Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          gBhoZ0YAQnrPolJ69Uea3jWdtorsKdcdxfmLRYpG1GA=
Subject key identifier:   3B:FA:BC:72:F6:50:E5:69:AD:41:83:C2:23:A1:68:F2:6A:59:3A:8C
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       0199FDD91F49A1BEEE7F212F498147B04C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          0E8B
Signing time:             Sun 19 Oct 2025 19:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:28 +0000
Files and hashes:         1: 1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa (hash: sldQ+jkEkh3NjeBRI9Vm42AYV7O+YARRotzm3PLAwyo=)
                          2: LfLqxUaT3QrnBmzzsTl49po0YNQ.roa (hash: L0cl7tw/Ws1r/mR8qiaEzUND2tiL5WY6XNQQ0gamYcs=)
                          3: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: zNRohUzGtewUzljjQetDlO0Mqb1GZBgXkqQi8S33LQc=)
                          4: zVuCymN8JrRk9IcWOjdOd2y5_r8.roa (hash: 0in95Q1f0yHm24tHTyK5WD1k8nyUtT+dnuohH7HB7vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:1f:49:a1:be:ee:7f:21:2f:49:81:47:b0:4c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Oct 19 19:01:28 2025 GMT
            Not After : Oct 20 19:01:28 2025 GMT
        Subject: CN=3bfabc72f650e569ad4183c223a168f26a593a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:a8:d5:83:38:83:61:a3:75:e3:e1:dc:95:
                    bf:c5:77:73:16:70:15:bb:83:5e:cc:c4:04:99:da:
                    c0:24:67:2a:35:9f:52:21:b2:d4:a9:ca:56:4c:76:
                    d3:f1:e9:be:74:d1:91:ca:47:9f:30:7f:07:cd:0c:
                    a1:18:89:67:dd:9e:97:50:4b:f3:42:bd:eb:85:de:
                    dd:f2:f4:bc:10:cd:78:6d:f2:a9:7c:a3:a6:34:53:
                    e4:17:e1:b9:06:96:96:92:aa:03:6b:a9:c9:3d:46:
                    f7:b5:af:1e:ff:ff:ca:0c:3f:87:e1:30:94:15:47:
                    a6:ed:01:51:29:24:c1:0d:cb:af:da:01:e8:90:9c:
                    88:6a:27:2b:07:f3:ca:66:c8:7b:4c:57:06:56:74:
                    87:12:af:68:c0:22:52:a8:1a:66:7e:1c:5e:f8:b0:
                    68:de:ff:94:f3:ab:49:9b:bf:a9:b1:75:e5:47:81:
                    58:aa:10:20:73:60:5a:ab:97:a2:6b:4d:16:c9:a8:
                    26:f5:62:91:b8:03:8a:4a:41:fa:f5:3d:42:af:58:
                    42:34:0e:13:97:49:f9:d6:89:80:df:c8:7c:30:32:
                    1b:3c:27:fd:f2:9e:f8:7b:ba:cf:b0:b3:22:bb:41:
                    74:92:36:d2:a5:07:09:27:37:c6:1d:e7:52:ca:ea:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FA:BC:72:F6:50:E5:69:AD:41:83:C2:23:A1:68:F2:6A:59:3A:8C
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:68:5f:ff:f2:bd:b0:44:d6:02:06:95:8d:2a:ef:1b:c4:
         6c:00:11:c2:53:69:98:68:7b:45:c4:9c:04:0d:d9:47:13:9d:
         5d:1a:5f:3a:a0:bf:6b:a3:0a:e1:fb:6c:8c:4d:2b:07:32:ea:
         f7:4c:f1:f2:37:9c:58:7c:d2:12:e2:cf:72:6c:52:58:e9:0c:
         e0:40:4c:41:a7:02:10:95:bb:5b:c5:86:32:25:35:19:2a:26:
         87:48:f8:51:66:a3:d4:8a:57:f7:db:2a:b7:4c:6b:eb:3a:2d:
         02:84:1f:9b:bc:19:ab:91:b5:62:b5:19:fd:d4:6c:c3:01:c6:
         57:d1:69:3a:d6:d8:ff:51:b8:a9:58:1b:28:2d:f2:7d:7e:75:
         57:09:f6:89:1a:7d:c9:c7:bd:4e:7f:f5:0d:89:79:cd:80:c8:
         27:dd:04:fd:6b:a0:e1:ff:a2:01:bb:18:a2:e4:17:63:5b:ab:
         ab:65:c9:c2:00:67:36:79:5a:a1:64:b2:ff:c9:f1:b7:b1:5b:
         2f:2d:a0:ce:da:17:98:26:f4:c7:b3:26:de:9c:76:51:ff:cd:
         85:fa:9a:ed:06:9c:b8:59:d4:2c:51:33:af:b4:e0:b2:53:37:
         f5:14:54:db:36:e4:c3:e7:c7:86:88:0a:e7:7c:f2:1a:5d:61:
         80:e6:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:41 2025 by rpki-client