Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File:                     Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier:          3+6Zw5NQ3X6P3dmoqGc6goZdR+vZXzzBMpZNVK1eJjc=
Subject key identifier:   1E:4C:08:F2:70:4B:8B:3C:82:4D:87:25:7D:A2:C6:F9:90:E9:C1:41
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer:       /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial:       0199FB7CE430C66371DF06190E4730E31685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number:          0EAF
Signing time:             Sun 19 Oct 2025 08:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:30 +0000
Files and hashes:         1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=)
                          2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: oUZjdknloyfygxxlUQadmopskF+ub46F6qYcv/onvhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e4:30:c6:63:71:df:06:19:0e:47:30:e3:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
        Validity
            Not Before: Oct 19 08:01:30 2025 GMT
            Not After : Oct 20 08:01:30 2025 GMT
        Subject: CN=1e4c08f2704b8b3c824d87257da2c6f990e9c141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:60:c5:bf:84:01:c8:5a:c8:79:da:09:75:
                    71:71:58:3c:0b:f4:61:c5:b0:a4:26:da:d8:08:24:
                    08:56:18:2b:60:a3:9a:e7:ae:d5:29:a4:8f:bb:5d:
                    66:a3:5f:3f:46:ef:99:94:85:fd:03:b1:59:8b:85:
                    04:f1:24:22:fe:fe:c5:ba:dd:d1:e8:91:dc:7f:cd:
                    57:c6:1c:82:38:0b:8d:02:d4:27:8d:89:dd:f7:79:
                    13:5b:6e:20:17:dc:98:20:cb:1c:a1:b6:f1:15:42:
                    fa:3f:e1:2f:a7:53:13:98:ba:ae:cf:f3:a3:b5:67:
                    0c:1c:7f:c0:3b:81:02:ab:06:7d:34:7c:51:b0:bf:
                    3f:b4:93:20:00:40:01:3a:d8:a2:2f:88:87:58:92:
                    78:a8:03:98:de:e7:6a:6e:43:f5:6d:dc:c2:c2:9c:
                    d9:5a:7f:f4:0d:b5:e9:21:c7:33:ab:40:3c:7d:7c:
                    08:3c:ab:76:22:ae:22:38:51:93:3f:29:33:3c:d1:
                    cb:c4:82:0a:94:50:70:47:1e:95:be:5d:1f:58:d3:
                    53:31:4a:24:7c:e1:ce:a9:84:ad:94:f8:57:3f:56:
                    5f:06:2c:52:40:51:45:13:07:0e:ab:34:c7:0d:18:
                    58:03:f6:47:0d:d2:ab:4f:2b:6d:4e:1d:6c:de:c4:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:08:F2:70:4B:8B:3C:82:4D:87:25:7D:A2:C6:F9:90:E9:C1:41
            X509v3 Authority Key Identifier:
                keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:20:87:5a:14:eb:d0:57:3a:54:90:86:17:ff:ef:04:40:
         73:86:95:9e:34:2d:dc:eb:8d:f3:40:6b:e2:95:79:53:22:00:
         cd:95:2a:95:7d:72:d4:da:c0:dc:e1:21:3a:d3:ad:df:fc:ea:
         d4:4a:cd:1c:d4:29:0b:8f:14:a0:5c:0f:a3:a0:c5:b2:17:b2:
         47:b4:ec:26:5a:c0:3b:ff:fb:fe:c9:41:19:05:85:1e:c2:df:
         d3:fb:97:9e:90:d7:bf:6d:bc:61:63:b6:bf:3a:8e:53:07:53:
         c4:cf:d3:76:4a:78:b0:82:42:06:89:15:14:7a:32:73:71:91:
         3b:8b:4c:e4:81:c4:26:d8:68:d0:77:71:69:19:d7:7b:d3:8c:
         3f:73:19:3d:bf:6b:1f:a5:98:fb:5e:12:e0:bb:8f:0a:d9:43:
         ff:22:0a:fc:ff:09:c1:2c:f2:c7:85:ef:7b:c6:15:96:2a:46:
         7e:8f:9a:58:65:20:c5:97:65:eb:8f:0b:7a:65:ad:8f:29:7e:
         50:a8:65:f4:f4:b8:c8:fc:f4:7b:6a:97:3e:4c:e0:14:4a:12:
         4c:4a:07:2d:42:19:f3:e6:97:44:c1:1a:b2:1d:f1:85:64:bd:
         f6:a3:be:3d:b2:9c:ac:63:07:65:80:51:b5:e9:97:8c:34:6e:
         e5:f7:e6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOQwxmNx3wYZDkcw4xaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1
OTVmNzYwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
EygxZTRjMDhmMjcwNGI4YjNjODI0ZDg3MjU3ZGEyYzZmOTkwZTljMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTxgxb+EAchayHnaCXVxcVg8C/Rh
xbCkJtrYCCQIVhgrYKOa567VKaSPu11mo18/Ru+ZlIX9A7FZi4UE8SQi/v7Fut3R
6JHcf81XxhyCOAuNAtQnjYnd93kTW24gF9yYIMscobbxFUL6P+Evp1MTmLquz/Oj
tWcMHH/AO4ECqwZ9NHxRsL8/tJMgAEABOtiiL4iHWJJ4qAOY3udqbkP1bdzCwpzZ
Wn/0DbXpIcczq0A8fXwIPKt2Iq4iOFGTPykzPNHLxIIKlFBwRx6Vvl0fWNNTMUok
fOHOqYStlPhXP1ZfBixSQFFFEwcOqzTHDRhYA/ZHDdKrTyttTh1s3sTz8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5MCPJwS4s8gk2HJX2ixvmQ6cFBMB8GA1UdIwQY
MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct
YjgyYjBlZDJkMzIzLzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz
LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPEgh1oU
69BXOlSQhhf/7wRAc4aVnjQt3OuN80Br4pV5UyIAzZUqlX1y1NrA3OEhOtOt3/zq
1ErNHNQpC48UoFwPo6DFsheyR7TsJlrAO//7/slBGQWFHsLf0/uXnpDXv228YWO2
vzqOUwdTxM/Tdkp4sIJCBokVFHoyc3GRO4tM5IHEJtho0HdxaRnXe9OMP3MZPb9r
H6WY+14S4LuPCtlD/yIK/P8JwSzyx4Xve8YVlipGfo+aWGUgxZdl648LemWtjyl+
UKhl9PS4yPz0e2qXPkzgFEoSTEoHLUIZ8+aXRMEash3xhWS99qO+PbKcrGMHZYBR
temXjDRu5ffmeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:47 2025 by rpki-client