Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File:                     y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier:          wls72fBMHSl2x3J9VgB3CdRmiLj0jd3nUkiLD2Fa8vo=
Subject key identifier:   76:A4:62:F4:1C:78:74:3F:4C:EE:B3:5E:40:FD:DF:F5:74:B5:59:39
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer:       /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial:       0199FBEB167C26BBE9E18C4016C0061B63C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 10:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:51 +0000
Files and hashes:         1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
                          2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: qINB3EEAHWDvzvoA2qNAWU3YJrB8Xe15tZdCJlnV8QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:16:7c:26:bb:e9:e1:8c:40:16:c0:06:1b:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Validity
            Not Before: Oct 19 10:01:51 2025 GMT
            Not After : Oct 20 10:01:51 2025 GMT
        Subject: CN=76a462f41c78743f4ceeb35e40fddff574b55939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:c6:bd:fe:2a:bd:16:86:8e:ed:a4:b2:c4:
                    1f:08:06:1f:2b:e9:50:98:c6:f0:bf:d9:ca:84:03:
                    1a:aa:8b:64:80:b8:43:10:2f:2f:6f:d6:d1:91:18:
                    40:83:82:de:6e:93:85:01:40:a5:e0:87:a8:c4:c2:
                    56:90:5a:18:8b:1d:f5:f7:07:94:19:78:82:b6:9b:
                    31:38:41:0b:19:aa:44:20:cd:eb:b0:bd:7f:17:c2:
                    bb:ec:ad:21:cb:2c:72:a4:4a:95:1f:ac:d9:2b:ec:
                    2f:05:34:42:bb:14:b4:d5:d4:9c:ec:fa:73:36:1e:
                    57:56:98:73:61:30:56:27:de:df:94:26:bf:be:03:
                    c4:52:a9:14:cb:a9:1d:de:c6:50:c4:2c:b1:f3:73:
                    4c:cc:f7:f5:17:80:6c:ea:1b:c9:34:9f:0a:fa:6f:
                    95:1b:c9:13:d3:08:36:e1:e1:a4:65:30:6f:bf:0f:
                    78:2d:2c:70:57:54:a4:f0:3b:6b:ff:9a:d3:5e:a1:
                    2e:4e:f2:57:8a:c8:61:c1:13:e2:99:91:ed:14:ad:
                    74:62:21:eb:bc:55:cc:b2:77:c3:b6:e4:66:55:56:
                    da:cd:50:de:31:56:74:76:67:72:69:65:34:d3:77:
                    27:58:4d:64:bd:48:ce:10:34:af:5f:10:f5:7a:78:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:62:F4:1C:78:74:3F:4C:EE:B3:5E:40:FD:DF:F5:74:B5:59:39
            X509v3 Authority Key Identifier:
                keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:a5:d6:73:81:66:e2:46:43:e3:f7:da:9b:43:45:97:f9:
         eb:28:d0:88:03:f5:10:04:06:f7:b2:41:48:1b:bc:bd:96:d8:
         dc:ff:a5:56:9d:1e:83:91:77:cb:53:7d:ac:58:75:49:cc:e5:
         c3:55:dd:e2:a5:27:c9:7d:24:8d:3a:50:6d:a5:68:73:33:5f:
         ed:be:90:20:98:ea:70:f8:31:65:99:fc:64:8c:6c:ee:d1:6a:
         06:03:83:26:28:f0:53:8f:13:1e:4c:38:5e:1e:14:57:cf:96:
         7f:ef:e8:64:b4:29:6e:7a:e2:79:09:a1:5a:e0:12:9b:8f:12:
         63:ee:06:64:2a:8f:4f:5a:eb:13:8c:6e:18:99:d5:72:c4:eb:
         d3:54:fb:86:40:52:92:c1:fb:f4:68:b5:31:9f:14:56:76:c8:
         a9:44:be:b9:89:8b:ef:29:37:df:f0:13:1c:a9:be:6f:b9:0b:
         18:fb:cb:e7:04:d3:c9:c7:cb:8a:79:39:1a:0e:6a:b7:e7:4b:
         ce:b1:bb:10:1e:a1:72:d3:ae:24:6b:b4:e3:b8:7b:4c:42:0d:
         a5:b6:b1:b0:6f:f8:18:01:d5:50:15:29:2c:f1:e5:5b:8f:f9:
         aa:8c:6f:36:c0:9f:8a:e1:f5:f9:6e:ab:e8:1f:8c:15:0f:cf:
         37:9d:67:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xZ8Jrvp4YxAFsAGG2PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw
YmVhMzEwHhcNMjUxMDE5MTAwMTUxWhcNMjUxMDIwMTAwMTUxWjAzMTEwLwYDVQQD
Eyg3NmE0NjJmNDFjNzg3NDNmNGNlZWIzNWU0MGZkZGZmNTc0YjU1OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlzGvf4qvRaGju2kssQfCAYfK+lQ
mMbwv9nKhAMaqotkgLhDEC8vb9bRkRhAg4LebpOFAUCl4IeoxMJWkFoYix319weU
GXiCtpsxOEELGapEIM3rsL1/F8K77K0hyyxypEqVH6zZK+wvBTRCuxS01dSc7Ppz
Nh5XVphzYTBWJ97flCa/vgPEUqkUy6kd3sZQxCyx83NMzPf1F4Bs6hvJNJ8K+m+V
G8kT0wg24eGkZTBvvw94LSxwV1Sk8Dtr/5rTXqEuTvJXishhwRPimZHtFK10YiHr
vFXMsnfDtuRmVVbazVDeMVZ0dmdyaWU003cnWE1kvUjOEDSvXxD1enjEdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHakYvQceHQ/TO6zXkD93/V0tVk5MB8GA1UdIwQY
MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt
OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk
LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvyl1nOB
ZuJGQ+P32ptDRZf56yjQiAP1EAQG97JBSBu8vZbY3P+lVp0eg5F3y1N9rFh1Sczl
w1Xd4qUnyX0kjTpQbaVoczNf7b6QIJjqcPgxZZn8ZIxs7tFqBgODJijwU48THkw4
Xh4UV8+Wf+/oZLQpbnrieQmhWuASm48SY+4GZCqPT1rrE4xuGJnVcsTr01T7hkBS
ksH79Gi1MZ8UVnbIqUS+uYmL7yk33/ATHKm+b7kLGPvL5wTTycfLink5Gg5qt+dL
zrG7EB6hctOuJGu047h7TEINpbaxsG/4GAHVUBUpLPHlW4/5qoxvNsCfiuH1+W6r
6B+MFQ/PN51ncA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:46 2025 by rpki-client