Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json)
Hash identifier:          ckpzKra05Y0TwLDX6v6Zfhp31bLvySveCr1Sv3JgrpE=
Subject key identifier:   3B:15:36:0A:42:19:F5:CB:A6:F9:79:64:68:88:3B:8C:2E:28:47:AA
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Certificate issuer:       /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial:       0199FDDA3D6F4FD550D1D8AFCBF253E7C895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
Manifest number:          0A26
Signing time:             Sun 19 Oct 2025 19:02:42 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:42 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:42 +0000
Files and hashes:         1: MpAhSV5_JYGm73KDLYsRhjMMngA.roa (hash: I/TPMBAXObvOasW2mYRrnWqkuLDeYNgwfZaEC70a/SQ=)
                          2: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: gBpY+EpwDTQKN+OiVuE+YwN2lsO8/x3r8kIF6jET3Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:3d:6f:4f:d5:50:d1:d8:af:cb:f2:53:e7:c8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Validity
            Not Before: Oct 19 19:02:42 2025 GMT
            Not After : Oct 20 19:02:42 2025 GMT
        Subject: CN=3b15360a4219f5cba6f9796468883b8c2e2847aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:49:06:81:78:52:33:15:59:6d:59:5b:68:
                    89:8e:1c:aa:5e:3b:3b:de:f6:18:dc:8d:3b:b6:84:
                    bc:8d:f9:27:06:df:8a:13:a9:53:cf:2e:96:f4:6c:
                    bd:3b:05:96:83:c0:8b:b2:de:f5:ac:e4:d7:24:3c:
                    16:18:0a:2c:e9:81:8f:98:17:8c:ae:6a:d0:c6:a7:
                    d4:8f:f7:0e:1b:d0:90:01:9f:8b:16:25:20:a1:64:
                    0a:80:8f:b2:40:37:f2:9f:cc:9a:35:b8:9c:ce:f0:
                    08:6c:96:e8:d3:1a:9c:87:dc:94:28:3f:5e:4a:e2:
                    23:17:29:ef:bb:be:aa:6d:13:79:26:ba:38:48:2a:
                    91:bb:72:de:5e:24:d4:3a:ac:2c:5f:21:03:78:1c:
                    31:05:42:e0:bb:a2:a5:ff:3e:cf:5f:c1:18:c6:81:
                    b6:9c:48:05:c9:12:0b:bf:0a:c5:2c:08:86:54:98:
                    0a:8f:25:df:18:89:be:f8:a2:7a:ad:03:29:4d:c9:
                    7f:94:a4:9e:b0:a7:05:ce:2b:bb:f7:f6:a0:27:6d:
                    11:fc:9c:97:28:54:c4:69:b0:a4:87:20:4b:64:34:
                    b6:74:6f:92:ff:9b:55:6f:cb:c8:47:11:99:5d:fb:
                    e1:02:1c:a0:69:e3:ac:0d:b6:4d:0f:af:d4:24:3c:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:36:0A:42:19:F5:CB:A6:F9:79:64:68:88:3B:8C:2E:28:47:AA
            X509v3 Authority Key Identifier:
                keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:20:34:f6:88:5b:11:ab:5f:eb:95:bc:21:9c:2f:ae:68:
         ee:86:22:55:7a:3b:37:bf:6c:da:91:42:76:5e:1b:ac:36:a7:
         4a:a1:ef:bd:58:40:6a:ff:a3:2b:4b:a4:5c:dc:cc:db:17:93:
         f7:8d:49:6d:9f:3b:88:78:14:1b:50:ee:b3:fc:b1:b2:9c:96:
         bc:16:22:6e:88:7f:30:4f:e2:42:9b:f6:f3:a8:ba:b6:47:f3:
         d5:0a:02:f3:ce:ed:5a:f3:9e:6f:e8:b5:b2:be:24:11:da:c9:
         40:45:17:09:7e:cb:23:66:da:79:69:cc:62:91:81:40:22:a3:
         a6:73:f9:30:f1:43:34:55:6c:9a:e5:80:9b:01:62:42:ce:fd:
         a0:7d:33:be:6d:7b:ea:4c:11:f5:7c:48:e2:2a:9b:40:cb:40:
         ff:0b:bb:3e:fb:df:e8:f1:cf:3b:59:be:ca:84:57:bf:d3:ce:
         9c:a0:7b:f2:76:f0:cb:c1:2e:b5:79:cf:e2:31:12:cd:f8:62:
         3f:d1:fa:8a:5c:c8:f4:62:62:c2:de:6f:09:7d:85:8d:1c:a5:
         c7:36:f0:6a:e8:4c:79:22:b0:40:93:89:b4:d3:f6:f6:51:97:
         c9:e1:d0:fb:20:d9:f2:de:d7:df:12:61:10:5b:51:95:1a:2c:
         35:05:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:23 2025 by rpki-client