Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          8fXSqR2OItM7tsvI51ToxMDwtbniqatJRuv3QnkLOKg=
Subject key identifier:   DB:24:14:43:4A:3F:4F:02:CC:F2:52:DC:4D:D0:43:E9:5D:23:46:D6
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       0199FAD7F4AD13FF1DB975F917795EFD7E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 05:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:20 +0000
Files and hashes:         1: NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa (hash: lewK8USqDYZNa7izSnIPvxOYg8crLlWZPbCwGgwM490=)
                          2: czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa (hash: IEW0KjjrxdIVeOiEzEJ5xNLzQLH13MYJ7dw5cMoL57c=)
                          3: tr3Mau39VcKJ_XgMpDq905F47G0.roa (hash: MVZ9b8y+XoeBXJPJhRIiCaVtjlCBIl4VmA21jHMQa5o=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: amYeGrPhXzcnw/dCMEq8+UDGSHcZW60tQuM8WCNoTfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:f4:ad:13:ff:1d:b9:75:f9:17:79:5e:fd:7e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Oct 19 05:01:20 2025 GMT
            Not After : Oct 20 05:01:20 2025 GMT
        Subject: CN=db2414434a3f4f02ccf252dc4dd043e95d2346d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:4a:b4:a4:26:59:8e:8c:a6:f2:04:e5:08:
                    ba:ba:46:23:96:77:8c:f3:95:81:08:df:c7:ff:8f:
                    ec:06:99:f2:da:65:ca:6a:1a:fc:8b:99:8d:2a:71:
                    9b:11:dc:8b:08:48:9f:c7:74:7d:ac:23:e9:21:c1:
                    61:b6:4a:f9:7b:98:00:73:52:76:24:b0:f6:f7:5f:
                    61:ae:e9:2f:f2:fb:c9:40:da:91:2b:4a:a2:4d:b1:
                    68:04:e4:8a:71:6e:8e:dd:86:8e:06:0f:7d:44:2c:
                    c1:bd:7a:2f:79:44:43:0b:7e:5c:5b:96:ab:de:0e:
                    6a:26:de:bd:aa:3d:e2:de:9e:5e:a6:a3:03:50:0e:
                    a5:c6:45:19:bd:a4:13:59:12:2b:6b:79:e6:1f:47:
                    3d:85:4c:08:91:aa:7b:6b:be:26:14:cd:ac:fb:ae:
                    46:ca:ab:57:e5:66:f2:2f:98:0a:6a:2c:be:82:ff:
                    a4:26:4b:3f:18:34:3b:c9:1d:94:e9:89:76:50:3b:
                    14:d9:b0:6f:d6:ba:51:f3:bb:d8:88:79:ca:64:4e:
                    46:74:36:7b:3f:e3:40:44:86:e1:97:db:64:e2:45:
                    9a:58:05:54:73:cc:38:c6:94:e9:74:6c:37:22:e3:
                    86:9b:57:c9:2e:52:ce:f5:6c:18:b8:e5:1d:16:8e:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:24:14:43:4A:3F:4F:02:CC:F2:52:DC:4D:D0:43:E9:5D:23:46:D6
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:fb:43:83:70:dd:2a:4d:bb:98:0b:bd:46:c4:81:0e:5c:
         77:cb:4a:74:3f:27:f6:3d:cd:3b:c3:bd:fa:86:70:18:60:ea:
         fa:a9:ef:4b:aa:ff:fe:f6:73:d0:d3:4e:53:f5:9e:53:ac:d4:
         36:93:d1:6f:35:9d:22:7d:b1:76:00:1b:7b:78:38:9b:48:41:
         9a:52:56:8d:65:cf:0f:05:f0:8f:a1:f2:f6:74:32:de:86:1c:
         1e:cc:44:aa:6d:37:4a:74:8b:e3:74:72:b1:b1:82:8b:cd:9a:
         4b:4c:0e:c5:1c:59:50:1c:b4:a2:3a:a3:39:49:10:85:a3:d4:
         38:c2:77:03:ed:85:23:90:59:5b:15:fe:84:43:0f:d6:76:4f:
         d7:d2:5c:8c:e1:75:e8:ab:ec:8e:f9:c2:2e:8e:7d:f2:75:2e:
         9f:9e:d0:34:64:fc:fb:33:5d:d9:6c:69:f5:79:0f:65:91:65:
         a2:7f:ba:1d:5a:db:4a:bd:82:66:e9:7e:21:c4:ed:15:a3:79:
         9a:d6:95:10:b5:29:83:c5:28:01:c9:ba:f4:70:c6:a2:70:1f:
         a9:9d:a6:6f:f4:32:87:1d:46:f5:3d:2a:db:5e:45:ae:0d:2b:
         bf:cb:59:25:be:e5:44:ad:53:41:1f:93:7f:7c:4d:7d:a0:c6:
         4d:22:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:43 2025 by rpki-client