Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File:                     yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier:          D6S5mrPlG0VGkvKwCgB9bWMf7Ba5TByixXefN6ODnQc=
Subject key identifier:   74:A4:92:38:91:12:46:88:03:59:3F:65:76:28:44:60:83:72:9A:A1
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       0199FDDA25A3293A632A3392912719593E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 19:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:35 +0000
Files and hashes:         1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
                          2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
                          3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: JSEj+ht/h7+ixTQqhjKxpS4xcBRj0rym6dXmxuMb1i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:25:a3:29:3a:63:2a:33:92:91:27:19:59:3e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Oct 19 19:02:35 2025 GMT
            Not After : Oct 20 19:02:35 2025 GMT
        Subject: CN=74a492389112468803593f657628446083729aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:61:92:30:f4:5f:79:ce:0c:c0:26:e9:85:
                    59:fd:f0:0c:c7:41:9d:32:a4:28:63:7c:a0:b1:6c:
                    ce:dd:fa:f9:a5:57:55:6d:84:fd:21:3e:fb:3d:28:
                    0b:9a:a6:99:0e:89:68:6b:29:b4:2b:ca:21:30:2c:
                    84:e9:6b:b4:b4:eb:f3:0e:84:59:b1:6f:f0:68:f1:
                    d2:d7:0e:6f:d8:2c:a9:c1:f9:40:77:be:60:51:04:
                    8c:3f:d0:c9:28:5d:a2:b8:8f:bd:6f:bb:4c:f0:0c:
                    6a:b9:51:2d:d8:5d:55:91:7e:e6:30:8c:9f:b4:6e:
                    4b:7d:f8:ba:76:a9:74:f7:5e:58:9d:43:a5:47:f2:
                    b9:b4:47:bd:69:ac:6c:30:5b:ac:c1:29:6a:8b:f8:
                    e0:b5:d3:2c:f4:70:65:28:4c:ca:ce:33:d4:1c:13:
                    39:a4:57:d0:d1:2c:1c:89:c7:2c:65:da:f0:28:bf:
                    b0:ac:fa:6c:36:91:9a:fd:a2:f7:78:c4:ee:79:be:
                    84:07:73:06:7e:61:de:c6:23:02:63:dd:84:4c:48:
                    0d:9c:41:68:c3:16:5f:6d:98:2b:a5:2b:42:f1:f9:
                    3e:c7:2c:0b:79:28:17:1e:2b:92:9e:d3:0d:27:53:
                    2c:62:d5:4f:46:65:ae:53:a1:5d:97:af:e9:4e:3b:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:92:38:91:12:46:88:03:59:3F:65:76:28:44:60:83:72:9A:A1
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:84:e7:0d:a4:a1:91:0a:20:4e:3d:64:6c:de:7f:17:c8:
         85:d0:e7:45:6e:86:dd:89:21:1f:d8:d6:21:03:52:fb:1f:c1:
         2a:a3:34:80:c0:08:67:0d:51:09:c0:fb:3b:33:76:0c:67:66:
         52:be:75:61:86:34:00:4c:17:76:04:30:62:50:32:f1:43:40:
         d0:ff:ed:01:65:fd:82:6a:c2:f9:04:0b:c9:63:c2:4e:fc:e1:
         b9:33:7a:78:ba:8c:47:d1:b8:15:92:e8:e9:34:ec:8a:6d:f0:
         50:26:12:44:40:9c:b5:e1:e8:7a:4e:e9:16:6e:ea:92:72:ba:
         12:96:ac:87:43:29:45:bc:99:44:76:a7:13:c3:37:2a:fb:f3:
         e3:b9:b3:da:78:1e:1a:93:79:2f:e4:8d:a1:30:1f:6f:f0:ff:
         b8:8b:f9:05:07:81:f6:b0:b9:a3:48:bf:35:6e:d2:c4:f5:09:
         a3:6b:fa:72:e1:da:a1:09:22:be:ab:77:ca:b4:81:cd:92:cf:
         85:c7:3c:d4:47:81:48:00:72:28:3e:44:cb:48:10:d1:3a:c9:
         31:fb:e4:79:09:0c:5c:2a:57:3e:10:6d:a3:01:50:f5:fb:e5:
         a9:0a:61:aa:ca:fb:42:11:8c:de:a7:7b:eb:80:71:d3:8a:ed:
         fc:54:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:12 2025 by rpki-client