Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File:                     Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier:          hU8COzZcEL9kgMECeLKxyeVzu1EVNrKA+AqlAWGmtsE=
Subject key identifier:   F4:CB:BE:8D:56:BB:E3:9A:CA:7F:32:2E:DD:62:47:36:91:61:6A:8A
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer:       /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial:       0199FBEB77A268427E8197FD4951DD17B8A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number:          0A38
Signing time:             Sun 19 Oct 2025 10:02:16 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:16 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:16 +0000
Files and hashes:         1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: W9XkqVO1+yLuTehIV5UFB1iodVvfdFRNdX4OkcrCBoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:77:a2:68:42:7e:81:97:fd:49:51:dd:17:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
        Validity
            Not Before: Oct 19 10:02:16 2025 GMT
            Not After : Oct 20 10:02:16 2025 GMT
        Subject: CN=f4cbbe8d56bbe39aca7f322edd62473691616a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:9d:5c:0f:f4:0c:8f:c9:fa:e3:bc:72:39:
                    ca:de:21:8c:d7:a8:49:21:33:66:10:09:6e:70:97:
                    d0:02:5a:72:28:1b:d9:1c:3d:e5:29:db:1d:86:32:
                    c2:02:4a:73:0d:d2:50:53:38:fe:e5:1e:e6:40:35:
                    db:35:63:3d:73:e9:9f:02:d7:48:6d:33:e8:35:26:
                    03:aa:51:9c:8d:c2:b3:da:d1:44:cc:7b:85:f2:22:
                    13:0a:68:b3:c5:82:fc:af:94:d3:e0:77:26:81:02:
                    f5:54:11:80:80:ab:76:d0:f3:9b:ad:48:9c:f8:24:
                    95:d7:95:8e:c2:53:14:53:6e:9c:49:76:f8:a6:c8:
                    35:72:48:56:94:e4:0a:e4:e6:75:89:29:22:32:ba:
                    74:2c:5c:f2:23:3e:b7:ce:a3:00:80:c9:c3:05:8d:
                    42:ec:3a:f6:f3:73:8f:6e:65:4d:c2:d5:4f:c9:b5:
                    74:da:bc:3d:e6:33:6f:ba:b9:73:63:d8:1f:ff:9d:
                    76:ff:92:24:06:1f:96:0d:2d:c5:6c:95:b0:11:e3:
                    92:6e:5c:62:ed:d0:2b:c4:6a:27:48:63:96:4a:29:
                    9c:df:49:76:dc:68:a7:25:ae:b2:84:83:a6:dd:c1:
                    a8:6e:8a:73:aa:8b:35:02:1f:23:fb:57:ef:e8:a5:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:BE:8D:56:BB:E3:9A:CA:7F:32:2E:DD:62:47:36:91:61:6A:8A
            X509v3 Authority Key Identifier:
                keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:0a:35:3b:02:c9:5a:c7:fe:19:31:fa:a5:d9:93:64:8c:
         a9:ae:d1:c2:7a:66:a0:86:0d:b0:87:66:bb:54:45:a5:ea:e7:
         22:ce:9a:af:87:ba:ec:66:b2:4a:42:80:a4:68:8f:e7:43:df:
         f3:0e:87:0a:f0:b3:44:e3:61:ab:12:66:5b:82:46:69:3c:9f:
         65:49:f9:45:33:0b:2b:ee:1c:0d:9c:82:f7:eb:d1:b6:c6:44:
         31:9b:90:1f:a6:0d:a3:62:cd:ee:18:55:06:7f:79:77:4f:38:
         06:a7:d0:1e:1d:2b:4b:ab:70:5b:40:c5:9a:51:b6:f7:51:5d:
         6e:42:be:53:31:c3:ac:6d:12:68:9c:cd:a3:0c:29:a3:3b:b4:
         1f:c9:3b:8a:a5:b8:a3:14:59:af:3d:99:16:92:51:1b:28:c0:
         fc:95:79:0c:0d:6c:6e:f6:ec:5d:36:a6:2a:e8:b5:2c:02:61:
         b7:54:8d:d5:19:66:06:0c:0d:a7:43:00:34:df:ac:3b:c0:60:
         eb:1c:bc:60:ac:0d:77:01:39:c8:7a:93:ff:ab:04:e9:6b:3a:
         91:5c:27:ac:0e:0e:d3:48:93:1a:3e:df:a0:03:5e:72:a5:ee:
         2c:2d:4f:01:ef:6e:f3:c7:d1:68:31:d6:56:68:29:71:42:00:
         7f:56:46:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763eiaEJ+gZf9SVHdF7ipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTdlZDlhOTVlMGIyMjM3NjkwYzc0YmZlNzhjZmVkZTJj
NDRlN2MwHhcNMjUxMDE5MTAwMjE2WhcNMjUxMDIwMTAwMjE2WjAzMTEwLwYDVQQD
EyhmNGNiYmU4ZDU2YmJlMzlhY2E3ZjMyMmVkZDYyNDczNjkxNjE2YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnadXA/0DI/J+uO8cjnK3iGM16hJ
ITNmEAlucJfQAlpyKBvZHD3lKdsdhjLCAkpzDdJQUzj+5R7mQDXbNWM9c+mfAtdI
bTPoNSYDqlGcjcKz2tFEzHuF8iITCmizxYL8r5TT4HcmgQL1VBGAgKt20PObrUic
+CSV15WOwlMUU26cSXb4psg1ckhWlOQK5OZ1iSkiMrp0LFzyIz63zqMAgMnDBY1C
7Dr283OPbmVNwtVPybV02rw95jNvurlzY9gf/512/5IkBh+WDS3FbJWwEeOSblxi
7dArxGonSGOWSimc30l23GinJa6yhIOm3cGobopzqos1Ah8j+1fv6KXAeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTLvo1Wu+Oayn8yLt1iRzaRYWqKMB8GA1UdIwQY
MBaAFGPn7ZqV4LIjdpDHS/54z+3ixE58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDct
MTliMmQ0MWJlYTc5LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDctMTliMmQ0MWJlYTc5
LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiwKNTsC
yVrH/hkx+qXZk2SMqa7RwnpmoIYNsIdmu1RFpernIs6ar4e67GaySkKApGiP50Pf
8w6HCvCzRONhqxJmW4JGaTyfZUn5RTMLK+4cDZyC9+vRtsZEMZuQH6YNo2LN7hhV
Bn95d084BqfQHh0rS6twW0DFmlG291FdbkK+UzHDrG0SaJzNowwpozu0H8k7iqW4
oxRZrz2ZFpJRGyjA/JV5DA1sbvbsXTamKui1LAJht1SN1RlmBgwNp0MANN+sO8Bg
6xy8YKwNdwE5yHqT/6sE6Ws6kVwnrA4O00iTGj7foANecqXuLC1PAe9u88fRaDHW
VmgpcUIAf1ZGGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:30 2025 by rpki-client