Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File:                     ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier:          JDjxxou80Z316Au8ibjQZgysuhudEQdKw6rJuaXWntQ=
Subject key identifier:   BD:0A:22:01:5F:0A:C7:25:2C:37:8D:28:AD:AF:30:ED:63:C5:A5:C9
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer:       /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial:       0199FD34511032F30804AC1F2B1601B1D765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 16:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:28 +0000
Files and hashes:         1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
                          2: hZOD7Y_mupZOHap9fLf6vk7q8ec.roa (hash: S7Xh16GME3MVdYv3MI3CqwSYnk2TD7axisWzIQZKMnA=)
                          3: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (hash: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=)
                          4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: fVloY1aD1JFRhK0QxfrKrFyjjSPSfHM/d8gu00GfmQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:51:10:32:f3:08:04:ac:1f:2b:16:01:b1:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
        Validity
            Not Before: Oct 19 16:01:28 2025 GMT
            Not After : Oct 20 16:01:28 2025 GMT
        Subject: CN=bd0a22015f0ac7252c378d28adaf30ed63c5a5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:a6:c5:47:ca:e4:79:e5:b3:53:89:26:47:
                    78:56:80:99:31:a0:01:e0:f3:cd:37:6e:c3:7d:9c:
                    80:73:00:1d:d2:02:a7:20:12:cc:dd:74:7a:55:5a:
                    5b:ff:09:47:3b:68:07:7b:35:a8:8e:ee:df:c0:05:
                    24:60:94:1e:f7:8e:0b:38:41:dc:21:ec:09:ff:c2:
                    b8:00:95:61:f8:13:59:fa:2d:41:02:91:d7:6f:f0:
                    74:56:5e:fb:20:f3:d1:b9:20:f5:23:94:1f:62:8e:
                    c5:c5:ad:8d:b9:c2:d2:3b:65:85:41:7b:e7:95:31:
                    d5:b7:da:e3:93:3a:b3:db:03:ec:d2:ee:dc:28:3c:
                    7c:58:ed:70:fa:88:5b:f2:43:d6:42:5f:43:2b:ee:
                    3d:07:2a:23:b3:7e:48:a6:da:0f:5c:0b:c5:e6:c7:
                    68:4d:be:50:a5:a0:40:f5:8f:2e:17:30:05:eb:17:
                    52:bc:3a:69:80:28:a6:95:71:91:b6:87:17:5d:df:
                    2f:80:40:06:ec:a3:12:b4:d9:08:80:8d:dd:a6:7c:
                    03:19:07:64:52:f2:00:0b:83:7c:02:d7:7a:eb:97:
                    8d:db:f3:e1:a1:77:59:e0:3a:f8:2e:07:22:f0:1c:
                    39:60:b1:65:4f:62:f7:08:32:0b:8d:0b:f9:89:30:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0A:22:01:5F:0A:C7:25:2C:37:8D:28:AD:AF:30:ED:63:C5:A5:C9
            X509v3 Authority Key Identifier:
                keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:12:8e:1d:72:64:6c:43:b2:71:e8:c4:57:d6:ff:5f:80:cd:
         79:97:0c:75:81:ec:33:fe:74:87:06:db:66:0b:20:00:ad:f4:
         47:90:91:2c:b6:c8:09:6a:d8:39:c6:ab:68:4a:d8:8a:2a:7b:
         57:33:c7:98:1c:c9:07:9a:af:12:b2:70:ec:6e:76:c0:dd:39:
         3c:b8:81:21:ea:4a:10:67:27:0d:6a:d0:4f:42:e8:39:10:95:
         d9:e4:b9:a8:df:b6:d6:25:4d:6a:f4:f6:c9:fb:45:a7:5d:20:
         af:70:6a:b6:80:58:24:0a:42:81:4a:cd:d8:b8:8d:5b:93:e8:
         ec:55:67:8a:fe:95:f5:6a:f6:77:fd:a5:73:1d:42:c6:86:18:
         2e:c7:db:42:e6:cd:ac:e8:18:7e:61:69:05:56:4b:36:1a:20:
         2d:a6:c9:e1:26:93:fc:f6:e2:ab:e1:b7:49:ed:83:3a:6a:63:
         67:09:81:50:d9:86:95:4a:15:7f:59:ff:e6:0e:fd:23:d6:67:
         b0:42:10:c2:37:e3:e0:b2:02:bd:a9:ea:15:73:78:b0:29:d7:
         0c:a8:1b:7f:d5:3d:38:93:c8:c4:2d:93:2e:7a:c8:19:9b:d6:
         ab:22:ae:1b:dd:78:99:39:f5:64:5f:35:6e:ff:b6:01:73:09:
         bd:e6:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:58 2025 by rpki-client