Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File:                     yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier:          eUgvMzfbre+9Rjiy49ClFxlEruyli23aHJ3/okDPrNw=
Subject key identifier:   F8:38:65:36:1E:A1:8C:DE:B8:F5:CD:9E:BA:0D:C0:F8:92:D6:18:19
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer:       /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial:       0199FDDA4543FB0377B09CE04DC4E224EBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number:          07BA
Signing time:             Sun 19 Oct 2025 19:02:44 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:44 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:44 +0000
Files and hashes:         1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
                          2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: o3Sn5BxdfhQcXJaNdKdGfqBnsYH117DjFCESu7r8oV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:45:43:fb:03:77:b0:9c:e0:4d:c4:e2:24:eb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
        Validity
            Not Before: Oct 19 19:02:44 2025 GMT
            Not After : Oct 20 19:02:44 2025 GMT
        Subject: CN=f83865361ea18cdeb8f5cd9eba0dc0f892d61819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:f6:08:1a:48:b1:ce:9f:68:ac:bf:ff:ee:
                    ee:fd:26:7b:27:58:f1:81:e5:1d:cf:c8:b2:d3:7a:
                    0e:a8:c5:be:1d:b7:af:5e:7b:e7:ed:68:40:52:72:
                    86:98:7c:dc:6a:55:07:af:8f:1c:8e:60:d4:d3:af:
                    24:8b:4f:17:f5:82:92:18:65:f8:89:44:51:54:37:
                    f8:0b:f6:ba:d2:5b:95:03:8e:18:c6:d4:83:40:ff:
                    58:2d:3a:62:b9:ae:fe:2a:79:41:6e:e0:a5:99:46:
                    88:e0:6f:cc:a9:9d:8c:14:26:e0:0b:f0:09:9c:e3:
                    92:04:e1:92:fa:df:80:d0:30:20:e9:7a:86:be:0b:
                    b2:be:5b:86:5f:13:33:c5:83:21:12:7e:e8:37:0c:
                    77:15:7a:dd:47:7b:3a:b8:b9:90:d3:13:98:d8:af:
                    7e:8f:b4:4a:d7:07:4b:a2:d7:a5:96:82:53:d9:97:
                    e5:8e:36:2a:5c:94:cb:84:45:60:33:c3:0d:45:78:
                    49:33:04:41:35:08:06:c4:c1:4d:6f:3f:ae:cf:e2:
                    13:73:ed:16:0b:66:24:bd:fd:05:2e:c0:9e:00:56:
                    7b:d2:02:2f:d9:7d:e1:6c:c9:c9:2c:27:84:f8:36:
                    d1:a1:d8:4b:4d:70:02:44:65:39:ba:70:84:fc:ab:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:38:65:36:1E:A1:8C:DE:B8:F5:CD:9E:BA:0D:C0:F8:92:D6:18:19
            X509v3 Authority Key Identifier:
                keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:3b:a3:01:b3:a6:51:f2:0b:10:ae:69:36:5e:82:19:c6:
         b7:24:9c:77:bc:cd:61:87:00:8a:5a:65:ce:3b:95:ca:fb:7f:
         1c:a4:68:ff:2c:d9:af:1b:fb:8f:3a:a2:6b:39:ba:ca:f8:4f:
         8d:cd:9d:45:95:a0:7d:67:c1:9e:e1:e6:6d:56:dd:41:b4:fd:
         8a:36:a5:c6:8b:5c:50:99:8f:f0:42:1b:e2:1a:a2:01:e5:44:
         08:79:68:5f:da:24:5b:d8:80:0f:55:2e:b9:0e:b3:5b:d4:19:
         c1:e2:3a:12:e7:80:27:b2:72:d4:5f:b4:3d:3f:b9:1a:b7:a2:
         a5:35:a1:c1:c0:e8:9e:7c:0d:b4:4a:e0:3e:d3:07:8f:c3:a2:
         a3:c8:9b:fb:ea:bb:e9:1c:d5:73:a1:f7:33:3c:67:ca:1a:79:
         9f:b8:53:99:37:01:d5:ab:a7:17:64:bf:bc:eb:71:7c:af:bb:
         df:df:f0:21:9e:ea:97:8e:a4:05:4e:d5:42:22:ef:0d:2f:1f:
         87:01:fe:a7:86:60:dd:cc:28:1b:3d:bb:a3:6e:18:39:8e:e4:
         cb:f4:71:69:70:d1:03:03:0f:d5:78:23:d3:b5:69:0e:55:e5:
         4b:32:d0:73:54:e7:55:4a:f1:3e:7c:2d:bc:2b:73:d6:e3:9b:
         67:b3:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:57 2025 by rpki-client