Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File:                     YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier:          sPpP9YtzrsMYX5PwrKe5+eyqwVglCmy2vVTB/lJMLok=
Subject key identifier:   1D:10:59:4B:47:23:60:9B:D8:2A:45:3F:3A:FD:BA:09:A0:77:58:DC
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer:       /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial:       0199FC21753CB17852398D5151D7B1BF01BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 11:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:15 +0000
Files and hashes:         1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
                          2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: GFCEmNO5OndBl9tnWcD+koip1u8kvHYehcFZXy4SCj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:75:3c:b1:78:52:39:8d:51:51:d7:b1:bf:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
        Validity
            Not Before: Oct 19 11:01:15 2025 GMT
            Not After : Oct 20 11:01:15 2025 GMT
        Subject: CN=1d10594b4723609bd82a453f3afdba09a07758dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:1a:af:93:ae:1f:04:a9:5a:7f:3a:6d:88:
                    03:95:74:86:44:d4:96:24:b5:24:3e:28:1a:8a:05:
                    04:bc:e0:f5:e9:79:70:ac:36:23:cb:49:81:67:74:
                    7a:ff:ed:a1:7e:dc:98:2d:37:78:b1:07:9c:f5:4f:
                    fc:dc:11:e8:ad:5a:80:2d:d2:4f:97:47:4e:2b:45:
                    93:aa:f5:87:04:07:7e:27:08:c4:1e:94:79:e9:70:
                    c7:d3:86:89:fd:bd:49:4e:14:3d:f8:a6:37:de:53:
                    0b:b1:7e:68:0c:9a:93:55:6d:f7:88:05:b0:97:b9:
                    81:b6:ad:87:0c:fc:3d:f0:32:7f:15:16:b8:10:38:
                    ed:b3:5c:5a:93:9f:b0:a8:4d:d9:30:12:89:8c:1c:
                    e5:c3:0a:df:f3:8d:c8:fc:85:00:e3:b8:e8:49:9c:
                    50:30:09:a4:c7:a7:32:f3:9a:d1:c4:f6:11:86:ec:
                    9e:bf:fd:4f:74:43:c2:cb:93:f9:8b:70:5c:ca:47:
                    71:ea:2d:92:98:f0:01:f9:94:93:46:86:ab:9f:75:
                    08:d2:07:52:4a:e8:57:42:e0:25:30:17:3d:5d:24:
                    78:8e:31:66:d0:bc:8c:73:28:29:51:87:17:80:0b:
                    43:6e:a2:6c:c4:6f:1f:ce:ae:8c:11:6b:46:ce:39:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:59:4B:47:23:60:9B:D8:2A:45:3F:3A:FD:BA:09:A0:77:58:DC
            X509v3 Authority Key Identifier:
                keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:d8:52:8c:b8:5d:11:33:f4:15:1f:38:34:43:3d:0b:60:
         22:4b:62:46:ed:33:14:b1:9b:da:e0:62:f1:be:e1:a6:8d:54:
         5d:9c:87:74:a6:6d:5b:75:9c:32:c0:58:e7:95:b8:5a:69:4c:
         62:a7:80:fb:5d:27:2d:19:09:06:02:27:a3:b6:8e:46:5e:f9:
         6c:5f:98:22:df:fd:1e:b3:0d:cb:15:58:1f:98:7b:d3:7f:cd:
         b3:03:c7:8f:79:57:d2:61:e7:1c:17:5e:1b:60:b3:67:e8:95:
         11:07:fc:01:70:ab:0e:89:7d:be:47:7e:4b:b3:37:3b:37:f6:
         51:dc:26:4c:36:4c:44:1d:da:74:de:24:ca:2a:d4:00:91:5a:
         0b:23:05:e7:5a:1b:44:95:0b:a8:ce:50:85:18:34:9c:95:6b:
         af:c5:59:41:e3:c6:d0:8c:1e:89:8a:93:3f:cb:d8:19:7a:ad:
         62:0f:c4:eb:29:a3:cf:40:9d:0d:2f:65:e1:29:7b:64:62:9b:
         92:5b:2b:6d:8c:e7:a4:21:7c:37:7a:16:ea:c6:b6:b7:e1:bf:
         3f:26:26:72:9f:50:a2:1b:f2:c8:bf:ed:28:1a:53:74:b3:e3:
         7c:36:7c:0c:99:4a:2b:77:07:9a:0f:2e:be:05:88:79:3d:34:
         b8:b9:c5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXU8sXhSOY1RUdexvwG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjRiMTQ3YWIwZWZlYmYzZTQ2ZTZkZWE5ODVkNzUxODc3
Y2JiNGUwHhcNMjUxMDE5MTEwMTE1WhcNMjUxMDIwMTEwMTE1WjAzMTEwLwYDVQQD
EygxZDEwNTk0YjQ3MjM2MDliZDgyYTQ1M2YzYWZkYmEwOWEwNzc1OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaEar5OuHwSpWn86bYgDlXSGRNSW
JLUkPigaigUEvOD16XlwrDYjy0mBZ3R6/+2hftyYLTd4sQec9U/83BHorVqALdJP
l0dOK0WTqvWHBAd+JwjEHpR56XDH04aJ/b1JThQ9+KY33lMLsX5oDJqTVW33iAWw
l7mBtq2HDPw98DJ/FRa4EDjts1xak5+wqE3ZMBKJjBzlwwrf843I/IUA47joSZxQ
MAmkx6cy85rRxPYRhuyev/1PdEPCy5P5i3Bcykdx6i2SmPAB+ZSTRoarn3UI0gdS
SuhXQuAlMBc9XSR4jjFm0LyMcygpUYcXgAtDbqJsxG8fzq6MEWtGzjmw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0QWUtHI2Cb2CpFPzr9ugmgd1jcMB8GA1UdIwQY
MBaAFGL0sUerDv6/Pkbm3qmF11GHfLtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2Mjgt
ZGFiM2E5ZjAzMGRjLzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2MjgtZGFiM2E5ZjAzMGRj
LzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3/YUoy4
XREz9BUfODRDPQtgIktiRu0zFLGb2uBi8b7hpo1UXZyHdKZtW3WcMsBY55W4WmlM
YqeA+10nLRkJBgIno7aORl75bF+YIt/9HrMNyxVYH5h703/NswPHj3lX0mHnHBde
G2CzZ+iVEQf8AXCrDol9vkd+S7M3Ozf2UdwmTDZMRB3adN4kyirUAJFaCyMF51ob
RJULqM5QhRg0nJVrr8VZQePG0IweiYqTP8vYGXqtYg/E6ymjz0CdDS9l4Sl7ZGKb
klsrbYznpCF8N3oW6sa2t+G/PyYmcp9QohvyyL/tKBpTdLPjfDZ8DJlKK3cHmg8u
vgWIeT00uLnFig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:26 2025 by rpki-client