Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File:                     Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier:          7JI+3EogClKVG6aA21uZ5jvcnJQNp0hwKuVXJQsO2QE=
Subject key identifier:   54:1E:68:23:2A:22:E3:36:B7:69:41:BA:E3:C4:B3:CB:CB:60:5F:D4
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer:       /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial:       01995009E68A5B9262A41BA320D9155D4BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number:          0126
Signing time:             Tue 16 Sep 2025 01:00:50 +0000
Manifest this update:     Tue 16 Sep 2025 01:00:50 +0000
Manifest next update:     Wed 17 Sep 2025 01:00:50 +0000
Files and hashes:         1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=)
                          2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: xKTSD2UZ58V8gumU38v9msxR2SCfWHwGMV9lswlP1Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:09:e6:8a:5b:92:62:a4:1b:a3:20:d9:15:5d:4b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
        Validity
            Not Before: Sep 16 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=541e68232a22e336b76941bae3c4b3cbcb605fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:0b:ae:30:99:d3:86:e0:19:27:d3:74:e9:
                    d2:85:7f:1d:57:33:5d:c2:22:5b:76:f0:6b:36:df:
                    1e:95:96:70:dc:64:d1:b4:63:7a:e4:88:b6:ea:26:
                    d2:be:9c:b5:fa:98:e5:9f:c9:a2:58:1c:43:f8:80:
                    5a:80:c8:c2:32:6c:19:40:f1:63:be:56:5e:7d:81:
                    5c:8b:84:ec:09:53:3c:76:fd:98:8d:53:27:47:35:
                    40:9b:a8:32:8b:3f:dc:17:59:49:38:ba:33:08:9a:
                    55:5f:42:b9:8c:f2:ab:20:a3:cd:28:dc:08:5f:ae:
                    82:39:8e:1b:80:b7:3a:b8:28:1f:02:07:fb:4e:77:
                    39:86:e2:fe:c7:34:dd:10:32:12:4a:5a:49:42:e8:
                    43:10:85:2b:34:ea:1e:70:a1:32:fd:d4:36:53:16:
                    0c:cc:26:03:2b:5b:9f:87:73:51:9a:48:22:f1:b0:
                    94:28:1a:e5:e1:72:4c:71:c5:e3:45:8b:20:60:96:
                    4d:47:36:bf:f9:97:8e:87:b3:1f:8a:c4:58:56:16:
                    9e:05:d5:40:0b:c9:37:a7:be:43:22:81:b2:1b:b1:
                    42:2e:cc:3a:92:08:0d:d8:6a:dc:12:7b:f1:ec:39:
                    a6:ad:0f:5e:6c:d6:e8:ac:2d:a0:61:4a:90:3b:dc:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:68:23:2A:22:E3:36:B7:69:41:BA:E3:C4:B3:CB:CB:60:5F:D4
            X509v3 Authority Key Identifier:
                keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:2f:9b:c8:20:0a:4e:27:bb:e9:36:f2:99:5b:8b:64:cc:
         7a:87:a6:23:96:2f:7a:38:e3:13:9c:ec:f9:77:7f:da:26:ac:
         f8:42:d8:82:00:5b:8e:1f:a7:37:24:af:12:e8:c0:ac:d0:1b:
         78:a6:b2:c5:42:11:21:7d:d9:65:2a:a4:2c:bf:7f:9a:38:d7:
         04:52:22:6e:87:49:c9:95:9a:21:1a:3b:26:3e:7e:53:35:e9:
         8b:50:ed:81:a5:65:05:84:06:52:1a:20:b1:20:5d:72:de:6b:
         14:a2:ce:64:71:ac:d2:16:81:5a:ea:80:db:ab:ee:29:0f:b1:
         86:0f:e5:6f:77:a6:d7:08:b0:9e:8c:ad:c9:31:1f:01:68:ba:
         9b:e1:a4:ae:ae:f1:3c:27:52:8e:ae:b1:c6:f6:e5:f4:9f:26:
         fb:2f:c1:67:b1:35:af:d6:48:61:f3:9f:89:b7:cc:87:96:3b:
         2b:e8:cb:58:e7:0c:ae:32:30:4e:5c:3f:11:e9:3d:cc:17:e6:
         56:30:54:63:db:09:e3:e6:08:a6:cc:4e:46:b2:ee:ad:98:62:
         4e:1c:06:11:16:96:d6:38:4f:f5:2f:bd:bf:bb:32:c8:52:8c:
         f9:b1:51:5f:67:ba:0e:55:2d:7c:e1:2e:5b:e0:29:12:70:86:
         59:1c:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:57:40 2025 by rpki-client