:4a:04:4a:22:f2:50:b5:
         3f:5e:72:05:7c:2f:37:1d:5f:30:3d:a0:3c:c1:53:d4:58:36:
         f4:f7:0e:42:81:e2:85:b2:f6:0c:53:9f:2d:2d:19:13:6a:49:
         8b:39:84:58:60:87:36:82:b3:ed:0b:2d:65:df:8a:b6:54:1a:
         cf:4c:77:ce:48:4c:21:ab:6a:d9:75:7a:9c:04:83:a5:fc:c2:
         bc:42:bb:bb:11:5f:5a:ca:8b:db:90:71:00:01:08:25:b0:7d:
         f1:29:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:11:23 2025 by rpki-client