Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          LN2Ncua/3IPAOJJaXts1X33gQMC0WsSOVo01QAw3sXY=
Subject key identifier:   7E:F7:34:29:4D:AD:B0:D5:2A:1B:E2:B5:66:E1:EC:81:70:C0:6B:86
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       0199FCFD5951553EA5E7D8DBA2C469F13675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          12A5
Signing time:             Sun 19 Oct 2025 15:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:25 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: /mNLx6Ji7hNdgxBjVLsLh4hEN2Tj1dTIF4IvJaaNq2M=)
                          2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:59:51:55:3e:a5:e7:d8:db:a2:c4:69:f1:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Oct 19 15:01:25 2025 GMT
            Not After : Oct 20 15:01:25 2025 GMT
        Subject: CN=7ef734294dadb0d52a1be2b566e1ec8170c06b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:97:f4:03:9b:00:40:12:27:0a:85:d0:b0:
                    69:60:20:18:54:8e:92:0a:d6:2e:4f:3c:42:c7:b3:
                    42:21:93:44:28:4c:ad:eb:1b:7a:e4:d2:8e:05:9e:
                    c7:96:28:d1:03:9e:d7:c3:5c:0b:e9:e5:ee:1b:45:
                    de:9c:ab:12:17:25:0c:49:63:88:db:93:19:5a:bf:
                    42:1d:02:5b:fd:03:89:1f:03:e2:f6:91:a5:70:ad:
                    9b:66:d1:cf:46:09:0f:cc:69:0b:5b:da:f6:6e:e0:
                    4b:27:e6:a9:90:83:49:aa:24:91:b2:a9:7e:82:84:
                    53:cd:70:09:83:b3:0d:21:f2:e8:59:f0:ea:13:02:
                    d8:7a:53:9c:70:e3:77:1f:02:56:9d:87:42:24:b4:
                    5a:64:bb:80:ac:83:7e:f6:94:5a:35:52:9d:41:0c:
                    51:6a:ca:e7:64:03:ce:e3:6b:4d:bb:d0:e8:5f:8e:
                    10:58:c4:3f:61:8a:6b:83:22:00:64:41:ce:91:a2:
                    41:ae:dc:19:f8:4a:07:77:44:5e:7d:b2:ae:26:bc:
                    b0:10:69:b7:9a:e9:08:f8:0c:e9:40:ca:7d:28:42:
                    ab:7f:2b:6f:3a:e0:5b:f2:29:08:d7:9c:f5:71:01:
                    43:ab:13:b6:fd:67:80:93:51:57:ec:16:99:73:cb:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:34:29:4D:AD:B0:D5:2A:1B:E2:B5:66:E1:EC:81:70:C0:6B:86
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:32:6b:da:25:54:24:cb:12:cc:3c:83:b8:97:d8:f5:13:a1:
         23:da:7d:11:79:a4:44:8f:f8:c0:48:60:13:05:48:0e:0d:0c:
         f6:a4:f0:6d:a8:46:36:75:fb:fe:7c:a8:6d:8a:d7:08:29:4a:
         b0:43:68:fa:58:81:b9:58:3e:a0:fc:8e:e7:63:b9:79:47:7d:
         a0:50:3f:6e:38:7b:df:58:fd:10:e1:86:de:ad:de:84:73:79:
         b5:5c:a4:94:82:ba:fb:5e:5d:78:f5:5d:b9:5e:0a:70:3e:22:
         8c:50:59:2e:59:21:48:99:63:7b:7a:c7:b6:c4:6d:72:49:98:
         bf:70:bd:a5:92:0a:3b:7c:5a:25:95:41:60:c8:72:c3:2c:c2:
         d7:9a:45:00:5e:63:79:ec:48:92:4b:72:de:89:41:f7:3a:d5:
         5d:bf:c0:25:a3:84:2f:03:02:bb:46:28:a9:c8:76:98:85:53:
         92:e1:30:3b:ff:ab:c8:9d:a7:35:9c:a3:52:c8:99:e2:36:92:
         58:3f:eb:5c:2e:b2:71:a6:7d:ac:72:06:3b:8a:2a:f8:39:fa:
         93:a1:c6:57:0d:f2:41:58:e2:3a:5f:59:ce:0c:89:fb:41:e2:
         99:5e:86:45:90:83:00:ce:0c:d8:b1:e9:b5:8f:4b:d9:f1:27:
         5f:aa:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:37 2025 by rpki-client