Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File:                     Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier:          M77mGf/+cw6bfGA3UOe2e5IOiaVnopROo+JzniDTZUY=
Subject key identifier:   AD:C5:DB:9D:E6:C8:1C:86:7E:E5:01:C9:BE:3E:55:E4:ED:1D:3F:0F
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer:       /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial:       0199FE10222E95728323E6B8E12AEBF051C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number:          05BC
Signing time:             Sun 19 Oct 2025 20:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:34 +0000
Files and hashes:         1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
                          2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: LfUjLkl44Xwp/YU8fCYPGNlSVVakEy2NkvfzZj9vHQU=)
                          3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:22:2e:95:72:83:23:e6:b8:e1:2a:eb:f0:51:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
        Validity
            Not Before: Oct 19 20:01:34 2025 GMT
            Not After : Oct 20 20:01:34 2025 GMT
        Subject: CN=adc5db9de6c81c867ee501c9be3e55e4ed1d3f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:07:53:ac:0a:5c:c4:98:ba:36:9a:5f:8e:
                    1c:04:37:78:f2:17:78:37:1b:e5:e4:a7:f7:ac:eb:
                    3f:62:de:eb:58:9b:89:d1:d8:0c:e6:5e:6f:ad:af:
                    66:a7:83:44:1f:65:f4:2e:d9:86:52:d4:4a:f2:8c:
                    53:ba:3a:20:43:b8:f9:6c:c5:a6:81:f7:fe:a4:26:
                    c1:38:04:6d:40:1c:aa:be:13:71:a2:0e:44:ad:68:
                    51:e4:59:19:9f:fc:11:51:f8:19:0d:ba:bc:6f:d5:
                    49:64:25:94:65:d0:d6:5b:ab:57:f9:99:cc:91:7f:
                    f5:98:e8:c6:77:f0:fb:de:f5:c5:27:27:ec:2c:b6:
                    77:ab:11:fa:9a:40:de:cb:6f:ca:da:ab:b0:1f:10:
                    b6:36:67:5e:ee:60:69:35:3b:59:d1:8f:37:e8:cc:
                    df:7a:6b:2d:ee:47:6f:19:a0:4d:68:fa:17:0f:e4:
                    7e:39:9d:43:16:a5:31:76:db:64:b1:c6:0f:d7:d4:
                    27:6f:27:c2:cf:65:a3:8a:4f:8d:20:6d:8d:69:d9:
                    07:75:f1:bf:1d:ed:53:41:27:f0:f6:fd:9f:26:9c:
                    05:3f:b3:c0:5f:5c:9a:41:ab:e0:57:9f:ca:9e:e9:
                    9f:85:5a:22:4f:00:f8:63:11:22:00:dd:64:e6:32:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:DB:9D:E6:C8:1C:86:7E:E5:01:C9:BE:3E:55:E4:ED:1D:3F:0F
            X509v3 Authority Key Identifier:
                keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:b8:c2:2f:7d:9d:00:03:4e:98:b8:5e:b2:3a:38:04:7e:
         1e:73:e1:ba:88:6a:45:30:3a:bc:41:25:94:5c:1c:ce:b2:28:
         31:28:4d:f9:49:3b:f6:01:ec:c7:59:a0:c1:92:72:7f:7f:d5:
         91:b7:fd:f3:40:cc:8a:6b:7a:26:e0:1f:3d:e4:44:c0:fd:5a:
         c4:e0:cc:bd:d5:d6:9d:87:07:3c:96:1c:12:cd:f4:d1:50:a5:
         b9:48:3d:78:27:2b:82:2b:ea:e7:f8:40:5d:76:03:01:79:4e:
         89:3e:f3:54:1b:cd:86:07:e5:75:54:2a:ba:1b:4a:75:90:e1:
         0e:07:cd:9a:52:0a:3e:2d:1c:46:ab:5f:1f:82:2a:6c:85:de:
         df:e6:39:b7:b0:6a:94:fd:d3:cc:1b:73:b9:2a:82:c4:20:c7:
         05:99:4e:3e:dc:f2:62:8a:7c:c8:2b:28:37:4e:5a:67:57:70:
         e5:fe:f2:ce:fc:50:aa:2b:0c:1e:70:9c:f7:67:de:31:32:55:
         fe:0d:4c:ad:0b:cc:70:77:7d:cd:a0:78:df:56:38:df:18:5a:
         05:d8:90:10:ff:2b:7c:15:93:2b:39:31:4a:4c:64:39:a0:af:
         b0:35:32:e6:91:7e:7b:ac:8e:f5:e8:54:52:98:3c:04:0f:75:
         c3:db:29:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ECIulXKDI+a44Srr8FHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjUxMDE5MjAwMTM0WhcNMjUxMDIwMjAwMTM0WjAzMTEwLwYDVQQD
EyhhZGM1ZGI5ZGU2YzgxYzg2N2VlNTAxYzliZTNlNTVlNGVkMWQzZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3QHU6wKXMSYujaaX44cBDd48hd4
Nxvl5Kf3rOs/Yt7rWJuJ0dgM5l5vra9mp4NEH2X0LtmGUtRK8oxTujogQ7j5bMWm
gff+pCbBOARtQByqvhNxog5ErWhR5FkZn/wRUfgZDbq8b9VJZCWUZdDWW6tX+ZnM
kX/1mOjGd/D73vXFJyfsLLZ3qxH6mkDey2/K2quwHxC2Nmde7mBpNTtZ0Y836Mzf
emst7kdvGaBNaPoXD+R+OZ1DFqUxdttkscYP19QnbyfCz2Wjik+NIG2NadkHdfG/
He1TQSfw9v2fJpwFP7PAX1yaQavgV5/KnumfhVoiTwD4YxEiAN1k5jK1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3F253myByGfuUByb4+VeTtHT8PMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpS4wi99
nQADTpi4XrI6OAR+HnPhuohqRTA6vEEllFwczrIoMShN+Uk79gHsx1mgwZJyf3/V
kbf980DMimt6JuAfPeREwP1axODMvdXWnYcHPJYcEs300VCluUg9eCcrgivq5/hA
XXYDAXlOiT7zVBvNhgfldVQquhtKdZDhDgfNmlIKPi0cRqtfH4IqbIXe3+Y5t7Bq
lP3TzBtzuSqCxCDHBZlOPtzyYop8yCsoN05aZ1dw5f7yzvxQqisMHnCc92feMTJV
/g1MrQvMcHd9zaB431Y43xhaBdiQEP8rfBWTKzkxSkxkOaCvsDUy5pF+e6yO9ehU
Upg8BA91w9spsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:44 2025 by rpki-client