Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          u89wluIOaR/c5EZsCRPp2Gw+oSoPvFq9nohn5LtT74c=
Subject key identifier:   EF:FE:5C:86:D7:3D:BE:F8:8D:9C:A6:A9:AF:BB:7F:EC:B7:FD:B5:DD
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       0199FBEBB894933F2BE98FC691C74295D223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          8F
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: 8I3iH6bVJ8tqRIdaUoNg3abi7Wu/0FY7bULAXCGv/6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b8:94:93:3f:2b:e9:8f:c6:91:c7:42:95:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=effe5c86d73dbef88d9ca6a9afbb7fecb7fdb5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:d5:63:dd:c8:3b:91:ed:d8:d8:1c:f0:5d:
                    cc:cf:31:bd:47:da:07:1e:71:90:5c:f4:d5:40:00:
                    10:9b:d7:a0:18:d6:0c:5f:e9:5e:f2:c1:d1:67:46:
                    6d:82:f0:b6:2b:0d:bf:23:7c:9c:8a:cc:df:a7:9a:
                    ea:09:e1:f2:02:45:9d:6e:bf:08:7f:85:90:c9:68:
                    d4:d2:ad:76:c3:85:54:35:ab:0f:16:6f:fd:0f:4d:
                    af:93:a0:52:2f:8f:68:7b:ca:98:d5:9c:b4:a8:9e:
                    17:e2:6c:7d:84:6d:20:78:45:36:ae:3e:85:54:96:
                    dd:e2:32:b6:11:a7:1f:8e:84:65:b9:38:a9:65:08:
                    0a:9a:4e:a5:56:e4:b9:4d:5f:fa:da:b5:86:a1:61:
                    59:ba:4e:f9:b6:b0:d0:7a:d6:d9:4c:8d:19:34:7a:
                    7c:bf:6b:59:44:af:36:da:76:23:75:95:55:90:d7:
                    69:2a:a9:b0:6e:60:ed:94:39:29:66:09:1e:4f:b8:
                    a8:fa:7c:76:3b:b3:d1:47:3b:be:8a:ae:b4:db:07:
                    e4:d9:45:30:92:c1:13:b7:4c:85:17:06:79:1b:6b:
                    b6:b0:f8:70:aa:ad:61:65:91:76:90:3c:ff:42:9f:
                    84:9c:34:3e:9f:96:85:7d:16:bf:87:ae:f4:a0:85:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:5C:86:D7:3D:BE:F8:8D:9C:A6:A9:AF:BB:7F:EC:B7:FD:B5:DD
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:49:15:15:d4:88:07:42:0f:4f:61:c6:90:10:f8:e4:e0:
         10:60:9b:30:29:2a:c0:ed:40:4e:53:dd:d6:48:92:52:d5:67:
         3f:ea:eb:67:f3:81:51:33:2d:c5:e0:33:c2:42:3d:59:dd:72:
         43:76:e7:2d:13:70:8e:e2:97:c9:a9:8b:10:eb:6b:c2:73:55:
         74:fe:2b:c5:ea:12:cd:d7:67:66:87:7f:00:a3:38:b8:3a:3d:
         3a:91:5a:2c:d2:b9:90:b8:ef:e7:f5:5f:d5:a7:dc:a8:22:20:
         3f:55:c8:68:19:fa:a4:11:ad:a5:cc:b7:ad:2b:5c:db:12:49:
         4e:f0:10:49:f1:1b:2a:79:bd:0f:70:70:17:c8:0a:56:93:5f:
         5a:ec:b9:12:5d:e5:3c:c1:31:2f:1e:ac:8d:26:5b:cd:30:06:
         6e:b5:74:71:82:d4:e3:bf:8e:e7:4d:50:ac:17:c0:b7:d4:a1:
         f0:46:75:e2:f0:04:51:28:92:b0:0f:6f:89:fe:02:cd:c0:ab:
         dc:26:78:32:4d:8e:f9:41:b3:d3:3d:3b:c3:6e:fc:77:10:28:
         f0:9d:f0:4b:c4:f5:e2:e9:e4:0a:4e:e3:82:e3:87:dc:28:29:
         f2:87:5d:7d:de:67:87:bb:8e:6f:0f:3d:7d:28:f6:46:4c:87:
         38:7b:b0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:47 2025 by rpki-client