Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File:                     YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier:          tyj33Ib6qQd2tGHNUOIvFL3jfFrKZOMbOblynjc2txI=
Subject key identifier:   B1:E3:0F:4E:70:84:F4:DD:67:9A:DA:74:C9:17:B8:B6:F0:C3:27:64
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer:       /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial:       0199FD6AFA4C98E5174B6F394C12DD1C4055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 17:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:10 +0000
Files and hashes:         1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=)
                          2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: Im9VeMykkvOgmSLfRW0NPe2shtT/d78WHryvXH9UH+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:fa:4c:98:e5:17:4b:6f:39:4c:12:dd:1c:40:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
        Validity
            Not Before: Oct 19 17:01:10 2025 GMT
            Not After : Oct 20 17:01:10 2025 GMT
        Subject: CN=b1e30f4e7084f4dd679ada74c917b8b6f0c32764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:11:5d:c5:38:b3:24:2e:03:39:e4:33:ba:
                    78:24:01:2a:33:83:d8:20:90:d6:0f:25:e6:18:db:
                    e9:c0:de:f5:01:f7:8c:d4:e1:5d:e8:2e:bd:fe:7b:
                    2d:f1:42:77:e2:44:7a:92:3c:a6:5e:25:84:8c:47:
                    ca:4d:9c:f1:d2:68:fa:cd:2d:83:8f:82:bd:3f:dd:
                    49:32:01:ec:b9:ba:74:0f:cb:95:1c:ad:5f:f2:db:
                    a0:75:84:60:38:a6:99:03:51:0d:2c:fa:f6:66:86:
                    dd:e4:d9:9f:ea:16:e4:42:93:86:fe:75:45:ec:1a:
                    a5:31:66:ce:16:02:4c:6d:af:21:2a:93:c7:b0:14:
                    15:55:b8:ce:0b:5e:cb:e3:ef:a4:ff:cd:b2:d0:c2:
                    7c:0b:ee:c2:94:e2:52:17:93:e0:66:a4:db:13:5c:
                    61:56:3e:97:d8:0f:c9:4d:ae:c4:a9:62:fd:de:bc:
                    98:b9:f0:af:96:eb:96:08:2f:2f:d7:32:eb:70:15:
                    dd:77:b0:53:99:0d:92:59:07:2a:26:21:c6:85:ef:
                    69:0d:0f:a4:3f:e2:9a:ba:5c:29:ea:2a:e0:b8:52:
                    85:1c:53:af:c6:1a:29:fc:ea:8e:e3:cf:a1:31:6b:
                    ba:c3:48:4b:19:2b:ae:2f:a4:4b:d7:7a:03:54:73:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:0F:4E:70:84:F4:DD:67:9A:DA:74:C9:17:B8:B6:F0:C3:27:64
            X509v3 Authority Key Identifier:
                keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:87:97:48:3c:8a:b1:fc:9e:80:93:be:66:7a:fc:d4:aa:
         9f:a5:44:51:68:c9:89:c6:b7:5a:3f:fd:df:c6:bf:c8:5d:a5:
         ec:36:75:d8:df:3d:d0:20:b2:30:bb:f5:7e:3d:92:89:37:70:
         ce:1e:09:56:28:23:67:dc:e3:c7:10:44:46:7e:39:a0:3d:8b:
         a3:3c:c8:4b:03:98:07:28:b6:d9:15:7a:39:7a:0f:a0:b8:75:
         e8:c5:89:83:62:53:d7:75:75:6d:ae:e5:32:40:b8:1a:05:4a:
         98:8f:b2:8e:82:bf:fc:44:ec:b0:87:29:34:c2:8a:ac:61:2b:
         cb:d9:8e:6a:da:2b:4e:07:d3:24:96:ba:30:a9:7d:c3:a8:55:
         fc:c3:75:c0:b0:a5:af:e1:d7:c9:9f:0d:d1:3b:77:1b:18:e3:
         f0:40:84:4c:b4:8d:55:67:f3:f6:81:07:bf:1b:38:f3:ae:7e:
         c3:6c:dc:58:dd:04:b2:25:4f:8d:1f:4a:e4:01:9b:d4:c1:20:
         68:ec:82:c3:8b:cd:88:1a:85:1b:3d:86:47:c6:f4:6e:f8:88:
         56:05:04:94:54:ec:93:44:ae:63:a5:ca:15:a0:4f:88:fe:13:
         43:8d:46:12:04:76:ac:b8:cd:4c:33:d6:42:68:f2:e1:79:01:
         8a:04:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:02 2025 by rpki-client