Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          uZsx3r27rwPXTJOWWHxY/MC68Vh69SOj0s+E8P0x3ao=
Subject key identifier:   85:52:6D:A4:BE:71:AE:DE:0C:45:B7:CE:F1:08:B6:9B:FD:EF:A9:AD
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       0199FEB4F0B54B084C4E05ADF60ACAF227CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0DF6
Signing time:             Sun 19 Oct 2025 23:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:34 +0000
Files and hashes:         1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
                          2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: s00Om6V7BPFPJU8Z5fjE2YdpByzULuuVFCYbEe1gk1A=)
                          4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
                          5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:f0:b5:4b:08:4c:4e:05:ad:f6:0a:ca:f2:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Oct 19 23:01:34 2025 GMT
            Not After : Oct 20 23:01:34 2025 GMT
        Subject: CN=85526da4be71aede0c45b7cef108b69bfdefa9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:78:9c:0f:44:d0:41:51:de:78:a4:d8:09:
                    91:87:39:27:97:0a:8e:6a:9b:c7:18:0f:6e:36:f6:
                    5f:3a:fb:60:6d:17:d8:b0:48:73:48:09:e3:f6:a4:
                    bd:44:aa:3d:45:eb:40:91:c9:a4:2a:ca:c1:22:2e:
                    aa:0e:33:ca:a9:31:70:6d:0d:95:03:7d:55:50:0f:
                    84:0b:ca:91:fe:08:f6:d0:44:d3:62:9e:dc:22:5f:
                    b2:af:f3:a9:c7:a6:30:3c:48:67:9b:c2:9d:31:68:
                    b0:1b:f4:3d:23:f6:e7:39:4c:49:c9:16:4a:32:e7:
                    6f:23:15:e6:8b:0c:f5:4f:72:7e:ee:63:3c:f7:35:
                    24:ac:e5:06:5d:09:1b:f5:05:a3:b0:bd:5c:42:52:
                    dc:ca:0c:95:c0:1c:39:ec:bb:03:85:a7:86:42:34:
                    4a:cd:38:94:de:95:e3:85:eb:60:d8:69:1d:83:b1:
                    79:74:66:02:06:11:fc:6e:4a:7a:f2:e7:29:9c:49:
                    00:c7:08:5a:6b:1e:9d:83:97:fa:15:3c:7b:a7:b4:
                    77:35:e3:c6:10:11:ca:dd:75:ef:84:e0:7e:b3:21:
                    aa:de:6d:74:e6:62:ed:3e:3f:47:8e:2b:19:fa:ee:
                    ca:51:d9:9f:8d:0c:26:5c:12:b8:9d:4d:b2:7f:88:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:52:6D:A4:BE:71:AE:DE:0C:45:B7:CE:F1:08:B6:9B:FD:EF:A9:AD
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:b8:4d:57:ac:67:7f:e8:52:c9:df:5d:c5:ce:83:d6:3d:
         48:46:15:aa:1c:95:0c:76:6e:51:43:62:6d:49:42:30:5b:9c:
         1e:b9:8f:6e:25:9b:bf:b1:d6:34:e1:ba:0f:35:39:67:5a:06:
         57:ff:20:6d:53:ba:08:b1:e8:76:a3:56:d6:6b:82:3a:3d:47:
         74:a0:37:c4:0b:5d:4c:af:9a:84:40:a0:6c:9e:ea:80:f2:aa:
         d3:f6:b4:97:4d:62:fc:cc:69:e3:05:ef:de:b7:76:14:d4:bb:
         d5:21:b2:11:c9:6b:1d:b8:33:d3:23:9a:33:d1:ae:f0:04:e7:
         a0:04:ad:58:9c:ce:4e:28:93:b9:76:9f:10:b3:74:e6:82:2b:
         2d:c7:a5:83:fc:6f:30:81:7b:0a:6c:f7:f4:0f:10:e3:23:c8:
         b8:60:75:9f:66:9c:a6:8b:b0:56:00:46:75:8f:b1:ba:0e:1e:
         b1:0c:d6:9c:3d:84:f3:0f:7c:99:56:35:02:bf:a2:41:fa:23:
         cb:59:2e:2b:49:fe:35:35:b8:6f:98:fa:8f:a6:12:e5:61:e9:
         e4:74:ed:8d:6e:3c:27:b7:ed:57:b8:4f:65:ea:c7:5f:e0:77:
         20:c8:b1:c7:c5:94:06:46:ce:84:2b:4a:6d:34:41:23:2a:7b:
         1a:41:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:19 2025 by rpki-client