Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File:                     Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier:          QuWCZ4BUX7p1YwGcCaQ6jKmR0S5xA7L5P7Biqffa9XE=
Subject key identifier:   09:FC:D4:8D:95:9D:05:52:DC:D6:D1:0C:60:69:0D:80:7A:8D:39:57
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer:       /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial:       0199FD348A444CDDC0E4F2C100EDB7FAEB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number:          01A4
Signing time:             Sun 19 Oct 2025 16:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:42 +0000
Files and hashes:         1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: ncYyTxFzJMWo32HqoufNthR7nGpHfLfDrrsDaSy6Apw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:8a:44:4c:dd:c0:e4:f2:c1:00:ed:b7:fa:eb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
        Validity
            Not Before: Oct 19 16:01:42 2025 GMT
            Not After : Oct 20 16:01:42 2025 GMT
        Subject: CN=09fcd48d959d0552dcd6d10c60690d807a8d3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:7a:eb:4b:6c:01:ed:61:84:b3:2d:ce:44:
                    70:38:2a:56:c2:55:1a:1c:de:76:be:60:14:f5:fa:
                    ac:57:4c:02:a2:8c:cf:8a:0f:83:67:21:50:7c:76:
                    ff:dc:17:11:1e:c6:5f:be:c8:79:d3:c0:65:2f:00:
                    28:84:b4:4e:20:f0:90:d3:b4:03:8f:3e:7f:c7:e2:
                    0b:87:3b:56:68:0a:fb:e8:bf:36:67:80:bb:70:84:
                    a0:96:47:f0:ae:a9:e3:f6:01:7a:f9:4b:b0:c2:2d:
                    15:10:16:6a:1d:32:bc:cb:84:2d:77:8f:ae:16:e3:
                    87:10:47:c8:5f:b4:dd:2e:98:e1:47:51:53:db:1d:
                    05:0a:6b:95:d0:da:33:78:3f:c4:85:d3:28:95:7e:
                    b5:07:17:94:10:50:81:1c:c2:66:41:b6:e3:cf:4e:
                    4c:56:ba:e9:36:5f:c9:1f:fd:20:bb:15:1b:e4:0c:
                    91:75:6d:84:49:9a:32:f7:c3:68:23:12:53:5d:09:
                    c8:85:85:20:91:3a:6e:74:55:5f:44:ce:f5:61:71:
                    8e:9c:34:1e:3a:9e:25:d8:49:9b:e4:5d:86:a5:d2:
                    d8:1a:84:6d:fc:79:7f:48:4b:de:5e:96:a3:fa:be:
                    7f:20:ab:7d:7f:47:33:a2:2f:23:b4:4c:d8:f6:38:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:D4:8D:95:9D:05:52:DC:D6:D1:0C:60:69:0D:80:7A:8D:39:57
            X509v3 Authority Key Identifier:
                keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:76:18:b2:08:d4:2f:25:e9:ff:ab:4c:68:e2:49:a8:24:4c:
         11:ff:13:88:48:ef:8d:6a:52:b6:d2:b4:0b:67:f7:ca:5c:6f:
         75:a9:59:3e:2f:48:ba:fe:c4:9c:98:4f:fd:81:57:2c:e6:e9:
         56:e8:e3:50:fc:76:dd:9f:a0:35:27:88:20:5c:0d:8a:c3:0d:
         0c:81:7a:09:d3:04:31:21:0a:08:0a:86:fe:af:eb:3e:5d:dc:
         b3:c4:6e:d7:ab:b3:f8:86:cf:8d:6d:3f:fe:f9:8b:91:49:b8:
         05:4f:e2:7d:45:48:74:9b:f3:b9:1c:7c:a0:08:10:80:2f:a7:
         c8:d8:67:c4:11:93:66:58:79:e5:91:19:25:69:1c:69:1c:83:
         f3:0d:2c:d0:97:b4:d1:1e:93:19:25:7b:f5:47:68:56:e0:cd:
         e6:6d:7b:87:31:85:4c:25:73:a9:bc:5c:56:42:e9:13:96:0d:
         9c:84:16:63:33:1d:4c:a5:b4:17:10:b5:93:44:2a:ed:d6:4e:
         47:9f:73:c6:38:60:61:65:66:f4:df:8a:c5:6a:81:c2:32:d3:
         0c:cb:6d:ce:22:14:ff:f4:95:0d:f2:3c:3e:fc:a8:20:81:a8:
         a6:84:88:ea:20:7f:00:04:6d:5c:55:e3:8a:47:60:b2:13:6b:
         9f:bc:a7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIpETN3A5PLBAO23+utZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGNjNDA3Y2VmZjU3YjEzYjQ5NDU1ZjMwYzIwYjc2MWM3
OTEyYjUwHhcNMjUxMDE5MTYwMTQyWhcNMjUxMDIwMTYwMTQyWjAzMTEwLwYDVQQD
EygwOWZjZDQ4ZDk1OWQwNTUyZGNkNmQxMGM2MDY5MGQ4MDdhOGQzOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtod660tsAe1hhLMtzkRwOCpWwlUa
HN52vmAU9fqsV0wCoozPig+DZyFQfHb/3BcRHsZfvsh508BlLwAohLROIPCQ07QD
jz5/x+ILhztWaAr76L82Z4C7cISglkfwrqnj9gF6+Uuwwi0VEBZqHTK8y4Qtd4+u
FuOHEEfIX7TdLpjhR1FT2x0FCmuV0NozeD/EhdMolX61BxeUEFCBHMJmQbbjz05M
VrrpNl/JH/0guxUb5AyRdW2ESZoy98NoIxJTXQnIhYUgkTpudFVfRM71YXGOnDQe
Op4l2Emb5F2GpdLYGoRt/Hl/SEveXpaj+r5/IKt9f0czoi8jtEzY9jhPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn81I2VnQVS3NbRDGBpDYB6jTlXMB8GA1UdIwQY
MBaAFGOMxAfO/1exO0lFXzDCC3YceRK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMt
ZDhiYjc5MGMyZDA0LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMtZDhiYjc5MGMyZDA0
LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHYYsgjU
LyXp/6tMaOJJqCRMEf8TiEjvjWpSttK0C2f3ylxvdalZPi9Iuv7EnJhP/YFXLObp
VujjUPx23Z+gNSeIIFwNisMNDIF6CdMEMSEKCAqG/q/rPl3cs8Ru16uz+IbPjW0/
/vmLkUm4BU/ifUVIdJvzuRx8oAgQgC+nyNhnxBGTZlh55ZEZJWkcaRyD8w0s0Je0
0R6TGSV79UdoVuDN5m17hzGFTCVzqbxcVkLpE5YNnIQWYzMdTKW0FxC1k0Qq7dZO
R59zxjhgYWVm9N+KxWqBwjLTDMttziIU//SVDfI8PvyoIIGopoSI6iB/AARtXFXj
ikdgshNrn7ynBg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:33 2025 by rpki-client