Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File:                     Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier:          QQE6WqS+uIQP9ekSiQKCwQYtpGdpGnmjCpICxqwE2wI=
Subject key identifier:   27:0E:67:9B:4F:26:D7:00:40:2E:9E:15:C0:A8:EC:D3:1F:30:C9:5C
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer:       /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial:       0199FBEBF9BF3AFF90CBA76DAD0B80644F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number:          017F
Signing time:             Sun 19 Oct 2025 10:02:50 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:50 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:50 +0000
Files and hashes:         1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=)
                          2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: U0hgrYcmGIG7/UJExsgHS8j8O8PXASOFvRKNWspHDvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f9:bf:3a:ff:90:cb:a7:6d:ad:0b:80:64:4f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
        Validity
            Not Before: Oct 19 10:02:50 2025 GMT
            Not After : Oct 20 10:02:50 2025 GMT
        Subject: CN=270e679b4f26d700402e9e15c0a8ecd31f30c95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:67:20:54:69:08:48:a7:a4:8b:4f:cc:84:
                    59:a4:6c:38:90:8e:cd:5e:fa:2d:48:f8:37:5e:fe:
                    c9:84:c0:b6:ba:e7:3d:03:97:53:5d:51:ba:52:e9:
                    00:d9:33:eb:7e:92:e9:52:ef:07:06:a2:4b:73:c8:
                    ad:db:53:1a:08:50:0e:d5:6b:7b:71:2a:a8:9d:6b:
                    cf:ff:b6:0f:65:8e:55:82:e7:70:55:c6:9e:15:80:
                    de:06:b5:c6:d5:ee:35:06:6a:64:95:3c:d1:3e:f0:
                    18:86:73:64:bc:6b:83:c9:2f:fb:19:da:d1:67:0d:
                    98:1b:14:de:42:9b:70:43:87:1e:db:12:ec:f7:33:
                    ee:a6:06:12:76:76:a7:66:e3:20:5a:1d:88:24:8b:
                    8e:37:72:77:84:3e:ac:12:cf:70:34:50:3b:a2:a0:
                    4a:29:2a:fb:2c:d3:3c:7c:4c:f3:b9:a4:7e:1c:6e:
                    c7:5e:89:1c:ef:27:10:1e:d5:bf:0f:dd:6e:a0:9b:
                    cf:1e:80:34:93:a7:6a:15:62:f0:3f:0e:56:52:6f:
                    cd:0d:43:79:20:19:c7:d9:17:12:69:95:5d:51:40:
                    9d:01:9a:2b:aa:be:1b:d0:b5:38:44:f9:f3:da:f0:
                    6e:f6:f5:01:e1:42:86:dc:0e:5f:cc:40:44:39:21:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:67:9B:4F:26:D7:00:40:2E:9E:15:C0:A8:EC:D3:1F:30:C9:5C
            X509v3 Authority Key Identifier:
                keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:f1:54:9d:86:eb:e2:69:19:14:0b:1f:89:64:15:ac:c5:
         e1:d3:df:12:66:a6:de:b7:4c:8d:a7:50:79:c7:c7:39:3c:c5:
         03:b5:dd:a8:44:ad:a2:39:81:98:f2:9c:45:c4:d8:e2:9e:f4:
         42:b8:44:34:6e:bb:9c:3a:a2:a1:22:cc:35:ab:f2:46:8f:8b:
         7a:69:5d:bd:63:60:c5:4f:b0:b2:e0:01:95:97:a4:88:33:ce:
         5a:b6:26:41:b8:4e:3e:01:36:8e:1d:d7:b3:5e:f8:21:ff:5a:
         24:52:a4:1e:47:2b:02:da:37:df:e9:cd:e0:be:d2:df:38:01:
         22:89:97:86:a1:3d:7d:45:ad:fd:01:2f:c7:b8:32:c7:6a:4f:
         73:57:0d:ac:f7:59:ea:24:1a:61:42:05:10:6b:0f:43:64:73:
         8b:ef:bf:d3:6b:ff:82:65:13:b5:cf:3b:58:b9:6b:c3:38:0d:
         bf:06:af:eb:d4:56:2a:eb:d2:3b:8c:f1:10:fa:21:4e:98:54:
         a6:bb:70:24:f6:e3:47:d2:1e:1a:05:19:6c:13:75:be:01:49:
         4d:09:d8:14:fb:26:d3:f4:76:82:f1:89:66:b0:07:d4:42:b2:
         4f:5e:2d:4d:07:10:93:1b:78:ca:68:91:04:63:d3:ad:b7:72:
         34:3e:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:46 2025 by rpki-client