Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          D/VrkFkfMZQv3csnRtBF7sx0Fyj2Ebi4y2txyYGqgGU=
Subject key identifier:   22:48:4E:FC:8D:0B:CA:AE:EE:95:54:F9:8C:21:03:0F:D5:14:F4:13
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       0199FB4606A1B0B6C47CC9A2CA03693EC754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          1770
Signing time:             Sun 19 Oct 2025 07:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:34 +0000
Files and hashes:         1: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
                          2: BhKXE6iuo9SfBVLFhVn_mkUc-7o.roa (hash: 6UQPEWEZQ8R2LqnkEpCKEGwsYAPkUMrvkndL11WKeoQ=)
                          3: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
                          4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 6pkoZ4jCWm9i4LUMFCKmogP4uvkbri3B0CDOcyXZezo=)
                          5: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
                          6: jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa (hash: hOBNFEt7+n9S44ThfKSG8bjP2CvsYahZ60/Dq1Sii/s=)
                          7: kYpZLQ-AuudDB2VaPbw0Spka5lg.roa (hash: 5naLUifPbVvyChqmHEXOpfanoJmyL4cI6dCLv8ZRPLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:06:a1:b0:b6:c4:7c:c9:a2:ca:03:69:3e:c7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Oct 19 07:01:34 2025 GMT
            Not After : Oct 20 07:01:34 2025 GMT
        Subject: CN=22484efc8d0bcaaeee9554f98c21030fd514f413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:c7:1a:e8:b5:4d:d7:6e:eb:c5:fe:1b:5c:
                    b6:18:a1:f5:35:c8:9b:e6:86:f4:dd:98:df:40:24:
                    9a:8f:3a:37:85:84:e9:b7:f3:b0:f6:4c:48:1d:1e:
                    fe:29:b7:9f:37:71:ea:37:ca:99:b6:c9:03:91:8a:
                    c4:12:c6:cd:e9:91:ad:fe:fb:21:12:b7:3d:ad:56:
                    b2:ec:b8:ef:8b:35:90:18:4f:66:76:20:f9:9f:23:
                    5d:02:d7:38:ba:0d:e6:7e:64:27:02:d8:38:ab:5e:
                    60:52:39:cb:df:31:28:33:f7:22:ab:32:e1:4c:c1:
                    f1:d4:56:97:20:fd:92:40:55:8c:c3:c4:7e:9f:6a:
                    80:95:db:ac:0b:37:7b:52:6a:2f:54:0f:34:07:46:
                    45:1b:d4:de:d6:4e:2c:c1:46:14:fb:db:d6:af:ff:
                    91:06:84:91:ff:bf:e8:b2:7f:6b:e8:b0:7e:44:22:
                    2c:3f:f2:b0:9f:d7:2c:fd:9c:3c:16:c6:f2:3f:c6:
                    56:4c:5b:bc:f5:6a:df:ad:01:6a:61:db:b6:e7:1d:
                    64:ad:55:39:bb:6d:20:90:f5:a7:55:21:e7:bf:26:
                    d5:93:e1:20:a1:8a:fb:d8:08:64:27:6b:ad:69:57:
                    d8:e3:61:d8:11:79:c5:b0:3f:2b:b2:90:9f:49:57:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:48:4E:FC:8D:0B:CA:AE:EE:95:54:F9:8C:21:03:0F:D5:14:F4:13
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:33:9c:68:18:73:c5:e5:bb:9f:5e:fa:c1:92:9f:fe:45:
         22:21:4d:ff:6f:a8:b5:2a:bd:35:25:0b:c8:e9:17:8d:fe:2c:
         66:73:b8:96:0d:2e:4e:63:dc:5a:cb:3b:27:f6:b7:b2:4c:83:
         22:f6:17:0f:f0:36:b1:65:c1:09:f8:01:79:39:0c:eb:bf:15:
         01:50:8d:38:74:79:91:77:1c:f1:ea:79:64:61:a2:d9:11:d5:
         bb:46:b5:95:10:3f:ca:79:67:c1:d6:8c:68:db:cd:c0:56:1e:
         65:db:4f:6c:b9:88:82:f7:44:2a:28:d1:f4:14:83:7a:d1:ba:
         54:3f:da:0f:55:29:1c:e5:1d:9d:f6:06:91:b2:10:fb:60:a8:
         61:1c:68:28:9e:67:03:dc:f7:1d:5e:c5:a4:ef:21:4a:f4:2a:
         b1:90:52:e2:b0:d4:62:87:7c:71:43:c9:19:12:6b:24:b2:dc:
         a8:b0:7a:67:e5:90:ca:15:60:ba:79:1a:4f:d8:9c:5d:d7:6f:
         74:7a:ad:9d:59:1f:6f:90:d0:03:6e:ea:09:41:ba:49:c8:2e:
         94:60:71:cc:a9:f0:00:b8:6e:f2:34:46:ae:99:c2:b4:9c:b2:
         de:69:3d:10:69:03:f9:9b:1c:1b:74:0f:30:d8:6c:8b:f9:c5:
         3c:ad:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:05 2025 by rpki-client