Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File:                     YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier:          APejJrR370CXeol2npuTDo9B5m74vdrMatsg/A/PzrI=
Subject key identifier:   D2:4B:9F:1F:1E:C3:B9:25:D9:38:66:FA:03:8B:BC:E9:33:1A:ED:52
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer:       /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial:       0199FEB48C43D77F6FE1F379087285770852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 23:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:09 +0000
Files and hashes:         1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=)
                          2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=)
                          3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: zf8LGzFazltLDEQ85cTPvMldmw1qb54iz0l1dI8Aho8=)
                          4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:8c:43:d7:7f:6f:e1:f3:79:08:72:85:77:08:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
        Validity
            Not Before: Oct 19 23:01:09 2025 GMT
            Not After : Oct 20 23:01:09 2025 GMT
        Subject: CN=d24b9f1f1ec3b925d93866fa038bbce9331aed52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:d7:13:53:f1:2e:b4:62:63:46:67:46:a1:
                    60:30:f2:7c:8f:32:3c:12:09:a8:4f:14:16:01:f0:
                    87:4f:79:da:0b:72:96:ec:e4:df:dc:d2:c7:a8:58:
                    1f:58:86:5f:42:ba:86:99:aa:ff:70:d5:57:ca:31:
                    6d:32:af:b8:0c:b5:50:92:dc:ae:ca:87:86:2f:4b:
                    b1:ef:4d:cd:32:18:5c:de:d4:87:7d:84:b1:bd:52:
                    6f:eb:21:37:d0:06:99:e2:4e:81:af:48:65:10:56:
                    ac:e3:70:8e:1c:08:9b:3d:e0:b2:49:02:a7:55:3c:
                    ee:d6:47:2f:75:76:03:8f:34:55:62:87:97:ed:a6:
                    c9:a1:72:1b:11:5d:a4:1a:49:36:81:91:21:f1:43:
                    f5:5a:0f:3a:12:c0:fe:ae:4d:f8:bf:d4:50:5b:98:
                    ab:e0:df:9b:ef:fd:22:c7:4d:8c:4e:85:27:23:50:
                    1c:1e:81:23:d5:8f:7c:67:29:59:20:cb:ef:ae:5c:
                    91:96:50:f6:b8:57:f5:ab:9f:0f:44:20:54:dc:3c:
                    c3:49:ac:04:76:11:4f:c8:96:09:09:d3:62:e7:55:
                    a2:70:89:49:79:9a:f3:c9:04:83:a4:18:6f:4c:7d:
                    1f:6f:56:58:d6:66:b5:92:d2:07:d4:07:cb:ac:e5:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4B:9F:1F:1E:C3:B9:25:D9:38:66:FA:03:8B:BC:E9:33:1A:ED:52
            X509v3 Authority Key Identifier:
                keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:44:25:6b:f7:8d:c9:0e:55:c8:b1:af:8c:b7:17:8a:0d:
         a9:40:ae:5f:ba:65:e4:1c:0b:d1:42:56:0d:17:a6:e1:f8:d8:
         0d:d9:22:f7:56:38:e4:34:2f:ea:94:bd:90:50:fd:fb:7b:7f:
         51:0d:52:5f:18:47:6f:a1:15:ca:9d:19:18:ec:9e:00:bc:b5:
         ab:3e:1f:b7:8b:12:ee:82:cf:94:85:75:a2:67:1d:e4:23:75:
         f4:15:53:63:25:8c:76:f3:58:d6:b4:5f:8b:49:4b:52:73:a3:
         fb:1a:67:6b:bd:aa:3c:e7:c2:18:aa:4f:8e:6e:40:e6:d9:17:
         2f:8f:ef:81:bb:6e:94:7b:c1:92:a5:99:d5:a8:a2:b9:b0:bb:
         58:24:0f:79:47:8d:99:73:1b:4e:77:e2:60:d5:5c:22:ac:d4:
         23:41:23:63:d2:0b:17:0c:c3:f3:ea:31:e9:16:3e:0c:ff:69:
         d5:d0:c8:d5:fe:9c:03:b0:df:14:02:06:38:0f:67:fe:be:04:
         ec:b0:ae:91:e6:fe:3f:bc:46:38:f5:c8:6b:01:c6:29:bf:22:
         46:8a:50:74:6e:b7:df:a5:5e:2b:3c:75:7c:61:f2:f1:7c:d3:
         ce:71:ae:e6:3a:9a:df:d9:5b:36:fd:5b:a7:55:63:30:bb:ec:
         19:d2:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:11 2025 by rpki-client