Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File:                     yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier:          ayBu4qdGCzXr1ET2JXtK3TKGnZlOhwgKdARVupk6V2o=
Subject key identifier:   9A:6C:A7:48:AD:41:F3:AA:70:58:06:29:1D:12:46:1E:04:3A:95:79
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer:       /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial:       0199FAA161C834CB770D30E697C86C2F12F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number:          0DD5
Signing time:             Sun 19 Oct 2025 04:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:44 +0000
Files and hashes:         1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: cBqv6CfGOkRoC0hDvxbp1OzR1yNJV9nuh6LXvsIirwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:61:c8:34:cb:77:0d:30:e6:97:c8:6c:2f:12:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
        Validity
            Not Before: Oct 19 04:01:44 2025 GMT
            Not After : Oct 20 04:01:44 2025 GMT
        Subject: CN=9a6ca748ad41f3aa705806291d12461e043a9579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:eb:50:28:99:0c:06:66:cf:a9:83:98:4a:
                    dd:c3:06:ab:7b:30:15:c6:61:c4:9f:90:ca:ac:1c:
                    a7:df:07:3e:35:0c:e5:ec:a8:ae:ac:4d:0f:00:75:
                    41:5e:6d:f5:4c:fe:03:0d:79:97:b2:93:a6:5a:39:
                    a5:af:9f:f8:12:44:d7:e4:5c:7c:1d:09:28:dd:d5:
                    6f:36:44:5a:21:62:cf:7a:11:e9:56:03:43:27:7b:
                    a9:77:ce:30:fe:7b:35:fb:db:a7:a9:1e:ab:06:38:
                    d8:96:eb:1d:6c:e0:f2:de:0e:7d:72:7a:bd:aa:c8:
                    17:9f:ba:7a:72:be:5b:a1:7f:e3:85:1e:91:4a:dd:
                    c9:68:ec:3e:b5:5d:04:8c:5a:81:36:0f:56:8e:b1:
                    98:da:79:0e:6d:99:09:46:2f:19:a0:3b:d5:8a:9f:
                    72:40:3b:98:70:2b:24:dd:ca:42:3d:c6:0a:c7:34:
                    9e:8a:bc:cf:92:e9:a2:de:0a:6e:f4:05:2d:5d:2d:
                    1e:1d:dc:e6:2c:59:fb:95:fc:3c:c8:de:46:a7:32:
                    23:f4:1b:6e:d8:d4:f0:56:ee:07:83:a6:a2:32:f2:
                    37:33:72:c1:85:26:04:03:99:17:9f:88:eb:39:b7:
                    ce:ed:29:49:d5:08:71:5b:62:3c:8a:ab:56:35:bf:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:A7:48:AD:41:F3:AA:70:58:06:29:1D:12:46:1E:04:3A:95:79
            X509v3 Authority Key Identifier:
                keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:d7:65:bd:9d:39:0e:b4:ab:b2:d3:83:d5:6f:a9:1a:8b:
         a2:48:3d:59:05:c1:c2:c7:8d:40:19:3f:86:2e:5e:c3:fb:54:
         13:4b:a1:5c:9f:0f:c7:b7:c9:8a:fb:f8:13:52:60:3d:07:ec:
         29:18:3a:a2:97:c3:84:5a:c8:18:38:39:5a:28:70:6f:64:b2:
         6f:95:62:80:b5:ef:c4:e1:e3:d2:f1:02:ac:b8:36:29:d0:72:
         8c:f8:1b:43:c2:2a:6f:82:a6:5b:e2:e6:7d:9b:41:4f:a1:91:
         b9:9a:47:30:f1:d6:a5:a4:61:ac:6e:3c:d7:55:f3:51:1f:07:
         e1:06:00:b5:99:93:45:b6:dd:4d:51:e9:90:fd:28:35:e0:fa:
         af:01:dc:b0:15:25:32:08:70:6a:1e:9b:c0:23:15:94:89:fa:
         18:7e:66:9d:3e:53:a6:ef:19:18:3a:75:63:de:2c:2a:14:6b:
         dc:70:6d:f3:c5:49:b6:8b:e2:69:e0:2a:bc:ea:8d:1d:44:a7:
         a7:08:c4:de:30:90:c2:68:f4:76:82:82:32:55:25:50:9c:d3:
         5e:eb:31:18:cf:b2:b4:8b:f5:da:46:32:bd:36:48:07:09:10:
         90:e1:fa:cf:d3:f2:62:50:4d:aa:a7:4e:c7:c9:1b:c0:05:68:
         55:52:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:24 2025 by rpki-client