Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          yCj+ZxKO7aMMO/kxGeCMSTZke5tdDMUCBhy+QhWNnNg=
Subject key identifier:   07:43:40:81:8C:3A:36:96:7A:1A:0E:FA:46:AC:B3:C5:E6:EE:18:D1
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       019A1FF615D08181F26C6CCBE7D8EF7A4482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          16F2
Signing time:             Sun 26 Oct 2025 10:00:12 +0000
Manifest this update:     Sun 26 Oct 2025 10:00:12 +0000
Manifest next update:     Mon 27 Oct 2025 10:00:12 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: XiWwBLHFDjDuJjMsrb1c5CcdzxIu5zM8o6BE65Fl3Uc=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 10:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:f6:15:d0:81:81:f2:6c:6c:cb:e7:d8:ef:7a:44:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Oct 26 10:00:12 2025 GMT
            Not After : Oct 27 10:00:12 2025 GMT
        Subject: CN=074340818c3a36967a1a0efa46acb3c5e6ee18d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:7b:52:3e:be:bf:07:0c:c7:80:e9:fa:8f:
                    57:52:9a:25:df:6d:2e:e5:28:c8:8e:80:2b:3c:2c:
                    57:4b:4f:e4:dd:6c:88:06:c2:64:93:e8:c1:06:c6:
                    97:c6:29:5c:5a:22:b9:25:7d:38:a9:fc:4b:a6:13:
                    27:5e:5f:d0:11:fc:85:cd:61:d9:e1:38:e6:cd:19:
                    6e:64:f0:fd:36:f3:13:df:be:70:81:42:56:c1:aa:
                    50:78:54:e0:87:d7:42:d7:f9:67:5f:35:1b:e2:e2:
                    98:70:6c:50:5f:34:ba:0e:5d:7c:0b:1e:fd:95:e8:
                    67:b2:93:fa:6f:78:b5:00:1a:6c:b7:99:c0:b5:c6:
                    66:11:dd:49:4f:94:bd:66:79:d6:a3:cd:e3:29:66:
                    f7:a6:b6:8f:fd:4e:53:e9:5a:42:12:bc:06:62:4c:
                    9e:a5:ee:89:7b:7c:b7:2c:ae:a1:9a:73:f1:e7:c3:
                    d0:92:e6:2c:a5:3b:dd:c4:7a:a5:7c:de:ce:ba:c5:
                    80:a1:d9:e0:b0:35:e4:29:ea:5d:f4:4e:2b:ff:9b:
                    5c:e8:75:e4:c4:4b:46:d1:98:63:94:e1:34:1a:68:
                    32:68:b2:78:db:1f:6a:cb:b0:2b:9b:32:db:0e:2a:
                    b3:19:da:67:b8:cc:06:40:e8:23:12:0f:e0:f3:aa:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:43:40:81:8C:3A:36:96:7A:1A:0E:FA:46:AC:B3:C5:E6:EE:18:D1
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c3:75:d3:89:de:57:4f:20:b0:c0:c9:02:66:ae:70:31:6e:
         44:9d:f6:6e:1e:16:7f:47:d7:f5:50:f3:e6:4e:94:ea:d2:b9:
         22:f0:57:b7:b6:74:d4:62:94:d9:40:54:28:31:c4:7c:d4:ee:
         04:4f:74:93:10:7a:bf:65:26:3e:04:56:5d:a3:1b:0a:e1:d7:
         4f:43:68:9e:3c:44:e9:f7:ea:1d:f0:e1:24:6f:5c:14:4b:60:
         79:c0:7d:2d:40:e4:71:b1:0e:a4:1a:0f:d9:b6:fb:8b:7c:62:
         9d:c9:94:d1:6d:1e:36:a1:7e:75:d8:e7:17:d2:0a:d9:ca:ca:
         b1:83:79:95:72:9d:2e:3d:11:3a:40:96:db:d6:a1:17:74:8a:
         fd:62:68:a1:11:b6:59:31:77:b8:e2:08:b2:51:38:39:4c:e1:
         cb:48:ab:7a:02:10:14:b1:06:8d:9c:55:c3:c1:16:c5:d0:4a:
         1c:24:35:37:e3:de:02:43:1e:6c:f2:57:b7:f7:c0:ac:06:6a:
         03:a8:1a:9c:84:a7:6d:bf:19:af:1e:70:11:d0:7a:e5:ed:a8:
         a5:46:2a:5e:39:29:4e:82:5b:a5:f0:d1:ac:1e:10:09:99:15:
         af:fb:7f:48:1a:98:c4:37:6e:fe:99:24:db:5e:5a:4e:69:4b:
         80:90:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:35:19 2025 by rpki-client