Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          BMV1uXglXHpCgX4aOIL0vyVKpSryTBAU0E17YGrlz/k=
Subject key identifier:   93:D3:36:74:A7:F6:39:03:38:82:43:AE:E3:76:D7:5F:9D:89:7C:54
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       0199FEB508FFD314BFF91D8DCADD93BDE0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0C9D
Signing time:             Sun 19 Oct 2025 23:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:41 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: XpRI5LPLcrJeNpThcAmoa4ydWPY3r0pTWZVl2Q4kxSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:08:ff:d3:14:bf:f9:1d:8d:ca:dd:93:bd:e0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Oct 19 23:01:41 2025 GMT
            Not After : Oct 20 23:01:41 2025 GMT
        Subject: CN=93d33674a7f63903388243aee376d75f9d897c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:9f:65:92:66:4a:47:12:79:18:43:f6:ee:
                    54:dc:96:b1:78:67:4d:18:e6:46:dd:8b:d8:bb:dd:
                    4b:95:17:d3:a5:80:2b:1e:b9:2c:6b:c4:45:c8:58:
                    cc:49:34:b3:fc:d2:24:f4:fc:26:6d:5a:02:8d:64:
                    ca:22:01:00:2b:d0:5a:8f:b5:3c:14:a1:fb:a1:f0:
                    e7:ca:32:ee:c3:7f:76:91:3d:e8:09:db:45:0c:54:
                    f5:25:c7:bb:e1:ea:37:a7:7d:23:90:ac:c0:17:31:
                    2f:57:c6:da:93:88:56:1d:0f:99:a1:92:f7:5e:9d:
                    e2:83:d6:4f:82:e9:ec:94:bb:d3:83:ab:7c:1e:e7:
                    9d:97:c3:8e:b5:ce:e4:68:05:f9:12:90:ff:48:bc:
                    e1:1c:08:aa:01:70:2a:a3:94:b6:42:31:6d:8f:59:
                    9a:4c:b4:3a:60:05:d9:fa:79:19:11:3d:15:00:ce:
                    9d:b1:e7:7c:c3:b3:71:99:d1:ca:eb:41:31:55:84:
                    71:29:4e:4e:ef:5a:22:44:f3:a8:4d:0b:82:c9:0a:
                    10:9c:51:8e:7e:02:de:e6:0f:da:30:14:49:70:78:
                    38:cc:66:4a:00:40:b2:a7:16:44:38:94:68:6e:11:
                    9c:11:24:9d:1f:a6:db:ca:6d:81:01:7b:11:62:72:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D3:36:74:A7:F6:39:03:38:82:43:AE:E3:76:D7:5F:9D:89:7C:54
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:44:76:96:9a:18:6f:1c:b4:0f:03:c4:8f:67:c2:c0:09:
         82:e9:13:b3:b8:c0:5a:0b:0f:5c:09:54:8c:b5:fc:8d:3a:e4:
         7c:b1:24:7e:1c:93:4a:ad:25:5c:e0:93:57:f4:32:38:2e:14:
         cb:4c:57:0f:f0:c7:30:b4:2f:3d:0a:6b:bc:af:35:d6:b5:95:
         3b:a7:f9:03:96:65:95:9b:c4:c1:04:88:b4:90:02:40:8c:f9:
         f0:5e:03:c4:e7:c7:44:cd:ff:08:fe:bf:60:59:4e:96:5a:77:
         2b:34:e6:38:db:a3:34:cc:67:92:58:82:79:db:1c:48:7d:05:
         32:69:b2:c1:86:00:9f:51:b7:be:0e:f4:c6:b4:35:7b:8f:84:
         90:a3:5c:87:40:77:dd:11:20:8d:e5:7f:59:cf:60:13:4c:11:
         84:46:ec:b7:1f:6b:5a:75:01:e5:ff:7e:d5:f2:e9:e5:c0:34:
         fd:19:f1:9b:54:78:2a:89:e6:55:1a:86:c0:ad:42:c0:56:e5:
         7d:18:9f:55:f0:fc:81:97:a9:95:91:62:db:9d:89:37:47:cf:
         7b:64:a9:bf:e5:e3:a8:73:29:a2:f3:a0:6d:28:8d:58:0b:89:
         a2:3c:a6:1a:66:9e:d0:d7:aa:e3:76:6e:de:5d:66:23:c7:05:
         34:e8:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:42 2025 by rpki-client