Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          R/DNcEkSWILDRiaBVT691jsKYWSeeU62IuKGoXlwB2c=
Subject key identifier:   4C:37:3C:1E:48:6A:CA:C6:DB:C4:90:0D:80:7B:FE:83:75:FF:97:C4
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       0199FFC7B09CBB89AA80D1718028C6BCBF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0B24
Signing time:             Mon 20 Oct 2025 04:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:40 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: M0HGWFZeeoo7IbqXK2jYkohGR2A/4cJYTzIku0nQsMQ=)
                          3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=)
                          4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:b0:9c:bb:89:aa:80:d1:71:80:28:c6:bc:bf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Oct 20 04:01:40 2025 GMT
            Not After : Oct 21 04:01:40 2025 GMT
        Subject: CN=4c373c1e486acac6dbc4900d807bfe8375ff97c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:e5:fc:7c:41:66:09:1f:58:93:8d:b1:d6:
                    db:8e:1d:cd:d8:52:e2:a5:1e:1f:ac:d9:66:93:92:
                    d8:0f:c8:ed:87:23:60:3b:16:46:79:c9:4d:a8:d1:
                    0f:a9:87:ef:d8:40:bd:b1:e2:d1:97:73:57:74:05:
                    ff:69:56:0a:0e:b0:04:db:61:39:a1:56:56:e7:70:
                    59:c1:dd:9b:ba:a0:b5:31:44:56:56:cd:01:20:9c:
                    21:45:2d:6a:35:97:4c:51:2c:23:86:50:68:8a:d1:
                    b8:0e:ff:53:8a:09:79:0a:26:66:24:9b:a7:ec:e6:
                    e8:0e:0a:68:0a:d7:2c:d7:1a:6d:27:c0:0e:12:ff:
                    11:06:e2:42:23:bf:2b:f6:53:ae:e9:14:e9:76:41:
                    37:dc:17:ab:68:76:88:e5:3e:a3:8d:9b:1e:d0:b1:
                    78:6c:59:23:4f:75:c2:3e:d2:c3:8f:42:86:68:dc:
                    38:5f:31:63:69:0f:c4:64:18:44:3e:a2:06:fd:bb:
                    b7:a3:67:8b:6a:24:f0:b2:0b:a5:ce:c8:be:be:5f:
                    d0:3d:02:10:65:95:b2:9f:c7:89:a3:8c:6f:cf:a0:
                    29:74:0f:d9:9d:e7:ad:18:f2:c8:7e:d0:98:2d:42:
                    47:f4:94:44:4b:73:90:10:08:9f:aa:3a:7c:5e:5b:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:3C:1E:48:6A:CA:C6:DB:C4:90:0D:80:7B:FE:83:75:FF:97:C4
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:f4:a4:c2:73:58:34:2a:cd:50:60:52:15:bc:fc:7a:1f:
         2f:1d:d0:0e:46:cb:41:8d:cf:f1:03:41:26:6b:c0:48:68:a9:
         92:f3:f6:ba:5a:1f:0f:45:20:ef:f6:91:0a:1b:aa:18:c6:14:
         74:47:1f:b0:ba:cd:82:06:7e:66:55:38:ea:be:4d:8d:39:11:
         9f:c3:42:bc:c3:a2:6a:c9:72:c0:8c:d5:6f:9e:92:03:06:cd:
         47:07:48:35:50:66:53:3e:19:7a:c6:c6:a8:cf:84:7e:3e:66:
         61:25:79:ac:54:4e:61:a3:77:d5:44:95:6a:04:50:8b:a2:b3:
         0b:b9:21:e5:02:eb:c8:9d:5a:a0:9b:b8:c2:cb:04:4e:4a:c2:
         35:ed:f9:4d:3b:2c:e8:f2:8d:a6:bd:12:35:06:39:3d:d9:a4:
         df:90:49:48:29:c9:6f:72:e1:a6:d3:61:5b:be:ef:e1:c4:79:
         1d:32:10:7d:bd:31:70:76:3d:e3:91:1d:8e:48:f5:17:c6:ea:
         1a:8e:00:ac:ed:5e:eb:c9:8d:69:4b:18:7f:d8:ed:48:76:0b:
         b2:19:c9:64:be:3b:ed:8e:dd:b8:64:2d:8c:c5:ab:b3:10:60:
         4d:c7:ea:9b:fc:1a:fb:98:e1:ef:5c:4a:a8:5f:4f:07:7e:a1:
         b3:9d:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:26 2025 by rpki-client