Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          jt9LfKOcXEFyOfRk5UTfMbkahP8M3Kshw3XtB2N8bE8=
Subject key identifier:   DA:7F:F8:C3:01:6C:B5:3E:E0:BE:BC:86:D6:F3:6D:FD:7A:65:24:23
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       0199FC58A78D0163D7E4532454E903836851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0E7C
Signing time:             Sun 19 Oct 2025 12:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:32 +0000
Files and hashes:         1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
                          2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
                          3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: zVwZLTqIKw1VrH28J/oysWsth73geIwjMWFXsXfC4v4=)
                          4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a7:8d:01:63:d7:e4:53:24:54:e9:03:83:68:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Oct 19 12:01:32 2025 GMT
            Not After : Oct 20 12:01:32 2025 GMT
        Subject: CN=da7ff8c3016cb53ee0bebc86d6f36dfd7a652423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:6e:47:af:90:a2:74:3e:c6:3d:58:41:f2:
                    ab:aa:d3:88:85:8c:90:0c:1b:c9:e4:df:83:6e:d8:
                    20:4c:5f:fa:c3:86:29:de:9f:a4:26:bd:4d:fe:60:
                    74:82:37:81:e3:16:a0:d8:70:21:dc:27:77:1d:ea:
                    3e:e2:e8:22:d5:9d:9f:bd:9b:ed:21:9e:a5:ae:92:
                    41:f9:86:f0:fc:dd:bb:97:28:ea:be:ed:d5:28:d5:
                    77:e3:30:4b:67:14:af:37:d1:fa:c5:6b:e0:ce:ef:
                    93:37:e6:ae:e2:ca:d8:16:8b:c2:6f:6a:59:4d:b0:
                    a1:cd:2f:70:62:a5:17:cd:8f:a1:c9:11:72:1b:a0:
                    01:d9:e5:45:8f:04:b3:21:cb:bc:5c:1b:23:c9:0e:
                    0e:a2:51:72:12:20:24:7d:cf:03:9c:41:66:63:a5:
                    77:64:8c:65:2c:be:7d:83:4f:60:be:d6:47:ea:e1:
                    cc:8d:76:d3:35:e3:a7:d8:f9:ca:87:c7:11:cc:db:
                    0c:c4:b9:cd:f9:12:09:1b:58:ad:71:be:c4:c4:a7:
                    88:8e:e2:7c:21:44:46:bd:7e:54:c2:98:ec:59:58:
                    c4:58:9a:ce:e6:b7:77:5f:94:4e:b8:4e:99:50:ea:
                    88:df:b2:0d:de:21:03:7a:1c:12:60:25:1b:43:09:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:F8:C3:01:6C:B5:3E:E0:BE:BC:86:D6:F3:6D:FD:7A:65:24:23
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5f:76:f7:cf:a1:9a:80:b1:68:7f:fd:c4:91:7d:4b:e7:b4:
         b5:97:21:71:a6:86:69:0c:55:7f:cc:94:eb:26:a4:44:02:c5:
         11:02:c4:16:26:de:e3:9f:41:ca:ea:3b:14:9a:a0:e4:f0:3f:
         09:72:02:87:f7:84:23:64:8b:5d:8b:05:36:44:28:32:6c:6e:
         67:04:a5:41:4a:76:f3:8c:4f:3e:04:84:fe:6b:01:37:32:97:
         74:df:a4:63:15:8a:70:f7:c9:01:86:25:96:9b:3f:21:29:f4:
         ee:e2:a0:de:b1:7b:79:84:3d:b1:7c:b9:7d:03:16:ec:38:b2:
         01:41:92:3d:a6:16:29:85:84:62:4e:71:e5:06:97:7e:a8:06:
         0f:d5:d5:1d:f8:ee:51:22:d2:97:37:53:a7:fd:34:c2:88:d1:
         ae:72:c5:be:5f:db:db:41:2d:69:b0:a8:a6:20:ad:8a:62:e4:
         b5:7d:0b:03:c7:3a:4a:b7:54:83:39:9f:85:69:0c:a7:3e:5d:
         44:40:e7:d8:cc:20:24:5e:0c:18:dc:ca:99:90:09:3b:b6:a0:
         d3:da:3f:f8:ea:58:1f:87:57:35:2e:bf:ac:ea:62:c1:54:f7:
         5e:ac:b5:42:77:df:a6:f2:b4:e7:1e:74:c3:b4:ff:c9:a7:5e:
         f5:43:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:27 2025 by rpki-client