Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          iRr1/FkI2BUtftAj50mOyV3TzHmsHMlCnptBCjEhmi0=
Subject key identifier:   A2:45:C8:F9:58:EE:5C:E9:1C:3C:BB:3C:FF:09:0C:F1:EF:0A:BA:2C
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019A2C9F6773F7C81339213CA4EBEC7EDA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          06E4
Signing time:             Tue 28 Oct 2025 21:00:35 +0000
Manifest this update:     Tue 28 Oct 2025 21:00:35 +0000
Manifest next update:     Wed 29 Oct 2025 21:00:35 +0000
Files and hashes:         1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
                          2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
                          3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: aXORlpr3FH6fqEpa+gYEcqzQ2PnWumWBufEs7ZJJ+EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:9f:67:73:f7:c8:13:39:21:3c:a4:eb:ec:7e:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Oct 28 21:00:35 2025 GMT
            Not After : Oct 29 21:00:35 2025 GMT
        Subject: CN=a245c8f958ee5ce91c3cbb3cff090cf1ef0aba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:bc:d0:48:82:96:c2:9b:a3:06:fe:6c:a1:
                    be:99:19:6f:79:bb:17:fb:78:74:06:69:d9:62:d1:
                    7e:12:69:4e:69:87:6a:ec:a3:07:d2:b9:d0:29:f5:
                    e5:e1:a9:d6:7d:62:3e:33:76:2d:65:40:41:83:04:
                    74:a7:d4:25:be:60:0b:1c:bc:08:03:03:60:75:8b:
                    10:86:97:45:3f:b1:7a:c4:c0:58:ff:31:e1:6b:8d:
                    47:cd:0b:12:00:a3:37:4a:09:35:a9:72:e8:16:a0:
                    e8:c4:73:91:e9:2a:b7:0a:99:18:65:0d:1e:34:f1:
                    b1:74:7e:75:a5:63:fe:26:1d:70:4e:9e:e4:17:ba:
                    ca:72:ea:4d:fb:4a:f8:4f:42:39:5b:30:87:a4:0b:
                    46:ed:3d:10:76:af:56:ef:2c:4f:b1:d5:3b:5f:9a:
                    08:55:bb:34:35:86:96:c1:0b:cd:33:39:63:97:bd:
                    39:b0:14:c9:01:18:d3:75:6e:06:b6:47:69:18:d5:
                    58:e9:76:07:af:b0:8f:d5:cf:22:e1:0f:3c:40:ee:
                    1d:04:a1:16:9f:cc:53:bf:7f:2a:1c:9c:64:ef:f7:
                    77:9e:41:43:37:4d:b6:78:c6:7a:2f:f7:ce:81:4c:
                    71:0d:e1:29:5f:95:bd:0d:24:15:78:16:e4:4d:30:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:C8:F9:58:EE:5C:E9:1C:3C:BB:3C:FF:09:0C:F1:EF:0A:BA:2C
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:dc:e5:52:a8:bb:53:9e:89:4e:9f:17:ba:0b:2f:d7:31:d6:
         fa:e8:60:55:55:03:a4:eb:40:f6:7f:a2:0c:fc:3f:b8:32:be:
         2b:dd:5d:1e:15:11:7a:2f:1f:28:b1:4c:e6:ae:ac:ad:23:f0:
         e1:c9:b6:77:f1:d7:39:dc:db:48:4b:37:6e:9a:cc:39:0c:fd:
         16:0c:2b:1b:54:82:07:08:2b:c2:49:35:42:db:41:6c:73:61:
         11:65:9e:d1:a7:21:53:6a:16:23:a9:77:4b:37:10:cf:1e:d8:
         a4:08:02:6d:1a:a2:93:f7:c2:33:7a:f4:8c:38:30:3e:ff:e3:
         4d:11:ef:4b:82:cc:fe:91:e8:5e:16:48:fd:a4:e3:69:bc:ec:
         6b:31:f4:cc:bd:41:de:72:a3:90:fb:fc:c3:8e:95:64:6d:9d:
         49:ed:7e:43:a6:aa:1e:38:da:87:b2:e3:8f:82:c6:6f:a4:48:
         50:b9:3a:3c:78:31:f6:d5:d7:cd:da:7c:2f:4e:b3:71:5f:56:
         15:c1:98:4b:0a:1e:fd:f3:eb:cb:e3:ea:8d:6d:62:66:17:ec:
         3f:02:93:27:84:47:81:43:41:84:0e:5e:f3:da:ce:c2:5e:44:
         3e:ba:ca:00:1d:42:05:95:99:0f:72:0c:d1:ec:64:db:c0:2d:
         a0:e0:88:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosn2dz98gTOSE8pOvsftoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1
MzdhYWEwHhcNMjUxMDI4MjEwMDM1WhcNMjUxMDI5MjEwMDM1WjAzMTEwLwYDVQQD
EyhhMjQ1YzhmOTU4ZWU1Y2U5MWMzY2JiM2NmZjA5MGNmMWVmMGFiYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HS80EiClsKbowb+bKG+mRlvebsX
+3h0BmnZYtF+EmlOaYdq7KMH0rnQKfXl4anWfWI+M3YtZUBBgwR0p9QlvmALHLwI
AwNgdYsQhpdFP7F6xMBY/zHha41HzQsSAKM3Sgk1qXLoFqDoxHOR6Sq3CpkYZQ0e
NPGxdH51pWP+Jh1wTp7kF7rKcupN+0r4T0I5WzCHpAtG7T0Qdq9W7yxPsdU7X5oI
Vbs0NYaWwQvNMzljl705sBTJARjTdW4GtkdpGNVY6XYHr7CP1c8i4Q88QO4dBKEW
n8xTv38qHJxk7/d3nkFDN022eMZ6L/fOgUxxDeEpX5W9DSQVeBbkTTDWowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJFyPlY7lzpHDy7PP8JDPHvCrosMB8GA1UdIwQY
MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt
YmI0ZDI0MmVkMmNkLzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk
LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1tzlUqi7
U56JTp8Xugsv1zHW+uhgVVUDpOtA9n+iDPw/uDK+K91dHhURei8fKLFM5q6srSPw
4cm2d/HXOdzbSEs3bprMOQz9FgwrG1SCBwgrwkk1QttBbHNhEWWe0achU2oWI6l3
SzcQzx7YpAgCbRqik/fCM3r0jDgwPv/jTRHvS4LM/pHoXhZI/aTjabzsazH0zL1B
3nKjkPv8w46VZG2dSe1+Q6aqHjjah7Ljj4LGb6RIULk6PHgx9tXXzdp8L06zcV9W
FcGYSwoe/fPry+PqjW1iZhfsPwKTJ4RHgUNBhA5e89rOwl5EPrrKAB1CBZWZD3IM
0exk28AtoOCINQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 03:36:18 2025 by rpki-client