Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File:                     YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier:          0M9+BduDtqlZ0TajSugLtCVGjf2r51Gsg8XQrnzbdKI=
Subject key identifier:   BC:CF:7A:E9:BB:7E:78:03:E1:5D:77:33:3A:85:D2:2C:02:1B:79:DE
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer:       /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial:       0199FB0F4149878D68BDE131443689CEA6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number:          0BC9
Signing time:             Sun 19 Oct 2025 06:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:44 +0000
Files and hashes:         1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
                          2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: rvXCp3sS/QJgbm3//y6JofonljYRttpT+LsVzJ80H4I=)
                          3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:41:49:87:8d:68:bd:e1:31:44:36:89:ce:a6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
        Validity
            Not Before: Oct 19 06:01:44 2025 GMT
            Not After : Oct 20 06:01:44 2025 GMT
        Subject: CN=bccf7ae9bb7e7803e15d77333a85d22c021b79de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:04:40:23:1e:9e:2b:66:61:c4:1b:bd:26:
                    a2:6d:92:49:af:f8:92:4e:c8:d1:d5:51:83:57:c9:
                    d6:fb:aa:cb:58:38:ca:2d:61:c0:9b:51:57:1d:fe:
                    26:36:2e:4c:cb:b8:53:cf:20:6f:c1:39:64:fd:e8:
                    51:9c:19:0c:db:50:84:f1:24:f0:ff:34:e2:6c:4e:
                    0b:d7:43:f5:f5:af:eb:67:18:dd:61:c7:46:e8:6a:
                    2c:cd:0d:85:6c:2c:30:3d:89:b3:14:40:41:a1:e4:
                    77:94:ec:9d:29:2f:c3:3d:70:e0:94:4b:5a:47:7b:
                    a2:78:24:08:82:55:44:5a:e9:b5:53:2a:07:30:3a:
                    59:35:20:9c:c9:85:f3:0f:9e:ee:03:b6:1a:47:dc:
                    4e:69:42:d7:8d:17:3b:b5:f2:c6:e4:63:cb:f3:32:
                    69:6b:ef:e5:13:9f:f9:e3:70:9d:c2:34:ae:3f:36:
                    db:4f:a4:a5:1b:4c:ba:7a:47:a6:11:9e:d4:6e:68:
                    1e:73:c3:25:fe:dd:8e:23:82:37:f4:e7:9c:c7:cc:
                    4f:00:a2:ac:6a:3d:13:03:de:5d:e7:5f:f8:80:d6:
                    ff:28:63:71:8b:62:60:ae:83:8b:0c:03:b7:b5:3c:
                    b3:19:1c:aa:fb:17:99:9d:18:28:e9:03:81:71:76:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CF:7A:E9:BB:7E:78:03:E1:5D:77:33:3A:85:D2:2C:02:1B:79:DE
            X509v3 Authority Key Identifier:
                keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:4e:0e:23:4a:f3:0d:00:e0:a1:b9:9b:89:6f:75:3e:12:
         fc:89:11:c7:67:5e:a8:e9:e2:17:7c:04:97:ab:5e:8f:87:c7:
         88:eb:84:a2:7f:c4:1c:a7:56:03:de:30:cf:b8:d2:bd:b4:85:
         c9:c8:d5:ce:f8:74:cb:1b:e0:7b:34:14:78:ec:59:c7:57:b2:
         79:be:c2:49:04:54:34:b6:90:a9:99:03:ea:43:17:97:29:c7:
         22:5b:c2:19:d4:46:a1:79:60:3d:8c:7b:45:f3:df:bf:3f:e1:
         6d:38:ae:80:f0:97:ce:b0:04:6c:9e:f4:fe:85:59:9d:78:17:
         3b:34:36:75:09:33:e2:71:78:0b:db:96:81:54:96:58:81:7d:
         c0:96:13:6e:23:0e:45:88:26:fc:51:65:20:21:5f:c7:69:fb:
         57:87:2e:7b:85:3a:c5:a8:4d:6d:c2:f7:7f:93:ee:7c:e6:75:
         02:c3:f5:b2:62:b8:c2:c0:b2:9b:8d:59:7f:75:f3:f9:fa:d2:
         38:12:76:e2:7e:7f:64:d3:9c:37:68:bc:2e:c0:41:7d:82:9e:
         4c:14:e4:66:ae:89:86:41:1f:42:a1:a3:14:61:3a:2d:09:23:
         93:bf:63:d4:86:13:cd:b4:a8:75:40:25:26:88:41:54:f5:a9:
         d1:b6:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:00 2025 by rpki-client