Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File:                     yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier:          bIugr/7YhLWHHZfvmoZbkBGUGEVJLolKprwMtXW7jl8=
Subject key identifier:   E7:B6:02:99:77:CF:B1:EB:F1:87:15:05:7E:B4:05:BD:89:A5:9C:87
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer:       /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial:       0199FBEBC5BB75FD05D160CB179669D67300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number:          0B05
Signing time:             Sun 19 Oct 2025 10:02:36 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:36 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:36 +0000
Files and hashes:         1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
                          2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: Q70LyKxgzzQZQE9bJZEnLyGJm/8W8qCgXfzpuAN84d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c5:bb:75:fd:05:d1:60:cb:17:96:69:d6:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
        Validity
            Not Before: Oct 19 10:02:36 2025 GMT
            Not After : Oct 20 10:02:36 2025 GMT
        Subject: CN=e7b6029977cfb1ebf18715057eb405bd89a59c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7d:ed:89:32:f2:9d:be:bf:7b:8d:db:3a:27:
                    8a:5b:2a:06:c8:02:86:76:ba:a3:45:33:54:78:fb:
                    51:7e:32:d5:8a:93:90:a9:71:da:6b:9f:33:fc:56:
                    0f:ca:80:28:81:18:d7:7c:f2:85:eb:ab:e7:d9:81:
                    b5:ad:d3:74:69:08:57:b3:7a:f7:e0:3d:d6:c2:44:
                    0f:d5:1e:b0:55:ba:04:85:20:16:d3:f1:0c:d7:ee:
                    a9:f0:8a:a1:19:30:81:c6:10:75:51:3e:1c:53:7a:
                    4b:53:63:b0:f7:92:90:70:3e:85:ba:4a:3b:87:a8:
                    7e:84:34:7d:71:9f:22:71:80:02:5a:18:30:51:0a:
                    1a:e7:65:b4:81:5a:96:26:bf:4e:ea:96:08:de:03:
                    0e:63:62:b4:a8:59:98:0a:6c:f9:f9:89:1a:4a:98:
                    be:15:0e:1e:4c:cb:d1:30:cb:f1:bb:d5:22:ee:1c:
                    00:24:2e:f1:2b:5f:76:a6:af:14:21:21:54:e5:f6:
                    2e:1b:10:d4:b6:14:e6:aa:e9:cc:e4:35:ed:03:b3:
                    79:13:73:3b:93:3d:b9:f8:8c:99:c1:c4:02:82:f4:
                    9d:ad:29:2b:11:ce:21:bc:5f:28:6a:c0:64:89:f9:
                    f3:42:d1:b5:df:a5:09:8f:6e:99:f8:d0:c5:46:56:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:02:99:77:CF:B1:EB:F1:87:15:05:7E:B4:05:BD:89:A5:9C:87
            X509v3 Authority Key Identifier:
                keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:02:ac:08:06:09:33:0e:87:92:5b:f6:f5:60:4e:b2:4c:e4:
         bf:4d:bb:cd:34:80:2c:be:76:4c:ef:ed:e9:f2:d0:83:7b:09:
         17:45:f2:04:9b:2e:44:97:a5:95:7e:68:c1:8f:2f:fe:0e:88:
         1a:bb:95:66:96:da:f3:ba:f3:48:03:1d:9e:95:77:b9:93:92:
         e5:83:e9:5b:1f:9c:12:13:12:d4:c2:01:8c:1a:56:36:e4:db:
         ac:46:f1:f4:50:e2:68:1d:9f:93:32:99:4e:0b:57:ea:03:b1:
         e8:af:4d:5e:5e:da:5e:51:ac:9f:43:66:b5:df:af:d9:ed:47:
         a4:25:8f:06:5a:14:43:64:45:cd:b3:e4:30:bf:ad:eb:ec:91:
         29:95:83:c5:a0:2b:f0:72:2f:ec:56:69:2d:b0:d2:6b:2c:2f:
         23:69:d0:11:e0:cc:a6:ee:87:ae:bb:46:31:bc:6e:b6:e4:33:
         4c:8d:e3:58:42:88:c2:78:44:01:51:a9:33:32:3b:74:cc:5a:
         84:4b:ce:63:01:b0:f1:bc:95:eb:8b:44:79:7e:40:62:11:5f:
         e7:7a:40:56:e6:b8:3b:15:52:0a:9a:c7:94:51:44:af:04:38:
         00:27:1c:6f:f3:32:1f:e1:39:02:1d:4b:d4:77:62:b7:63:10:
         d0:b5:01:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768W7df0F0WDLF5Zp1nMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj
M2U2ZDUwHhcNMjUxMDE5MTAwMjM2WhcNMjUxMDIwMTAwMjM2WjAzMTEwLwYDVQQD
EyhlN2I2MDI5OTc3Y2ZiMWViZjE4NzE1MDU3ZWI0MDViZDg5YTU5Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X3tiTLynb6/e43bOieKWyoGyAKG
drqjRTNUePtRfjLVipOQqXHaa58z/FYPyoAogRjXfPKF66vn2YG1rdN0aQhXs3r3
4D3WwkQP1R6wVboEhSAW0/EM1+6p8IqhGTCBxhB1UT4cU3pLU2Ow95KQcD6Fuko7
h6h+hDR9cZ8icYACWhgwUQoa52W0gVqWJr9O6pYI3gMOY2K0qFmYCmz5+YkaSpi+
FQ4eTMvRMMvxu9Ui7hwAJC7xK192pq8UISFU5fYuGxDUthTmqunM5DXtA7N5E3M7
kz25+IyZwcQCgvSdrSkrEc4hvF8oasBkifnzQtG136UJj26Z+NDFRla/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe2Apl3z7Hr8YcVBX60Bb2JpZyHMB8GA1UdIwQY
MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt
ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz
LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgKsCAYJ
Mw6Hklv29WBOskzkv027zTSALL52TO/t6fLQg3sJF0XyBJsuRJellX5owY8v/g6I
GruVZpba87rzSAMdnpV3uZOS5YPpWx+cEhMS1MIBjBpWNuTbrEbx9FDiaB2fkzKZ
TgtX6gOx6K9NXl7aXlGsn0Nmtd+v2e1HpCWPBloUQ2RFzbPkML+t6+yRKZWDxaAr
8HIv7FZpLbDSaywvI2nQEeDMpu6HrrtGMbxutuQzTI3jWEKIwnhEAVGpMzI7dMxa
hEvOYwGw8byV64tEeX5AYhFf53pAVua4OxVSCprHlFFErwQ4ACccb/MyH+E5Ah1L
1Hdit2MQ0LUB9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:50 2025 by rpki-client