Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          2BQ2IXDDqrqolTJgD78hAAMWVWOopnO1+F7CX81L11s=
Subject key identifier:   0B:31:76:2A:C4:E4:24:9F:AA:29:54:05:0F:2F:D9:18:72:08:67:5A
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019A0222F0CC3CC3929F2D3AB2641C64E26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          12B8
Signing time:             Mon 20 Oct 2025 15:00:35 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:35 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:35 +0000
Files and hashes:         1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
                          2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
                          3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
                          4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: GF2++KXxxCYRaM9kp3Zw+wd0iRR2R3oWmDHwsTT37cs=)
                          5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
                          6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
                          7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
                          8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:22:f0:cc:3c:c3:92:9f:2d:3a:b2:64:1c:64:e2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Oct 20 15:00:35 2025 GMT
            Not After : Oct 21 15:00:35 2025 GMT
        Subject: CN=0b31762ac4e4249faa2954050f2fd9187208675a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:c5:21:e8:12:12:62:5a:9d:2a:cc:b1:ae:
                    0e:bc:ac:a3:fd:43:5b:65:14:19:3f:29:8a:52:ee:
                    88:8e:0b:55:97:93:6e:d8:6c:14:71:5e:20:de:c6:
                    de:33:c3:14:47:a7:60:8c:65:c7:e8:cd:ee:b5:f0:
                    29:87:14:be:74:2d:8b:ee:c7:52:8f:14:ca:34:7b:
                    96:d7:fb:3e:a5:77:f6:89:c3:75:16:d7:f4:c4:7c:
                    c4:81:45:e0:0f:0c:78:69:e0:8e:90:95:d8:76:17:
                    44:44:fd:95:3c:f2:90:d5:8a:99:26:7b:ab:88:7c:
                    a4:dd:91:33:3f:06:dc:bc:fe:9e:09:43:05:bb:a0:
                    59:8f:6f:22:74:a2:e4:82:57:2e:ca:9f:50:6e:f3:
                    39:9f:27:c6:65:09:01:88:98:6a:d0:b7:ca:bf:50:
                    70:e2:ae:11:05:8d:9f:ab:33:7c:97:fa:e3:b3:5b:
                    52:1c:fb:68:c6:17:69:50:43:5c:1a:e0:9d:08:c7:
                    f8:0a:33:86:30:fe:60:85:29:77:c0:4d:b4:ce:d6:
                    2b:0e:8e:86:cc:07:77:e7:5e:71:ab:bd:ab:0e:75:
                    b7:d6:d3:1a:e2:9b:d1:1e:c4:55:09:a2:f0:24:76:
                    78:da:8f:da:fc:dc:22:3a:89:06:98:3f:f6:06:ec:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:76:2A:C4:E4:24:9F:AA:29:54:05:0F:2F:D9:18:72:08:67:5A
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:33:cf:49:4d:b4:27:c9:d8:d0:29:5d:e2:c9:ac:53:c8:
         7f:65:32:fd:e9:3b:f7:21:c6:c5:86:1a:96:50:40:67:6d:29:
         bf:d4:23:ed:14:d3:4d:c5:7c:f9:29:5c:35:2c:26:87:ee:af:
         5b:40:95:0c:a0:92:da:48:d8:5b:32:e4:ab:c5:11:f2:ff:96:
         3e:e2:02:6d:bc:cb:23:9e:bb:4b:3d:4d:5a:4c:d8:e9:a9:43:
         ce:02:1c:14:e1:b8:6e:81:64:14:cf:26:70:be:0c:d9:e3:c1:
         97:84:89:82:6e:07:03:92:a2:10:2c:4e:5c:a1:d8:7c:c6:2c:
         2c:73:2a:29:bb:d4:9e:b4:8b:55:c5:13:fc:95:86:80:9b:90:
         98:bf:c5:69:51:9f:58:df:99:e4:a4:c7:94:c8:27:28:ef:c2:
         2f:fc:ea:07:61:16:c7:18:a5:bb:3b:f3:f5:b5:4c:87:09:dc:
         88:60:3a:c3:fa:15:54:51:50:b3:2a:b8:fe:61:ac:da:c7:9d:
         14:8c:23:70:5d:0b:f3:b1:73:64:09:c2:b2:d4:fd:e8:80:db:
         0e:cc:d5:95:8b:88:50:12:f8:96:8f:22:7e:30:ac:ad:98:ea:
         b6:87:9d:f8:8b:1b:48:8b:31:36:a9:aa:5e:df:ed:de:8f:c5:
         33:be:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:08 2025 by rpki-client