Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File:                     Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier:          DVg4FIQj/01LfQAoI6t0vRUauMEKSxnRot5q77MvhF0=
Subject key identifier:   9F:D4:35:9F:D8:5D:9D:74:4F:52:88:11:D5:1A:24:23:A1:0D:40:97
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer:       /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial:       0199FCFD618098B656450D85DEAA7DCA99F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number:          164C
Signing time:             Sun 19 Oct 2025 15:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:27 +0000
Files and hashes:         1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: RhP0pAFFvRj4m65oO0ZLrUFDvPxaCmM/VOxFbigJU34=)
                          2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:61:80:98:b6:56:45:0d:85:de:aa:7d:ca:99:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
        Validity
            Not Before: Oct 19 15:01:27 2025 GMT
            Not After : Oct 20 15:01:27 2025 GMT
        Subject: CN=9fd4359fd85d9d744f528811d51a2423a10d4097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:3b:c1:3a:05:79:46:65:ac:d0:50:38:f0:
                    52:2f:f4:00:a2:80:60:24:27:79:22:6e:e9:e1:5c:
                    bd:83:60:72:72:e8:f1:46:0f:fa:2b:99:22:2b:19:
                    e6:ab:40:26:02:b2:1f:e9:57:49:7b:d1:e9:65:ed:
                    2c:7a:00:bd:54:f7:36:06:07:35:4d:97:c7:0b:78:
                    c7:04:a7:cb:ee:d6:35:60:25:1d:39:fa:96:cb:6f:
                    7f:9c:39:f8:2c:3c:ff:6b:56:c0:49:e9:5f:d1:05:
                    0e:41:38:b3:9f:88:e3:58:11:82:bb:ed:b2:8c:bf:
                    40:f2:ed:29:6d:60:b1:09:57:66:aa:16:ca:42:4c:
                    3f:a3:ae:a7:26:7f:56:7c:7e:62:97:6e:cd:a9:5b:
                    b6:86:3d:03:d5:5c:fc:e8:35:24:f1:29:93:c6:51:
                    77:4c:e1:07:2e:9b:f9:22:30:56:8a:b5:9d:21:e0:
                    19:80:ce:2e:9d:64:b7:2e:ba:f1:83:86:70:7e:41:
                    77:46:27:d9:f7:f7:6d:0e:98:33:04:22:ed:7d:e6:
                    ef:6c:06:4b:1a:ba:59:97:83:b7:00:63:4c:cc:bd:
                    25:4b:0c:62:f1:f7:b9:6e:95:e4:76:24:90:b1:2c:
                    a2:88:13:6f:b5:40:c2:04:55:5c:e2:c8:b7:4a:ce:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D4:35:9F:D8:5D:9D:74:4F:52:88:11:D5:1A:24:23:A1:0D:40:97
            X509v3 Authority Key Identifier:
                keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:78:af:02:57:0f:21:b0:bc:f6:ea:60:bc:13:62:4e:b5:99:
         32:60:ba:e3:f1:35:35:4d:59:6e:03:d7:80:32:bc:df:aa:6f:
         f4:a5:41:d6:f7:e7:30:2c:07:ff:24:45:59:8b:41:9b:a6:cf:
         a7:52:5b:91:37:7d:77:e5:cf:1b:36:6a:e6:4c:b1:ce:29:a0:
         4e:78:15:4b:91:be:04:09:0b:55:f6:d3:f2:01:45:2f:c1:2e:
         a1:5a:89:61:6c:f2:68:8c:f5:47:93:3f:5e:af:68:5d:82:cf:
         10:a4:5a:4d:29:a3:b0:f4:da:31:43:33:1f:66:72:e2:d6:52:
         15:e1:25:97:af:8d:88:40:28:64:e0:6a:13:5e:4a:50:22:54:
         2d:29:6e:f9:84:b0:2a:bf:a8:09:8d:e6:a0:ce:04:9a:48:5e:
         f2:d0:12:06:b1:1d:fb:af:08:fc:33:03:c9:11:06:7c:24:a8:
         e7:0e:6b:aa:bd:67:6d:1e:78:f3:d8:05:b7:e5:ae:ae:f0:d9:
         d5:ff:ff:bf:91:74:1f:35:78:80:8d:7b:dc:27:4c:5b:ca:a8:
         8d:a7:74:bb:7a:d6:6e:3f:f5:b7:40:f1:31:80:e1:18:18:ff:
         ee:d5:a0:03:d6:d0:f3:94:da:1d:14:bd:9b:90:8d:14:4e:b7:
         f6:35:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:27 2025 by rpki-client