Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          dh2Ye8YmELOcJ88JlADeNjF4/jB2YHNbpS3jMoXcw9E=
Subject key identifier:   80:CC:16:21:81:3C:73:BE:A8:E3:6D:93:3A:04:6F:FD:FA:0E:AA:1D
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       019A71B8F043BE53A0D410108038A8772BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          171E
Signing time:             Tue 11 Nov 2025 07:02:16 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:16 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:16 +0000
Files and hashes:         1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=)
                          2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: QH0N/fHiKKL26NsSQZlegxV6n4THQeKN5v+8+tYsC+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:f0:43:be:53:a0:d4:10:10:80:38:a8:77:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Nov 11 07:02:16 2025 GMT
            Not After : Nov 12 07:02:16 2025 GMT
        Subject: CN=80cc1621813c73bea8e36d933a046ffdfa0eaa1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:7c:d1:24:56:fa:e8:8f:fa:cb:a1:e5:16:
                    63:77:69:2d:e3:a4:ff:d1:33:3e:63:88:85:cb:c8:
                    b9:5f:29:e5:53:4d:c1:e6:9b:64:da:04:a9:dd:92:
                    1c:0d:7e:e7:02:8b:cc:3d:71:d5:c8:a8:8c:31:76:
                    e1:84:b7:a0:b8:01:73:30:f5:7e:f3:a9:d5:5c:ae:
                    50:9a:d4:12:39:6b:69:cc:0b:06:3a:19:68:d3:cb:
                    a4:ee:0b:75:d1:4d:fa:6a:b8:35:91:64:0a:be:2f:
                    65:c4:e4:1f:d8:c3:97:0d:de:90:19:b5:80:2d:b8:
                    ba:c7:0e:1c:28:0d:ce:0d:60:7f:80:6d:a0:37:ea:
                    20:02:75:93:ef:23:ca:55:1a:72:86:01:a3:63:b5:
                    f9:25:93:35:a9:c5:af:64:70:b7:f2:5c:d3:e2:1b:
                    46:17:80:8d:e6:50:49:72:b8:ad:98:6e:2c:44:dc:
                    98:ea:b7:4b:83:d3:31:95:da:fe:85:7d:e1:0d:65:
                    1c:e9:35:cf:8d:ff:8d:1c:bc:9d:6a:a1:c4:44:e4:
                    47:63:32:9e:f1:d0:cd:92:25:ea:bb:e3:53:7d:6a:
                    96:02:73:0d:eb:e8:4e:35:be:11:ab:3c:c3:e0:af:
                    11:49:53:eb:d5:33:4e:76:cc:16:0e:7b:2e:7f:33:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:16:21:81:3C:73:BE:A8:E3:6D:93:3A:04:6F:FD:FA:0E:AA:1D
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:a2:89:8c:ec:f6:06:93:8b:b2:1f:c4:83:f4:d2:20:98:
         a7:0e:9b:38:cc:33:3c:30:2f:82:29:d6:4e:9c:10:0f:e1:3c:
         ea:d6:59:29:90:e4:f7:b3:56:b7:6f:b6:54:b8:81:a0:62:11:
         36:18:fc:e6:0c:0f:70:4e:40:30:ec:2a:49:d4:03:0c:96:23:
         0f:81:d2:c7:99:9e:d1:9b:27:6d:66:61:68:f1:a9:62:a8:8f:
         a1:d6:40:5a:1e:da:31:9f:1b:c5:bf:c8:be:47:2d:b8:df:fc:
         b5:4c:66:93:e9:e6:be:61:5c:b6:1f:bb:b0:43:3e:0b:4e:a2:
         12:68:a3:0a:e8:3e:f8:d7:30:4c:1b:80:6d:1f:e8:96:47:1d:
         62:83:fb:81:e3:84:27:8b:8c:2d:82:07:4c:86:fa:43:20:f4:
         9e:47:95:9a:ce:84:6d:3f:f0:2b:86:44:27:7a:21:fe:e6:eb:
         62:3c:a8:90:cb:30:f4:f5:31:f6:2d:6e:fb:73:61:26:be:b7:
         8e:48:3c:3b:a5:f8:d1:c0:e5:90:26:fd:1a:29:80:2f:fd:aa:
         13:cf:f2:e6:fc:bd:84:ff:da:ab:fa:bb:3f:93:a7:cf:18:72:
         8c:75:af:0a:c3:f1:d5:0c:3c:a4:2a:3f:d5:72:d7:21:a1:a9:
         c7:bd:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:38 2025 by rpki-client