Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          eyHwnEkahT4w+c4Q+oeiF1SZg78ARLCfvkffzkNkbMU=
Subject key identifier:   44:2B:9F:82:57:88:DF:3A:BC:83:58:FF:79:A9:C8:DD:25:D8:77:26
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       0199FD6AD66FD50521915EE08CF6677C24C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          0543
Signing time:             Sun 19 Oct 2025 17:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:01 +0000
Files and hashes:         1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
                          2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
                          3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
                          4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
                          5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: aw0dWCbMzIHzPDLWcquL4/pFyGc9bWXXkNLKq/15GG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:d6:6f:d5:05:21:91:5e:e0:8c:f6:67:7c:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Oct 19 17:01:01 2025 GMT
            Not After : Oct 20 17:01:01 2025 GMT
        Subject: CN=442b9f825788df3abc8358ff79a9c8dd25d87726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:ae:33:6b:09:3e:8d:09:cc:eb:85:0a:4c:
                    45:6d:7e:cb:3e:bc:e3:fe:b0:9f:8e:d1:3c:03:51:
                    54:a3:ae:65:65:95:95:ae:aa:1c:c8:d4:d7:11:fc:
                    98:d8:1d:f3:01:cd:da:36:44:fe:91:f0:b7:e9:8a:
                    c9:16:65:0f:a7:6b:27:e0:72:c4:60:59:9d:3e:53:
                    b6:f6:f7:62:1c:2e:d3:bc:fe:f7:b9:b7:40:72:31:
                    49:3b:0e:67:59:96:46:4f:57:01:c2:17:46:e7:5a:
                    d6:cf:18:aa:be:3e:f8:ad:b3:c1:65:cb:8c:16:46:
                    96:a5:6a:1b:fd:b6:ae:18:ee:1b:37:1d:8d:2f:cc:
                    14:9f:ce:19:bc:9e:2e:40:ed:a7:55:8a:7a:00:49:
                    0c:c7:c9:64:88:fa:a9:57:18:db:96:1f:b6:46:3c:
                    ff:13:b9:e5:65:ce:9e:54:fe:35:ee:c0:0f:80:a1:
                    cb:2d:c2:d1:73:cf:f0:bc:92:8f:25:bc:6d:15:04:
                    fa:71:a7:23:a9:b0:f8:e0:5f:11:a0:14:4b:09:0c:
                    dc:8c:aa:33:20:fe:7b:7b:60:c3:e0:7b:02:1b:6e:
                    2b:33:a9:f4:8e:cf:10:68:74:14:63:c8:e7:6a:d6:
                    82:f1:ab:86:44:c6:38:60:fb:00:72:26:6a:15:0c:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2B:9F:82:57:88:DF:3A:BC:83:58:FF:79:A9:C8:DD:25:D8:77:26
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f0:6c:be:5f:0a:73:5d:5f:8b:54:f6:71:87:ed:05:d9:70:
         7d:86:67:61:c2:02:ed:80:7e:ac:f7:36:09:15:47:47:70:d7:
         6f:fc:97:4d:90:ea:cd:62:4d:e9:2c:3a:41:62:c4:47:a7:53:
         bb:c3:6a:72:fb:a4:3e:69:b2:e2:2b:e2:62:8f:a5:7a:f2:cd:
         54:a5:31:38:78:44:06:a1:8b:44:33:25:8a:ce:ca:c2:2e:35:
         e7:c3:49:03:2b:71:aa:a3:f7:2a:66:b0:53:96:dc:47:b0:b7:
         fa:92:46:b7:01:86:b0:24:12:b1:86:6a:82:7c:ce:1b:02:24:
         76:eb:42:9c:e4:6c:c8:04:ba:e0:0a:07:93:7a:ba:aa:95:45:
         98:77:84:44:43:98:40:2a:c8:71:05:1a:5e:be:a9:16:0b:e8:
         2d:ce:60:33:de:d7:5b:bf:b8:7d:74:c0:4b:66:b2:aa:cc:30:
         e2:70:1a:72:ae:3b:a4:3a:9c:72:df:b3:8a:61:01:1f:45:16:
         c1:ca:49:92:6a:1d:30:82:da:2d:45:ec:78:c7:61:91:94:62:
         09:7c:36:6d:84:dc:3a:24:e2:06:ed:5d:ad:a9:df:ea:f4:47:
         94:8c:6d:04:37:b9:26:d4:52:68:07:6a:ae:bc:da:64:ce:48:
         fb:4a:44:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9atZv1QUhkV7gjPZnfCTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3
NGJmMWYwHhcNMjUxMDE5MTcwMTAxWhcNMjUxMDIwMTcwMTAxWjAzMTEwLwYDVQQD
Eyg0NDJiOWY4MjU3ODhkZjNhYmM4MzU4ZmY3OWE5YzhkZDI1ZDg3NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9euM2sJPo0JzOuFCkxFbX7LPrzj
/rCfjtE8A1FUo65lZZWVrqocyNTXEfyY2B3zAc3aNkT+kfC36YrJFmUPp2sn4HLE
YFmdPlO29vdiHC7TvP73ubdAcjFJOw5nWZZGT1cBwhdG51rWzxiqvj74rbPBZcuM
FkaWpWob/bauGO4bNx2NL8wUn84ZvJ4uQO2nVYp6AEkMx8lkiPqpVxjblh+2Rjz/
E7nlZc6eVP417sAPgKHLLcLRc8/wvJKPJbxtFQT6cacjqbD44F8RoBRLCQzcjKoz
IP57e2DD4HsCG24rM6n0js8QaHQUY8jnataC8auGRMY4YPsAciZqFQyP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQrn4JXiN86vINY/3mpyN0l2HcmMB8GA1UdIwQY
MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt
ZTQ3MzUzMWY2ZmU4LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4
LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfBsvl8K
c11fi1T2cYftBdlwfYZnYcIC7YB+rPc2CRVHR3DXb/yXTZDqzWJN6Sw6QWLER6dT
u8NqcvukPmmy4iviYo+levLNVKUxOHhEBqGLRDMlis7Kwi4158NJAytxqqP3Kmaw
U5bcR7C3+pJGtwGGsCQSsYZqgnzOGwIkdutCnORsyAS64AoHk3q6qpVFmHeEREOY
QCrIcQUaXr6pFgvoLc5gM97XW7+4fXTAS2ayqsww4nAacq47pDqcct+zimEBH0UW
wcpJkmodMILaLUXseMdhkZRiCXw2bYTcOiTiBu1dranf6vRHlIxtBDe5JtRSaAdq
rrzaZM5I+0pEuA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:54 2025 by rpki-client