Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File:                     YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier:          75pBPPdWjbIy+yVTzRYYAz3/2gAxl43KttghgmuL6pE=
Subject key identifier:   59:C5:00:80:97:31:03:42:6B:DE:89:9E:EE:1F:37:DF:CF:E1:0A:40
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer:       /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial:       0199FAD7A281D2300DF0B0832EC797AD7ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number:          0EDD
Signing time:             Sun 19 Oct 2025 05:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 05:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 05:00:59 +0000
Files and hashes:         1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
                          2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: xEAeT9wIwRyuIq7QzufGfEiXcqXwwMhifWfM8Mg+6Zo=)
                          3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:a2:81:d2:30:0d:f0:b0:83:2e:c7:97:ad:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
        Validity
            Not Before: Oct 19 05:00:59 2025 GMT
            Not After : Oct 20 05:00:59 2025 GMT
        Subject: CN=59c50080973103426bde899eee1f37dfcfe10a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:ad:2b:62:11:ab:bd:39:e0:33:70:e9:7b:
                    97:cd:28:64:6e:2d:25:d0:66:b4:97:48:37:0b:08:
                    77:2a:a0:2a:8b:d8:94:fb:ff:5c:bb:88:8c:0d:e2:
                    13:b9:67:cf:98:cd:e6:97:97:96:b9:01:81:a7:31:
                    9b:6e:60:fe:12:89:f9:47:95:03:e4:91:56:1b:9b:
                    23:ca:64:86:77:01:35:04:68:aa:61:a6:89:39:f1:
                    47:73:41:00:c0:18:3d:08:64:70:aa:d5:82:50:4b:
                    86:70:46:17:21:a8:f4:40:db:69:a2:b3:c9:be:85:
                    f0:01:62:4a:aa:aa:e2:25:1d:4f:cd:05:54:17:6c:
                    df:b2:21:b3:23:1e:8d:76:3f:6d:e4:8c:2b:15:bb:
                    db:58:b3:75:20:3d:8e:67:c3:c2:73:bc:4a:ae:b8:
                    87:a8:ea:b7:45:46:0e:0b:d6:a8:ff:a3:ef:6d:72:
                    62:5d:c3:75:cc:75:ba:e8:65:13:a6:c4:46:f1:71:
                    9e:e5:9b:1d:62:c1:0a:09:20:28:bd:6f:3c:a1:ed:
                    75:ac:f5:2a:b9:47:3e:ff:e8:34:58:5b:07:31:2f:
                    c5:7a:8a:18:66:6c:ba:f7:dc:60:7f:8e:41:ff:5d:
                    f5:b6:dd:13:49:e2:61:8e:00:07:8f:57:54:bc:b4:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C5:00:80:97:31:03:42:6B:DE:89:9E:EE:1F:37:DF:CF:E1:0A:40
            X509v3 Authority Key Identifier:
                keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:9b:98:05:11:45:ce:86:aa:79:ad:ab:61:5b:d9:fa:43:
         ba:b5:15:9c:2a:8d:bf:db:88:f2:b5:d3:f5:44:8c:75:de:f1:
         24:ea:28:9a:43:d3:f8:58:c3:73:ab:3e:ed:b6:72:68:cc:2f:
         74:f4:dc:e6:60:b4:f2:25:b4:e4:55:b1:eb:58:69:d0:56:2c:
         b6:2c:8f:d3:83:76:4a:74:08:c9:ba:6b:39:ab:69:69:65:28:
         7f:5b:74:b8:eb:77:37:89:9a:56:a8:dc:4f:2f:e9:18:59:74:
         a1:6e:0c:b6:eb:c7:82:18:9c:21:1f:07:97:51:6b:fe:a2:94:
         54:3f:bc:3a:6f:35:68:c3:4b:be:fe:0b:38:2f:25:08:b0:01:
         9c:a5:30:e3:e8:b9:81:b2:20:31:a4:62:34:7c:cc:90:08:b6:
         6d:ea:59:5b:b9:09:f3:6c:27:6e:47:8e:a1:25:ab:2c:61:aa:
         ce:81:8c:3e:94:db:2c:a0:a8:33:f7:32:a2:f2:65:42:52:1c:
         65:74:6c:13:b6:2c:f7:3d:61:14:6b:aa:43:e7:3d:56:59:2b:
         e2:81:27:0d:21:57:b0:09:2e:00:39:13:3c:79:fe:e3:75:fc:
         4a:66:f8:e0:1e:93:d5:86:61:36:d6:68:c0:c3:83:b3:99:d7:
         42:3f:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:46 2025 by rpki-client