Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File:                     yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier:          5n1KL4+e6h40qcDdFvnCV9cZZptBKVaLdkCec4OoOhg=
Subject key identifier:   28:DE:85:0B:D8:DE:85:6B:A9:D1:6E:F9:CD:28:34:76:D0:E5:33:83
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer:       /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial:       0199FC21C2702B019C9731B6A12183F67870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number:          0D80
Signing time:             Sun 19 Oct 2025 11:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:34 +0000
Files and hashes:         1: xYOsm8BUsmYBwfKFXCGnakfV_m8.roa (hash: 061quaNl9U6/3ODiu8AkctDs7yOiVTs6PkYfEN9U9Cs=)
                          2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: jbkWTobEcKzofqOpV6loOXb0wGnA8qrb+/5TgOjqX8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c2:70:2b:01:9c:97:31:b6:a1:21:83:f6:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
        Validity
            Not Before: Oct 19 11:01:34 2025 GMT
            Not After : Oct 20 11:01:34 2025 GMT
        Subject: CN=28de850bd8de856ba9d16ef9cd283476d0e53383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:3d:a0:e9:6a:9e:6a:3f:bc:af:bb:57:72:
                    62:35:3e:08:d1:61:03:51:53:cc:03:18:79:b0:9b:
                    72:39:a4:a6:31:ea:46:a8:1a:b7:a1:cb:eb:77:4b:
                    a8:6d:49:94:0b:7c:b1:3b:d0:54:4f:74:81:90:fe:
                    e4:0d:9e:1c:c7:fd:42:85:f0:04:f8:ff:47:f5:ac:
                    96:1a:7b:6d:76:ea:a8:58:97:69:ad:c4:35:90:01:
                    ab:bb:94:c0:86:d1:58:91:c9:33:1b:ab:14:46:e9:
                    ff:6c:4e:7b:82:9b:45:6b:5c:c0:fd:5b:b6:6d:6b:
                    8e:a2:40:d6:a6:ff:9a:ab:76:9f:d7:4c:7e:1a:24:
                    55:61:06:9e:ad:ea:d3:19:85:65:f5:3a:3b:f7:19:
                    c8:8f:f7:e8:42:30:c9:26:b9:7c:81:be:a7:aa:fb:
                    7a:c8:63:6f:f3:b3:20:05:e1:de:db:95:2f:a3:80:
                    a1:a2:b5:ae:76:34:67:c3:60:df:3d:44:3c:86:e8:
                    bc:57:b5:e8:2d:6e:b3:fc:3f:b8:94:84:c4:8e:47:
                    28:e3:a9:2d:2c:c0:2e:58:e9:bc:59:0c:68:08:7a:
                    73:69:57:70:46:2b:fb:61:3a:28:68:47:8b:15:1d:
                    5a:d3:ed:aa:b0:67:76:5c:eb:0f:53:f9:79:3d:84:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:85:0B:D8:DE:85:6B:A9:D1:6E:F9:CD:28:34:76:D0:E5:33:83
            X509v3 Authority Key Identifier:
                keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:96:5d:4f:58:de:07:00:44:9f:38:1c:6d:a9:e3:9a:7e:
         bc:53:91:a8:93:35:cc:38:0c:ba:b2:2d:a3:e8:2e:c2:e1:22:
         8c:4f:95:0c:ff:c4:12:47:ac:0e:9e:a0:b0:fd:29:1a:d8:cd:
         f0:84:95:b5:15:7f:98:77:36:2b:c6:06:b8:13:f5:88:97:db:
         4f:a3:30:17:33:97:4f:af:1f:8b:75:01:88:ea:0c:00:71:99:
         9b:98:ae:25:cc:ec:d9:74:26:e2:d6:dd:b1:08:e4:17:71:ca:
         77:c6:43:9b:fb:af:e5:65:3a:75:85:dc:23:1a:c6:6f:21:2d:
         d6:8f:a6:5d:c4:23:6f:ae:dc:0e:ac:91:a9:2c:36:d2:9c:0d:
         5e:67:80:ce:18:5a:30:b3:9a:2b:d2:45:1d:93:d3:5b:40:45:
         e7:e4:5d:5b:0d:be:ab:6c:76:1c:b2:66:5c:63:d5:cd:d5:03:
         44:12:21:88:c1:25:1a:9b:43:1a:90:b4:5c:48:35:02:d0:48:
         4d:46:12:3c:b3:62:61:5f:19:02:36:d7:76:b2:b6:09:8e:c9:
         9b:56:0d:1a:eb:68:c0:e8:23:3d:57:31:a7:be:38:7d:c8:43:
         c5:47:7a:35:24:ed:41:1e:11:3c:6d:c5:2e:28:32:eb:92:99:
         f4:19:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:30 2025 by rpki-client