Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          zjUTf9H+f/DUwfch+Xnm6c8bl7NCxl+/tf8a+VP6Y7k=
Subject key identifier:   24:E3:CE:63:7E:84:1D:47:29:81:76:35:84:5B:93:F2:8E:15:B6:68
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       0199FBEA95B0185493FEB511B2D83C72E854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 10:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:18 +0000
Files and hashes:         1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: wtdhlEcNxvLA/YDkqX109oPrQQRpZ25WxLZrPRGvISs=)
                          3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:95:b0:18:54:93:fe:b5:11:b2:d8:3c:72:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Oct 19 10:01:18 2025 GMT
            Not After : Oct 20 10:01:18 2025 GMT
        Subject: CN=24e3ce637e841d4729817635845b93f28e15b668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:8b:6a:25:11:6b:cd:dc:7a:f2:a4:22:c4:
                    4b:a5:58:ca:02:50:96:f0:72:bc:e8:3f:10:f0:08:
                    1d:15:a8:f7:dd:81:fd:09:69:e8:6e:04:0b:18:22:
                    41:bc:e9:1d:2d:fb:6e:43:85:09:a7:3e:26:95:10:
                    7c:dc:6f:1a:80:f7:3c:7e:36:29:bb:32:f9:ec:9d:
                    c7:98:1d:7d:0a:42:20:de:d2:5d:23:b9:64:c8:4f:
                    c0:f6:af:39:cc:66:5e:df:30:87:e5:a2:f1:a4:40:
                    6c:43:92:e6:de:e7:fb:ed:a6:5d:7f:93:78:49:f4:
                    21:82:fe:5b:13:c0:b5:6f:e7:d4:4a:f9:34:5e:79:
                    69:f6:a1:50:71:0b:0c:95:fb:de:94:c3:4a:b4:aa:
                    85:42:9b:42:a9:67:52:da:eb:bb:60:3c:bb:e8:b9:
                    81:8d:97:ce:a2:c1:5b:b6:64:1b:b8:24:14:c1:40:
                    84:21:df:6e:8a:1d:79:d3:20:f5:97:99:a3:a8:a6:
                    7d:98:e6:19:52:db:6a:a4:6f:e9:66:cc:9c:4f:2a:
                    2a:90:ff:55:f7:cc:a0:fd:04:41:f2:52:df:0b:ef:
                    8a:66:2a:76:ea:71:7c:72:10:87:55:1b:eb:75:09:
                    6e:ae:1f:d0:30:68:f1:0f:b6:40:fb:87:87:93:6f:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E3:CE:63:7E:84:1D:47:29:81:76:35:84:5B:93:F2:8E:15:B6:68
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:89:89:51:8c:46:6f:e1:0f:ff:10:a5:87:49:a6:25:6c:1a:
         a7:81:e0:09:e6:fe:6e:24:75:c3:23:11:9a:75:b6:cf:61:f5:
         8c:7f:46:ef:47:0b:26:66:f0:2e:25:a1:4d:47:08:3c:28:c8:
         86:ed:4d:43:2a:14:c1:8a:97:e1:06:08:b1:60:a9:5b:cd:57:
         4b:39:9c:1b:82:51:43:76:88:3e:a7:47:dd:96:da:96:83:fb:
         b8:8e:bf:c0:7d:fc:45:47:03:f0:ff:78:ae:fe:60:70:7d:62:
         37:63:3e:f9:3c:42:aa:31:f7:98:d0:b1:71:f7:4e:43:5a:64:
         47:b4:7f:f7:34:21:59:f1:1d:8d:ab:07:43:1a:16:c5:02:38:
         21:a6:96:a6:8a:85:6f:ad:80:3b:73:21:48:2e:9f:a1:d2:ab:
         0c:f9:cf:35:98:1e:95:4a:ea:ed:7b:2b:69:17:ad:b9:a5:4a:
         f9:af:3f:4b:8d:34:95:c5:3b:b7:44:08:19:41:7b:fc:e2:c5:
         5e:d8:5d:7c:26:1d:55:49:cb:59:b1:8f:3d:1b:cb:ff:d4:02:
         a1:1d:78:9c:8c:12:67:24:e5:30:5d:6a:57:9b:09:87:23:c5:
         f8:10:55:51:e8:51:69:6a:a2:be:c5:7d:e0:f7:56:83:a6:c1:
         13:cf:c5:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pWwGFST/rURstg8cuhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl
NjVlNjUwHhcNMjUxMDE5MTAwMTE4WhcNMjUxMDIwMTAwMTE4WjAzMTEwLwYDVQQD
EygyNGUzY2U2MzdlODQxZDQ3Mjk4MTc2MzU4NDViOTNmMjhlMTViNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9eLaiURa83cevKkIsRLpVjKAlCW
8HK86D8Q8AgdFaj33YH9CWnobgQLGCJBvOkdLftuQ4UJpz4mlRB83G8agPc8fjYp
uzL57J3HmB19CkIg3tJdI7lkyE/A9q85zGZe3zCH5aLxpEBsQ5Lm3uf77aZdf5N4
SfQhgv5bE8C1b+fUSvk0Xnlp9qFQcQsMlfvelMNKtKqFQptCqWdS2uu7YDy76LmB
jZfOosFbtmQbuCQUwUCEId9uih150yD1l5mjqKZ9mOYZUttqpG/pZsycTyoqkP9V
98yg/QRB8lLfC++KZip26nF8chCHVRvrdQlurh/QMGjxD7ZA+4eHk2+RFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTjzmN+hB1HKYF2NYRbk/KOFbZoMB8GA1UdIwQY
MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt
OTQ3ZWFkOWYxNGVkLzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk
LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFomJUYxG
b+EP/xClh0mmJWwap4HgCeb+biR1wyMRmnW2z2H1jH9G70cLJmbwLiWhTUcIPCjI
hu1NQyoUwYqX4QYIsWCpW81XSzmcG4JRQ3aIPqdH3ZbaloP7uI6/wH38RUcD8P94
rv5gcH1iN2M++TxCqjH3mNCxcfdOQ1pkR7R/9zQhWfEdjasHQxoWxQI4IaaWpoqF
b62AO3MhSC6fodKrDPnPNZgelUrq7XsraRetuaVK+a8/S400lcU7t0QIGUF7/OLF
XthdfCYdVUnLWbGPPRvL/9QCoR14nIwSZyTlMF1qV5sJhyPF+BBVUehRaWqivsV9
4PdWg6bBE8/Faw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:55 2025 by rpki-client