Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          sOp7lqZ62UIsb9jXgKFBlMK57evjjLQkV4xL6krz6kc=
Subject key identifier:   F1:F2:8C:A1:65:DD:24:24:43:3B:7F:0E:FF:5C:69:AB:E7:94:1E:B2
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019A1D2C91F23F5BFADE43BC6A2837315A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          12C6
Signing time:             Sat 25 Oct 2025 21:00:51 +0000
Manifest this update:     Sat 25 Oct 2025 21:00:51 +0000
Manifest next update:     Sun 26 Oct 2025 21:00:51 +0000
Files and hashes:         1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
                          2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
                          3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
                          4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: P+wOg6Ev4XePj4tK95O+XY3Ibh/yQopR6aa0xOu+D7k=)
                          5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
                          6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
                          7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
                          8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:2c:91:f2:3f:5b:fa:de:43:bc:6a:28:37:31:5a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Oct 25 21:00:51 2025 GMT
            Not After : Oct 26 21:00:51 2025 GMT
        Subject: CN=f1f28ca165dd2424433b7f0eff5c69abe7941eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:a5:53:19:a1:6b:01:af:bf:f8:c2:9a:a8:
                    02:b7:51:ec:79:03:61:84:dd:f9:30:94:1e:58:a3:
                    86:30:c8:6f:87:d0:a8:9b:45:9f:44:00:93:43:71:
                    9f:86:27:d8:5f:fa:10:c1:d5:5c:2d:e0:7e:ab:41:
                    09:48:d1:0b:77:95:c0:f5:73:74:35:b9:ed:5a:ab:
                    e9:c5:10:02:4e:33:2d:23:5c:a1:7b:03:7f:fc:13:
                    e0:b1:7b:90:99:3f:ab:3f:d6:40:72:56:33:1c:88:
                    87:c2:52:f5:6c:2e:5e:aa:bc:2c:b0:05:d3:02:d6:
                    e5:7d:90:e9:b8:46:71:d8:ab:2d:0a:52:8f:32:0b:
                    00:42:97:7c:76:bb:b2:34:50:98:7f:10:eb:75:8f:
                    73:70:d4:99:d7:65:98:49:a9:c3:57:55:20:5b:43:
                    09:d7:1f:e2:16:b4:2e:73:a6:d5:8c:9c:22:b9:ae:
                    12:5f:68:11:0c:81:ec:48:37:f7:28:90:89:7f:f8:
                    9b:29:50:55:b7:a0:71:c2:1e:39:32:06:82:a8:a4:
                    fe:dd:b9:f5:1f:45:80:f0:ff:8f:cd:79:73:2f:8f:
                    e8:8b:e5:bd:35:b9:e4:82:9e:59:6b:13:73:77:b5:
                    44:ae:b7:92:f3:50:b5:be:75:67:9e:ef:cc:b2:2a:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:8C:A1:65:DD:24:24:43:3B:7F:0E:FF:5C:69:AB:E7:94:1E:B2
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:41:3b:ce:3b:0d:c1:37:26:66:c2:1e:1d:f7:16:5f:72:87:
         32:39:3d:73:e1:f7:7e:37:3b:38:68:86:70:55:41:b6:09:5f:
         f1:34:65:d7:dc:5a:d9:25:d0:fa:da:5a:0c:bf:38:4f:0d:36:
         23:6f:aa:44:67:7b:1e:9f:b8:2b:f9:4f:02:d4:70:3f:ee:4a:
         67:f5:43:4f:77:a3:d6:44:6d:76:a1:5c:de:0c:61:54:77:3a:
         f1:68:5a:de:5e:df:dd:18:34:4b:09:ac:4d:34:43:e2:d9:1b:
         9e:89:03:9a:53:95:37:2e:fb:a8:68:11:bd:a3:1c:36:f5:c0:
         5b:1a:f0:ed:d7:1a:f9:b4:40:d1:00:3a:42:6f:34:55:85:ee:
         f1:5a:a8:7b:ea:6a:78:d4:68:11:a4:09:25:c4:0d:68:f7:95:
         2b:10:28:b5:79:52:13:b9:63:77:af:b1:be:39:dd:2c:90:27:
         bf:17:bf:cc:10:e8:73:4d:1f:05:30:c5:45:df:23:a8:6c:1a:
         e1:0a:eb:1a:d9:50:99:b5:9f:de:6a:6c:7e:b2:2b:9b:92:af:
         2c:cf:87:db:cb:54:76:db:cf:8a:dc:b7:32:c6:01:60:a5:e3:
         9f:43:25:5a:68:3d:4b:07:d1:74:8a:8c:75:d4:75:b8:12:02:
         5c:d1:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:36:32 2025 by rpki-client