Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          yTyaiNZWyXqwA6gGXqu5Wu7xCIZkllw0O8zZyqgUfdY=
Subject key identifier:   FA:07:A1:5E:1D:9D:83:0C:64:7C:6F:B4:C6:5C:96:7B:9B:E4:6A:C2
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       0199FC58A7EB7141824548E7DBAA9250FEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          083A
Signing time:             Sun 19 Oct 2025 12:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:32 +0000
Files and hashes:         1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: prtk7MZIi7aOhPqK7hHhCJG4pTZJuVWfdvCNsBNBXUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a7:eb:71:41:82:45:48:e7:db:aa:92:50:fe:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Oct 19 12:01:32 2025 GMT
            Not After : Oct 20 12:01:32 2025 GMT
        Subject: CN=fa07a15e1d9d830c647c6fb4c65c967b9be46ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:20:81:4c:91:ab:12:6c:02:7f:fa:6c:a4:
                    f4:ce:86:ae:c0:9e:27:83:b1:00:4d:01:5e:d3:ee:
                    47:81:50:91:eb:d8:04:9a:d0:bb:f9:45:c5:f5:7a:
                    f4:97:54:26:c2:92:60:9d:87:f8:ed:33:29:cb:74:
                    b2:70:9b:62:55:e4:ce:1c:f2:1b:72:07:de:75:f2:
                    ce:9a:f7:bf:ad:63:d0:e0:77:6e:cc:f0:c3:fe:8f:
                    85:37:19:f8:c9:5b:7c:f3:7f:17:14:28:3f:49:a0:
                    34:d0:59:1b:09:ac:4b:1c:d2:39:a2:d0:0e:cc:2f:
                    19:c2:51:58:51:17:d3:7d:c0:a8:17:84:f9:dd:28:
                    ef:af:78:4d:3e:c5:12:b1:e0:16:45:4d:de:a8:ee:
                    4e:43:e7:a0:39:4b:e8:cc:41:fd:f2:86:9d:2f:f2:
                    82:53:76:8d:61:6b:9c:e2:f4:9f:d3:b7:16:31:f9:
                    20:54:20:24:7d:fc:9d:b1:55:56:a7:7b:6f:75:a6:
                    4c:e7:da:75:b0:00:92:dd:2e:d5:04:b2:49:76:9a:
                    1f:a4:76:e0:ba:0a:74:45:0b:75:f1:d9:4c:64:13:
                    ca:da:d3:fe:ed:64:d7:3a:45:2a:14:5d:56:85:4e:
                    04:da:08:c5:82:f6:b8:3b:14:02:a1:f3:17:89:8b:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:A1:5E:1D:9D:83:0C:64:7C:6F:B4:C6:5C:96:7B:9B:E4:6A:C2
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:00:fb:bb:88:57:05:cc:76:86:a3:80:57:03:77:c2:a9:41:
         2d:bf:ec:92:b9:75:5a:be:50:8b:48:05:ee:71:73:4b:8f:13:
         d1:da:8b:07:16:af:5f:ed:ea:73:a3:2b:69:91:d2:d1:d9:b9:
         4f:fc:f5:c1:55:e1:9e:65:7a:c6:e9:95:d4:5d:ad:fa:99:f5:
         1e:e8:37:39:01:07:78:0f:be:c9:5f:f6:ad:7a:ad:22:88:94:
         83:2b:f2:f4:1a:42:47:e3:2e:77:ba:eb:b0:22:22:63:1e:33:
         d9:43:18:a7:e7:63:87:0e:3b:34:6c:44:d8:ea:25:a3:9b:82:
         7b:b4:28:e0:d1:7e:23:ee:69:78:e6:42:39:df:c2:f3:86:a9:
         30:69:21:a0:a9:c2:e1:e1:3d:b9:2f:9b:21:fa:5b:19:ed:83:
         1a:8f:a6:20:e5:4f:2e:3a:09:c3:fd:55:08:8c:a3:29:b4:b7:
         fc:72:08:ee:c5:93:7c:2c:3f:38:65:1f:a4:03:7f:62:0b:93:
         2e:76:a2:1b:83:d7:07:44:0f:f6:ec:3a:57:c1:6a:e6:46:74:
         04:ea:41:ca:f9:be:2b:10:28:2a:aa:78:f8:ee:2e:46:d9:06:
         c3:64:69:ff:f3:65:64:0b:b4:19:7d:f2:f5:07:f3:98:e2:32:
         95:75:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:07 2025 by rpki-client