Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File:                     ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier:          Cp8Kgvznm2rpbqboOtQd0LMiNGMx0rWcGgFKd1tROzo=
Subject key identifier:   B2:43:1E:D3:75:6A:BD:92:75:8D:D3:57:BE:DE:4D:28:A7:A7:5B:A7
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer:       /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial:       0199FCC6865C13FA9ABB2E2679A6C59C7E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 14:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:32 +0000
Files and hashes:         1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
                          2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: 3JX/pIPkr1YS8w+zMV+VTXbHlKqKvIBys611KPxkh6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:86:5c:13:fa:9a:bb:2e:26:79:a6:c5:9c:7e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
        Validity
            Not Before: Oct 19 14:01:32 2025 GMT
            Not After : Oct 20 14:01:32 2025 GMT
        Subject: CN=b2431ed3756abd92758dd357bede4d28a7a75ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:40:f9:2c:b6:0f:cd:66:d8:69:53:84:b9:
                    1e:51:5a:ae:b8:2b:76:cf:0b:d2:37:d4:c5:48:89:
                    a7:d3:01:35:dc:81:5d:9b:7c:53:c2:de:38:a0:f6:
                    ab:db:18:3f:2c:96:02:38:59:76:71:5b:0f:6d:7d:
                    de:22:a1:12:1d:f6:81:db:12:e7:b9:4f:f3:95:3b:
                    e1:65:28:cc:d9:e7:f6:3e:8a:7f:a9:5a:cb:a3:26:
                    ab:df:e0:2b:23:e9:56:f7:df:b2:e7:a9:52:04:c2:
                    ca:9e:49:b2:79:3a:ba:ce:2a:db:c6:11:8b:e4:2b:
                    4a:1a:12:b2:b4:2d:98:12:23:fd:22:2d:ce:19:7c:
                    b8:68:42:3b:4a:e7:8b:38:e8:02:c0:51:13:2b:77:
                    90:a6:bc:be:37:5e:dc:88:1a:02:51:0f:bd:c4:9b:
                    96:0c:64:11:0f:db:25:ad:e7:a9:61:30:25:ea:ff:
                    54:59:eb:27:83:81:5e:0e:86:1b:da:56:d2:66:b7:
                    4f:83:97:c6:fe:cd:06:dd:60:e2:15:32:4e:b5:7f:
                    40:57:04:84:b8:4c:b9:b0:8e:e0:a7:0b:cf:16:b1:
                    d8:8c:a2:29:1e:1e:da:b7:4c:b4:85:c8:30:23:19:
                    76:d2:40:37:23:65:58:2b:2e:ce:b0:c9:71:29:00:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:1E:D3:75:6A:BD:92:75:8D:D3:57:BE:DE:4D:28:A7:A7:5B:A7
            X509v3 Authority Key Identifier:
                keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:33:3a:c1:a6:bb:94:63:e0:90:6f:44:a1:4c:3f:24:b1:2d:
         db:ac:c1:96:00:1a:fe:00:e6:51:fb:f7:71:db:02:fe:75:92:
         ad:67:71:62:76:e5:e8:68:c9:c9:bf:40:be:4d:86:f7:b1:a8:
         7a:4e:31:6e:4d:df:b6:c0:d6:7b:49:80:1c:3f:0b:c5:40:5e:
         ea:1a:d5:a4:6e:ab:7b:38:e6:36:f7:4d:07:28:07:e6:dc:68:
         c0:14:03:e3:83:fb:b4:03:e2:ea:dc:b6:1e:ac:40:b6:8a:77:
         77:e8:be:04:9d:98:90:d8:36:b3:f4:2b:a0:fe:5c:31:fa:5e:
         8d:f1:3f:28:dc:1a:94:8b:a8:7d:7d:ee:47:2e:02:6b:05:51:
         1e:e3:ae:6f:37:f1:e2:a5:39:a2:8a:b2:53:aa:2b:9c:91:0c:
         00:f2:e5:0f:ca:9f:6c:06:da:d4:1d:ad:39:46:4d:13:ff:18:
         48:12:bd:30:f5:a5:79:4e:09:47:6d:c3:cb:e0:ac:fc:1b:f7:
         8f:ee:94:8e:69:6c:9c:31:25:25:1d:8b:88:6c:29:83:ee:31:
         26:51:73:35:3a:14:a7:b3:ed:aa:cf:f8:87:ab:57:34:72:ce:
         1e:50:00:6d:10:73:22:31:1f:b2:d5:b4:48:60:1a:a9:c3:60:
         57:50:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:24 2025 by rpki-client