Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          nNg8T1S41pam2cwIPoVS+B7agOVh9HOr4aE4HHAoycU=
Subject key identifier:   34:DB:32:A6:7C:69:E8:D3:55:2A:5A:0B:2D:F5:C5:64:1D:3C:96:1D
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       0199FDD91F65783A0AA5D8E810F4EDD99CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          0255
Signing time:             Sun 19 Oct 2025 19:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:28 +0000
Files and hashes:         1: Ef8_zrRgEL0CLqM-IuSA3dX-ctc.roa (hash: xDWi6ors7AjB8a/zdFVsFoCBfh3PoH6v4N9RTJZoFCo=)
                          2: wvSIKLseDCti9NDqb3hBoHBh3tM.roa (hash: JuhvfPP6PYd4BnfxxERmMrnoz56rmfAtM3i5xnGfuRs=)
                          3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: Nj8XTCup1KE6DW1hvqlB8c1zwyIqb7v7F7tuQwxtoRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:1f:65:78:3a:0a:a5:d8:e8:10:f4:ed:d9:9c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Oct 19 19:01:28 2025 GMT
            Not After : Oct 20 19:01:28 2025 GMT
        Subject: CN=34db32a67c69e8d3552a5a0b2df5c5641d3c961d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:28:bb:c5:78:a1:3a:8a:c2:c5:1e:9d:21:
                    aa:3f:7e:e7:c3:cc:12:49:16:9d:0a:02:7c:00:f2:
                    db:c9:5e:fc:83:14:ca:98:84:cd:29:fc:53:7c:c4:
                    78:cf:9e:3e:b9:78:97:88:c3:13:0e:db:22:d7:6d:
                    1b:90:f2:58:7c:48:fa:ea:dd:5e:be:df:e1:2d:8b:
                    c0:f1:b8:c3:b1:60:9e:b0:40:d3:40:81:34:5e:ea:
                    cb:ad:f0:ff:da:6e:d0:cf:d1:d8:bc:44:53:60:f9:
                    bb:12:b3:db:a0:ed:98:68:63:7b:66:07:84:ee:cf:
                    52:38:6f:ff:55:4f:58:82:5b:75:fb:a2:08:27:1f:
                    02:b3:91:ab:59:c0:20:4f:39:e8:e0:43:9c:b4:5b:
                    ca:a3:d9:e3:87:b5:7c:b6:d8:07:2e:d9:5a:ff:50:
                    04:41:3d:34:73:9a:02:0e:09:ab:e7:7f:3f:3c:e9:
                    72:e9:96:e7:c7:e6:ad:4c:da:75:b0:24:9d:75:41:
                    0a:96:77:e6:81:eb:52:ef:da:66:53:8d:43:2f:36:
                    0d:98:43:45:13:7d:3c:6c:b1:18:ff:5b:2d:12:66:
                    a8:9d:6f:6c:b2:4a:c8:20:9f:bc:0c:45:46:dc:26:
                    47:68:28:67:c8:58:28:13:25:8d:0f:4a:e5:37:15:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DB:32:A6:7C:69:E8:D3:55:2A:5A:0B:2D:F5:C5:64:1D:3C:96:1D
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:fe:63:b9:3b:37:ec:6e:81:5e:3f:11:2b:4f:57:a8:b5:b5:
         8b:22:a9:d2:fc:f3:b8:e0:f7:8c:ab:ad:60:b9:eb:89:7a:98:
         46:b8:b0:dc:52:f5:7a:0b:c1:a3:99:18:98:4a:17:62:1d:c2:
         05:3f:a7:ed:ea:cd:91:ad:f9:75:d5:ab:58:1f:73:0e:ac:1d:
         2a:c2:d5:59:4e:21:01:52:d7:5f:f3:c1:04:65:dc:cf:89:08:
         fc:2b:b7:f5:e0:7a:93:7b:87:d2:64:1a:08:42:45:67:75:d4:
         38:bb:ec:82:65:b2:08:4a:e2:50:38:af:fa:d1:43:e3:33:d0:
         da:d2:17:06:f8:07:60:28:ef:9c:dd:03:22:2d:29:9e:f8:83:
         5d:02:c2:9f:83:b1:b6:bf:61:31:f8:7f:7b:0b:23:cc:bf:78:
         03:87:b4:6e:ce:41:55:c4:cf:06:15:54:3a:4b:74:b8:f9:ce:
         ae:c2:7e:aa:fe:70:1d:61:09:df:29:fc:bb:4b:0c:43:66:22:
         b7:b1:9b:c2:6a:2b:f5:06:4b:4a:92:b2:b3:50:ed:1b:b2:db:
         6d:f5:cf:bf:2d:5e:bb:32:9b:25:2b:ea:5e:58:a8:a6:9d:32:
         12:d9:c6:18:de:f6:ca:94:31:f3:fe:ac:e3:1e:e4:98:35:b1:
         19:8b:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:01 2025 by rpki-client