Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          eac6BlBS1yqxAfbeAziwjAwdq0YBRRlPORj1rT+Tsi8=
Subject key identifier:   61:B6:26:4E:DB:04:E1:0F:F4:6C:7E:B8:95:00:61:73:73:25:06:5D
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019A4EF4650F99010E477CBD699485FEB30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0B4D
Signing time:             Tue 04 Nov 2025 13:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:30 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: 8Q8RS3P9M1WeUfPzVNPbODzRWo2wD6BgiYr/jlRZehU=)
                          3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=)
                          4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:65:0f:99:01:0e:47:7c:bd:69:94:85:fe:b3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Nov  4 13:00:30 2025 GMT
            Not After : Nov  5 13:00:30 2025 GMT
        Subject: CN=61b6264edb04e10ff46c7eb8950061737325065d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:c0:e5:95:f8:9e:c4:1d:9c:ed:e3:ee:6b:
                    a8:33:81:a9:48:68:9a:36:c3:d6:17:48:d4:03:dc:
                    47:fe:21:7f:b0:bc:08:6b:bd:69:88:a8:3a:66:b7:
                    b4:35:02:64:46:23:d0:fd:eb:82:da:ca:c4:72:e1:
                    d9:a8:eb:9d:94:fb:d5:3a:49:ef:39:48:df:29:75:
                    6b:56:96:92:16:b6:4c:ba:79:5d:74:00:30:1c:54:
                    bd:53:19:20:7a:8f:c5:bf:ee:fc:f0:f1:17:c6:56:
                    97:7a:97:a1:59:c8:9a:9c:0d:90:a4:3c:f0:51:9c:
                    4f:e4:69:f4:ce:f8:ad:a4:22:c3:8f:1e:b8:c2:52:
                    9d:aa:3d:04:63:55:95:9a:2d:7c:20:38:cf:95:bd:
                    93:e1:c8:63:23:45:23:96:96:21:0c:d6:af:87:e4:
                    13:47:1b:da:59:f4:5d:55:ce:07:a3:b6:bb:0e:41:
                    73:e7:0c:74:9e:89:1b:a9:cd:52:90:7b:34:ec:4e:
                    8f:38:ac:a6:2b:3e:00:61:04:08:d8:7a:40:82:be:
                    58:22:b9:11:06:16:9e:3f:90:d5:75:f9:e6:6e:3f:
                    95:ef:b0:0d:54:ba:75:d3:96:98:70:cf:5d:8b:26:
                    f9:85:59:89:f4:b8:ef:f0:ff:ae:c0:34:bc:04:d8:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:26:4E:DB:04:E1:0F:F4:6C:7E:B8:95:00:61:73:73:25:06:5D
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:89:47:5a:73:53:2f:11:b1:7c:be:e3:86:ac:11:15:44:
         15:c3:2b:46:5f:70:bd:b5:e9:56:cc:0f:ba:5f:93:fb:fd:6c:
         40:3f:7b:e9:18:32:d4:6f:a5:e6:43:86:4c:6b:bd:0e:f7:0d:
         d9:cd:7a:eb:d1:1a:a0:47:4e:34:35:e1:4b:9f:6b:20:9e:38:
         f7:af:01:a2:29:a7:f8:83:bb:8a:a5:fc:3d:b1:85:21:31:49:
         94:9e:03:da:b2:aa:15:02:d4:7f:51:ab:77:09:a7:bd:5e:a7:
         19:09:5e:0f:4e:c2:a2:7a:d0:52:d7:d9:01:7b:41:d8:8d:d5:
         94:0b:6f:5f:d2:f5:49:dc:75:d8:12:c2:dd:95:14:f8:a0:d6:
         12:07:0a:2c:d3:f8:c1:56:bf:43:84:de:9c:c9:36:11:75:dd:
         69:b9:92:27:90:73:18:1f:5c:aa:a9:16:ac:fe:6e:2d:de:33:
         bc:58:ee:6d:86:ff:71:b4:99:c6:90:74:7f:68:b1:aa:3a:cb:
         61:27:c4:70:2f:0e:a8:bc:50:c2:fb:e2:17:04:9c:4c:42:b7:
         91:a8:26:28:10:b1:bf:b5:99:be:2e:63:b5:28:dc:ab:9c:ad:
         31:a0:4c:d0:80:48:18:13:b7:f9:08:d3:d6:1d:9f:89:9c:96:
         6b:d2:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:17:05 2025 by rpki-client