Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File:                     ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier:          XNh9lCbTUP8tqq/OTebOaow+zQxxjo5ccwmcAipl2wU=
Subject key identifier:   71:51:36:04:FC:C9:F9:47:D2:11:4F:52:80:45:67:5D:39:2E:EA:1C
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer:       /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial:       0199FDD8B088DA7E772CEBB81963F3FCE088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 19:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:00 +0000
Files and hashes:         1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
                          2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: cOegJDyr9wTD4J4Yo/BX9tVJF2mTjP63frrfdKJS5GQ=)
                          3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:b0:88:da:7e:77:2c:eb:b8:19:63:f3:fc:e0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
        Validity
            Not Before: Oct 19 19:01:00 2025 GMT
            Not After : Oct 20 19:01:00 2025 GMT
        Subject: CN=71513604fcc9f947d2114f528045675d392eea1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:92:0f:2d:df:c2:5c:0d:4f:c3:3b:60:6a:
                    cc:90:28:53:15:57:56:c5:54:f7:1f:5a:e9:43:e5:
                    8a:d3:b2:95:b3:91:06:19:50:46:86:d1:a5:66:2f:
                    db:77:b1:8c:3a:d7:0c:fe:5e:b7:6c:be:f5:cf:86:
                    8e:3a:17:35:c1:45:74:6a:37:13:5e:cc:ef:81:8e:
                    3d:0b:99:df:54:2a:ed:50:86:f5:56:46:91:d4:d6:
                    c6:63:5d:a5:39:f3:bc:33:bd:6d:4c:86:47:c4:7d:
                    2b:db:81:64:04:31:7e:e0:5d:69:24:8f:94:da:cb:
                    3a:d2:81:23:61:57:91:1f:9d:9d:0d:da:8f:ca:e1:
                    2d:8b:70:4f:c3:9e:39:b8:c9:be:7f:37:ac:b6:de:
                    1a:48:16:2e:ec:24:a7:87:80:44:c0:69:b3:08:51:
                    62:6b:87:e2:e6:e5:58:f7:4b:df:0a:d4:bf:6d:28:
                    2a:3b:09:ee:a8:ab:d8:49:88:69:fc:d0:77:78:41:
                    91:10:02:89:3a:f8:bb:20:e3:13:2c:e3:c4:b4:39:
                    db:fc:e3:47:fd:59:e1:ba:e6:7d:50:48:54:a8:ef:
                    b0:7a:ac:c5:b6:53:ce:19:ee:0f:21:94:28:b3:ed:
                    c4:19:7c:b0:b1:3f:cf:91:80:ce:09:cd:2b:db:80:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:36:04:FC:C9:F9:47:D2:11:4F:52:80:45:67:5D:39:2E:EA:1C
            X509v3 Authority Key Identifier:
                keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:ed:94:6c:8c:81:c2:c5:94:0f:26:68:81:8f:e8:86:1a:
         c8:87:5f:97:f4:d9:7d:10:f8:b0:9e:7f:16:84:6a:27:2a:68:
         eb:5b:1c:fd:ab:54:82:e0:e8:37:0f:f8:da:08:be:41:77:68:
         5e:ab:0e:00:7c:8b:54:b8:29:19:82:5c:9b:ae:01:b2:8e:f7:
         1e:93:39:98:d4:b4:6f:c7:a8:69:78:9f:9f:0b:14:8b:70:1a:
         29:a3:23:2f:69:7e:87:1f:32:c4:11:22:f5:e2:f9:3b:0f:72:
         a4:7d:bd:73:7a:b5:93:1d:f4:42:41:0a:34:ca:e5:fa:c6:cf:
         c7:83:65:7a:9f:36:8c:29:d5:f3:56:d9:f9:74:91:73:6e:0c:
         08:a1:1a:4a:a6:29:32:72:09:9a:b7:52:cb:e1:62:8a:a1:93:
         96:1f:1c:6c:b2:b6:37:09:93:ee:93:ec:b8:7d:42:89:26:11:
         f4:a6:86:c6:e5:4c:2b:89:54:37:8c:f4:82:d2:e1:47:58:8f:
         41:84:33:93:af:f5:7f:7b:d0:55:2b:f2:9f:d3:f9:15:9b:ea:
         01:17:c7:ee:23:f4:3a:39:39:cb:d3:94:04:12:e6:1c:5e:bd:
         28:3e:23:fe:e8:eb:2a:53:07:34:ca:e9:8e:36:3a:c4:9b:c0:
         f1:bf:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:52 2025 by rpki-client