Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File:                     yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier:          BKVAJ5qqHjDr05eeAO7SFc/Jz8eC4l7SsMDj3IPBtYg=
Subject key identifier:   BE:2C:62:F5:06:51:B8:01:06:96:58:3C:3B:27:6C:1F:13:C8:A0:45
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer:       /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial:       0199FCFD4248B68158AF6AFDD3B9E4A1BC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number:          01E8
Signing time:             Sun 19 Oct 2025 15:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:19 +0000
Files and hashes:         1: TV9MBnLCdq0YXMlS7n0N6-374eE.roa (hash: 29vVPe5fMsq8wMs3CBPsJgBaxcV4vylFIV1zsoy0JlI=)
                          2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
                          3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
                          4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: hhTKgfwL8Fsg6Wa8NVZPUt12qUAlB9lOqSIRnHs17QY=)
                          5: zBWvnTJJG91hNtA-4u23qWsF3BI.roa (hash: NhshWBAjIbZ4LBplav+eEzVugjI1bdqZCHT9O9pa43Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:42:48:b6:81:58:af:6a:fd:d3:b9:e4:a1:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
        Validity
            Not Before: Oct 19 15:01:19 2025 GMT
            Not After : Oct 20 15:01:19 2025 GMT
        Subject: CN=be2c62f50651b8010696583c3b276c1f13c8a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:2b:87:bb:c9:5e:de:90:1f:52:32:37:10:
                    8b:70:34:b6:0e:22:5f:16:c2:ee:45:a2:1a:ed:a5:
                    c2:59:64:42:3b:57:54:c1:1b:2f:c2:43:46:6b:d6:
                    a1:a1:48:f8:b8:ca:81:a5:f2:aa:df:74:ff:a8:86:
                    a0:a7:55:62:4e:98:da:ac:6b:b1:a9:b0:0f:71:ff:
                    20:07:37:f1:3e:78:0f:2f:b4:9d:e1:e8:eb:76:c3:
                    f8:a5:42:3b:17:3e:d1:94:aa:57:12:67:a8:59:22:
                    ed:c2:2f:86:6f:97:77:ce:46:4a:d9:84:e7:47:d4:
                    6e:94:94:38:dc:c5:e2:55:97:da:85:95:58:a0:fd:
                    a3:2f:aa:46:f1:21:d8:d6:0b:37:a0:18:a2:b6:bf:
                    13:05:2a:0d:43:da:a3:bf:e3:6b:6c:85:4b:a8:6e:
                    40:aa:e5:a4:5e:63:c7:07:85:7a:82:27:b8:ce:5b:
                    93:0f:45:50:52:9e:53:e9:22:bc:e3:1d:e0:5f:28:
                    c6:a0:c6:ef:b5:eb:2b:d9:8d:af:b9:98:7e:4f:f2:
                    7e:df:41:93:b0:06:b6:6f:2b:ed:69:ed:39:4b:14:
                    8c:ea:5b:36:ff:8c:09:7c:52:c5:11:40:80:6a:5a:
                    77:0a:ea:96:29:54:23:8e:33:a8:90:6e:15:ac:aa:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:62:F5:06:51:B8:01:06:96:58:3C:3B:27:6C:1F:13:C8:A0:45
            X509v3 Authority Key Identifier:
                keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:53:d0:31:2f:b4:68:73:8c:1f:1f:56:2b:04:13:33:5b:02:
         87:86:59:21:69:bf:90:89:74:53:61:83:e2:e8:d3:73:10:cf:
         60:95:c2:0b:29:10:fe:75:35:53:63:90:40:e7:24:84:30:b2:
         e7:44:da:be:9b:ee:e8:c9:68:1f:1b:aa:f8:43:7b:61:a3:12:
         37:14:3e:45:42:c0:13:84:5f:38:ae:2f:bc:00:64:03:c9:96:
         c0:55:2c:83:6f:3b:81:e4:df:c5:96:fa:09:d6:1a:75:a3:1d:
         d8:3c:37:c4:f4:ea:f4:68:46:41:fe:d9:03:e3:2d:b3:b8:6f:
         1d:bd:45:c4:47:e8:ea:86:af:05:cc:0b:23:d6:00:27:1f:d0:
         32:d7:3a:45:b7:2d:bc:ba:fd:8e:c3:3e:96:95:ea:a3:e1:72:
         dd:77:1a:79:5e:75:f4:cf:98:ff:5a:f0:1c:7c:df:53:c7:98:
         6a:a5:f5:84:f2:a9:f2:1b:a0:e0:12:cc:3d:ff:34:8e:72:7b:
         04:45:8d:bd:e2:ff:f7:1b:41:3f:77:7f:75:a9:ce:0d:ea:fc:
         80:ec:07:55:93:b4:8f:51:f9:c5:f4:7b:7f:fb:31:81:70:32:
         4e:6a:af:8e:8a:4c:15:77:1e:61:37:3f:a8:60:09:45:fe:9f:
         7b:df:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:29 2025 by rpki-client