Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File:                     YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier:          F7mLdIdL/QqAGCPcQ4bPAHfqug50gD9tWl8Eg17w008=
Subject key identifier:   18:C8:22:D8:DC:DA:3B:07:C1:5B:2E:AB:88:E5:DA:D3:2D:04:CE:10
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer:       /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial:       0199FE46BFA2FEF88D39E24FC5F6C43B2395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number:          15AC
Signing time:             Sun 19 Oct 2025 21:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:13 +0000
Files and hashes:         1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
                          2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
                          3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: JYYG9YKomm3l2iFeo+COJiQlToLAxqJSwZI7HEJieHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:bf:a2:fe:f8:8d:39:e2:4f:c5:f6:c4:3b:23:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
        Validity
            Not Before: Oct 19 21:01:13 2025 GMT
            Not After : Oct 20 21:01:13 2025 GMT
        Subject: CN=18c822d8dcda3b07c15b2eab88e5dad32d04ce10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:dd:af:e3:41:da:32:84:0b:59:c4:af:5d:
                    37:8f:01:67:b7:a5:08:26:83:c5:9e:8d:41:9f:d1:
                    63:38:a2:b6:5c:45:3d:56:1c:90:35:f3:b3:d4:0d:
                    f7:ae:9c:45:f7:7b:a4:62:6f:b0:ff:50:60:c7:49:
                    59:4e:9c:49:f4:cb:41:29:28:3e:f9:00:97:e5:51:
                    7d:00:d8:ec:2e:67:df:ad:3e:35:4b:e5:fe:05:90:
                    20:82:a8:00:1a:ab:05:6f:fd:94:a8:a6:8b:a6:08:
                    a0:da:21:13:a8:d3:12:50:04:48:7b:dd:81:35:41:
                    c5:88:49:e7:d0:4c:10:b7:6b:4b:f0:ee:3f:52:54:
                    59:cd:e1:a8:e0:e1:99:2e:1f:4a:f0:13:e8:f6:3f:
                    33:11:25:0b:e2:41:d2:fa:a1:61:c3:be:0f:11:b3:
                    bd:e7:d6:b2:4f:4c:5d:26:e3:7a:62:44:17:44:45:
                    5f:fe:88:91:8d:f7:4a:08:4e:f4:f5:d1:8d:1c:86:
                    f1:98:c2:0b:e3:32:59:a7:b0:1a:ca:51:8c:92:72:
                    cd:e7:4e:a4:16:cf:b3:df:50:08:3d:8e:2e:27:fb:
                    af:3f:c9:3b:fe:56:e1:5a:ba:af:a6:8d:0c:1e:05:
                    c8:59:95:fb:77:26:15:ac:40:55:0c:19:18:62:72:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:22:D8:DC:DA:3B:07:C1:5B:2E:AB:88:E5:DA:D3:2D:04:CE:10
            X509v3 Authority Key Identifier:
                keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:6a:7a:98:32:5c:f1:34:c6:fa:7d:cd:4b:44:54:89:02:
         7a:82:65:b5:e6:d2:3f:8e:b7:fa:cb:37:96:16:c2:d7:f4:e0:
         88:ad:ce:a9:4c:90:8d:a8:99:aa:e2:0b:7e:30:8a:bd:c5:d9:
         f6:67:81:99:9c:9d:68:d8:fe:c2:41:90:50:45:5e:da:8f:92:
         63:e3:b2:d9:ee:6e:fd:81:33:03:4b:2e:19:e8:e1:41:ee:41:
         58:5c:66:22:fe:10:02:4f:eb:53:b6:be:02:f8:fe:06:5e:da:
         61:28:f1:64:3b:d7:01:4d:5e:42:2b:99:10:f5:1c:a1:09:f2:
         f9:90:1d:17:fc:2b:0b:e0:ab:3d:c1:01:1a:b2:c8:a2:ba:9f:
         c2:22:53:53:be:aa:84:88:fd:98:0d:08:2f:55:41:fe:bd:39:
         64:ac:9a:4f:a4:ee:02:58:26:81:9c:5e:16:c8:55:c8:8a:cc:
         35:7d:40:cb:89:a0:10:4d:67:78:f2:33:c7:ba:41:49:cf:bb:
         ad:66:c0:ff:ad:27:75:db:72:2f:5d:28:cb:86:b8:36:d3:1f:
         96:b0:74:80:78:b5:1b:7d:96:df:c5:8f:62:1b:a7:63:06:97:
         2a:26:cc:d5:e7:df:18:6a:73:dd:01:72:7b:d9:c1:e2:18:31:
         d4:86:5c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rr+i/viNOeJPxfbEOyOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4
YjYzOTcwHhcNMjUxMDE5MjEwMTEzWhcNMjUxMDIwMjEwMTEzWjAzMTEwLwYDVQQD
EygxOGM4MjJkOGRjZGEzYjA3YzE1YjJlYWI4OGU1ZGFkMzJkMDRjZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLjdr+NB2jKEC1nEr103jwFnt6UI
JoPFno1Bn9FjOKK2XEU9VhyQNfOz1A33rpxF93ukYm+w/1Bgx0lZTpxJ9MtBKSg+
+QCX5VF9ANjsLmffrT41S+X+BZAggqgAGqsFb/2UqKaLpgig2iETqNMSUARIe92B
NUHFiEnn0EwQt2tL8O4/UlRZzeGo4OGZLh9K8BPo9j8zESUL4kHS+qFhw74PEbO9
59ayT0xdJuN6YkQXREVf/oiRjfdKCE709dGNHIbxmMIL4zJZp7AaylGMknLN506k
Fs+z31AIPY4uJ/uvP8k7/lbhWrqvpo0MHgXIWZX7dyYVrEBVDBkYYnIg1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjIItjc2jsHwVsuq4jl2tMtBM4QMB8GA1UdIwQY
MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt
OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi
LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6lqepgy
XPE0xvp9zUtEVIkCeoJltebSP463+ss3lhbC1/TgiK3OqUyQjaiZquILfjCKvcXZ
9meBmZydaNj+wkGQUEVe2o+SY+Oy2e5u/YEzA0suGejhQe5BWFxmIv4QAk/rU7a+
Avj+Bl7aYSjxZDvXAU1eQiuZEPUcoQny+ZAdF/wrC+CrPcEBGrLIorqfwiJTU76q
hIj9mA0IL1VB/r05ZKyaT6TuAlgmgZxeFshVyIrMNX1Ay4mgEE1nePIzx7pBSc+7
rWbA/60nddtyL10oy4a4NtMflrB0gHi1G32W38WPYhunYwaXKibM1effGGpz3QFy
e9nB4hgx1IZccw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client