Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          7fGuIY1fVg/8xYRbDPHf62Mb7NAFRUXSJMkBsJj7FGY=
Subject key identifier:   BC:C6:8F:33:C3:3B:90:85:A5:DC:5D:F7:4E:63:EE:7F:F2:00:F6:DC
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       0199FB458E977B9CA2BF2B2A529F28521DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 07:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:03 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: 79zD3G0ZqGu6NFqe8rEKGEZyMTbRHujhJnT+6rcmKUY=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:8e:97:7b:9c:a2:bf:2b:2a:52:9f:28:52:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Oct 19 07:01:03 2025 GMT
            Not After : Oct 20 07:01:03 2025 GMT
        Subject: CN=bcc68f33c33b9085a5dc5df74e63ee7ff200f6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:87:6d:4b:48:26:55:3b:e9:0e:03:4a:d6:
                    54:b7:f1:cf:aa:4c:d8:3f:56:ad:37:e5:d1:cb:c7:
                    dc:a0:1f:48:9e:82:7b:d0:3e:05:06:2c:86:e9:59:
                    02:b8:7c:4b:67:79:df:d7:44:93:b1:56:91:0f:68:
                    e9:12:a1:70:c1:ac:cb:a4:72:0f:c6:80:bb:86:a5:
                    92:8f:54:18:b0:ea:79:a1:a4:37:08:4c:36:20:9b:
                    b7:09:fa:96:7b:ef:72:b1:86:cb:21:73:4a:89:45:
                    9b:ae:e7:9f:33:1a:d5:e1:bc:7e:c4:89:dd:1f:49:
                    b1:ea:c6:a5:4e:12:a7:c3:c3:63:d7:62:7a:d3:8a:
                    e4:bb:31:f9:63:be:ff:f5:d6:65:34:9e:d7:e4:b1:
                    18:21:7a:fc:b8:b4:34:4f:e0:fa:03:00:8d:28:79:
                    16:3c:ad:7a:3e:44:21:72:40:d1:e7:33:10:32:62:
                    41:1a:e0:39:85:ac:8d:a6:ee:fa:cf:87:9c:25:5f:
                    2e:74:05:eb:06:76:c2:55:19:4f:03:5b:09:00:5d:
                    c1:b9:c6:4a:7c:e7:c6:9e:bc:5e:9f:c6:e0:ae:df:
                    ba:17:d9:92:9e:05:e6:20:cd:33:78:36:05:68:bf:
                    d5:25:6e:ae:b1:6b:d3:43:18:9d:aa:12:b0:10:d5:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:8F:33:C3:3B:90:85:A5:DC:5D:F7:4E:63:EE:7F:F2:00:F6:DC
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:3b:9b:9c:73:06:f9:67:59:e0:b9:0a:a6:d1:0e:9f:3c:
         1d:c2:07:0f:ff:bb:b8:8d:a2:dc:f4:c9:63:ac:5e:b4:1b:f9:
         df:e3:5f:74:89:f8:60:d2:ab:89:35:44:d7:ec:e2:dd:ad:46:
         7f:4d:34:17:09:e0:14:a9:89:43:d2:a8:82:07:5c:ef:1b:77:
         8c:c6:d2:0a:c6:53:9c:a7:88:86:61:93:16:04:8f:d4:4c:bb:
         8e:cf:d1:81:d7:93:15:5a:54:ac:bc:9b:c2:10:92:e0:5d:76:
         4f:db:d8:59:19:d5:bd:98:20:6d:c7:d4:5e:3f:6b:f5:39:7c:
         9d:bc:3a:5d:00:45:d2:0c:8b:7d:62:84:53:7a:2f:4b:d0:70:
         72:c3:06:41:0d:db:d3:b4:87:31:b9:35:70:fe:7a:d3:c0:b2:
         ee:b3:59:73:6b:a8:54:a0:ff:d0:a2:bf:4e:8d:9d:28:b6:26:
         c0:78:20:98:4e:71:ff:b6:93:74:dc:70:ba:3a:db:de:a5:98:
         a3:3a:b8:9e:b0:4d:88:0d:17:d9:ab:04:81:d7:b6:7f:8d:ae:
         84:35:6f:00:f3:79:4a:10:f4:03:31:89:27:30:74:4a:d8:c4:
         81:c9:15:ee:b5:fe:0e:d0:03:7d:08:4a:bc:2b:4e:2c:db:38:
         28:4e:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:33 2025 by rpki-client