Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File:                     ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier:          o0Zdynej+HuBlwMc9nAag/tMXs0AtspTpBrh5BKT20s=
Subject key identifier:   66:18:3D:4C:CA:5A:A8:CA:C4:71:CC:65:B7:DE:81:8C:1F:B4:2D:F2
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer:       /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial:       0199FD3462368B178A9775DA06C884086A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 16:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:32 +0000
Files and hashes:         1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
                          2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: mNsQXXo1ELOaWz8ZLgO1qwEFlDHnWf97b8m8Q9RN2x4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:62:36:8b:17:8a:97:75:da:06:c8:84:08:6a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
        Validity
            Not Before: Oct 19 16:01:32 2025 GMT
            Not After : Oct 20 16:01:32 2025 GMT
        Subject: CN=66183d4cca5aa8cac471cc65b7de818c1fb42df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:14:4b:c3:08:89:a1:0e:dc:da:00:1c:87:
                    38:af:09:b8:78:ff:0e:f1:c4:1f:e1:0c:0c:d6:88:
                    d3:5d:91:44:e9:6b:94:a4:03:8a:a2:8f:ce:7d:e8:
                    ee:6c:7a:65:c4:8c:5a:8f:e4:89:24:21:3f:e5:66:
                    a7:5e:dc:92:ae:02:2f:02:53:08:eb:3a:1d:32:48:
                    ea:7e:79:09:d4:22:a8:55:21:1b:a1:f2:aa:df:18:
                    da:4a:e3:6e:00:f4:84:14:ee:d9:86:15:42:b7:53:
                    61:be:7f:bd:16:f5:8f:4c:11:69:2e:b1:58:60:9c:
                    73:c8:8e:ec:e0:6c:91:2d:78:9e:dc:c9:be:45:77:
                    46:60:d3:27:14:7b:95:bf:0d:9c:3e:3f:4c:a7:d8:
                    5d:66:5d:ae:75:ed:45:61:c7:c0:89:ad:e4:2e:45:
                    ac:d0:34:6d:a6:94:6a:29:71:9a:24:ab:30:11:d5:
                    29:e7:85:d6:4e:1a:b4:a0:1d:8b:7a:e7:83:20:e7:
                    2d:cd:90:07:ca:c4:ef:78:16:06:00:48:ea:4e:b5:
                    9a:2a:2b:34:c9:0b:92:3f:08:e1:6e:4e:bc:d9:8e:
                    e8:ff:3a:83:d3:3a:b1:c5:dd:a9:dc:cf:dd:69:4b:
                    d8:d6:56:1a:88:97:13:64:9e:51:ea:7b:46:b4:32:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:3D:4C:CA:5A:A8:CA:C4:71:CC:65:B7:DE:81:8C:1F:B4:2D:F2
            X509v3 Authority Key Identifier:
                keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:18:57:40:36:7c:5e:5e:e0:3d:ce:20:18:eb:2a:ff:90:
         d5:d9:12:ba:77:3c:8c:ad:cb:60:65:8c:c8:0b:a3:73:ca:3e:
         bb:dc:e1:be:ed:3b:82:b7:89:11:b9:6b:bf:23:3f:ab:a5:32:
         58:cf:30:1b:bb:6b:55:9b:d1:b3:96:21:be:f2:c3:f0:0b:76:
         e9:8d:82:79:16:7b:65:6b:db:33:3b:5a:02:57:cd:2f:a9:d3:
         36:d3:75:b4:5c:b7:a5:8d:ec:a4:7f:ea:50:b1:46:97:29:b8:
         86:b8:f3:db:79:30:fb:66:fc:88:55:22:3f:21:36:c3:46:b0:
         a8:b9:03:3a:ab:5f:ec:a7:a8:74:2a:f2:2c:ee:c4:07:df:43:
         87:6a:ad:0d:c6:fa:12:fa:78:c8:8e:15:bb:d1:a6:b1:91:1f:
         62:7b:9a:13:f3:3f:1a:53:13:ca:e7:bb:18:03:7b:f8:1c:10:
         4f:a6:04:aa:23:3c:b8:b2:61:a6:f2:0e:72:ac:b9:ca:a3:68:
         7e:65:f7:9a:4e:5d:20:67:03:1d:e2:4d:7c:17:cc:31:64:4a:
         06:86:71:d3:20:a5:45:60:53:01:51:6c:71:9c:5d:7d:53:74:
         98:6b:61:da:fd:65:4b:4c:c8:48:95:21:06:ea:4b:32:8b:9b:
         b5:aa:67:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGI2ixeKl3XaBsiECGoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD
Eyg2NjE4M2Q0Y2NhNWFhOGNhYzQ3MWNjNjViN2RlODE4YzFmYjQyZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOsUS8MIiaEO3NoAHIc4rwm4eP8O
8cQf4QwM1ojTXZFE6WuUpAOKoo/OfejubHplxIxaj+SJJCE/5WanXtySrgIvAlMI
6zodMkjqfnkJ1CKoVSEbofKq3xjaSuNuAPSEFO7ZhhVCt1Nhvn+9FvWPTBFpLrFY
YJxzyI7s4GyRLXie3Mm+RXdGYNMnFHuVvw2cPj9Mp9hdZl2ude1FYcfAia3kLkWs
0DRtppRqKXGaJKswEdUp54XWThq0oB2LeueDIOctzZAHysTveBYGAEjqTrWaKis0
yQuSPwjhbk682Y7o/zqD0zqxxd2p3M/daUvY1lYaiJcTZJ5R6ntGtDLFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYYPUzKWqjKxHHMZbfegYwftC3yMB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs0YV0A2
fF5e4D3OIBjrKv+Q1dkSunc8jK3LYGWMyAujc8o+u9zhvu07greJEblrvyM/q6Uy
WM8wG7trVZvRs5YhvvLD8At26Y2CeRZ7ZWvbMztaAlfNL6nTNtN1tFy3pY3spH/q
ULFGlym4hrjz23kw+2b8iFUiPyE2w0awqLkDOqtf7KeodCryLO7EB99Dh2qtDcb6
Evp4yI4Vu9GmsZEfYnuaE/M/GlMTyue7GAN7+BwQT6YEqiM8uLJhpvIOcqy5yqNo
fmX3mk5dIGcDHeJNfBfMMWRKBoZx0yClRWBTAVFscZxdfVN0mGth2v1lS0zISJUh
BupLMoubtapnIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:50 2025 by rpki-client