Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier:          xO2lZrTK6H5ORH7l4BHbEg4QW0D+B8Jk4EgizKYbX7c=
Subject key identifier:   83:60:13:65:22:A8:1B:F5:A8:B8:5C:D2:C5:A2:65:4B:0B:38:E2:F1
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer:       /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial:       0199FCC663C734517D7954DE9D55042DE333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number:          0910
Signing time:             Sun 19 Oct 2025 14:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:23 +0000
Files and hashes:         1: L3qEBBzeJh8D6UqzEEk-9tnLcMA.roa (hash: shN2h6IdPkthKGJ1t7rh4Tc86Qf0XZxCIaY0/EgLJfA=)
                          2: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
                          3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: n5Mwac+/DlTWCndy5j3kwWXM9jCNIm031aUjyFu9+Jo=)
                          4: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:63:c7:34:51:7d:79:54:de:9d:55:04:2d:e3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Validity
            Not Before: Oct 19 14:01:23 2025 GMT
            Not After : Oct 20 14:01:23 2025 GMT
        Subject: CN=8360136522a81bf5a8b85cd2c5a2654b0b38e2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:9a:18:b3:c4:2f:56:b8:36:7e:5b:da:a2:
                    51:ad:69:2a:60:fa:08:10:43:52:8c:1b:dd:76:42:
                    96:3f:da:d2:04:d3:90:4a:f3:94:6c:c6:af:35:a6:
                    5e:2f:e0:92:81:9e:3d:4c:e1:98:c9:e5:4e:ab:7f:
                    bb:c0:3c:67:09:0c:3f:da:d5:cb:7f:59:2e:4f:bd:
                    9b:05:74:9f:60:3c:97:86:ce:9a:72:6f:89:33:f3:
                    ad:d5:c7:f4:71:91:97:c2:9c:0d:04:44:f5:c8:cb:
                    e2:e2:6d:1f:23:33:2f:81:cf:a8:a0:2d:50:07:4f:
                    f5:1e:73:ad:83:0d:46:b9:6b:9c:04:e5:6c:3f:9d:
                    82:96:2b:6b:11:9d:e6:58:21:fb:95:29:e1:45:bb:
                    59:54:97:39:06:2a:8f:bc:a1:34:4b:39:45:0a:a2:
                    22:74:ab:12:29:05:20:1c:fb:d1:a5:e8:88:98:87:
                    09:f2:1b:28:1c:88:9d:51:41:c6:da:51:95:c4:1a:
                    65:ad:88:b0:5c:af:f6:9b:f3:f6:d7:99:1d:2d:b5:
                    1b:ff:25:f1:f8:88:5b:26:d1:be:6e:58:74:8f:ad:
                    e4:c0:5e:ba:9e:75:f4:f6:9e:24:f2:05:1d:29:c9:
                    b2:06:90:b7:06:e3:61:f7:8d:38:98:64:bc:36:24:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:13:65:22:A8:1B:F5:A8:B8:5C:D2:C5:A2:65:4B:0B:38:E2:F1
            X509v3 Authority Key Identifier:
                keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:bc:64:48:c2:b1:d4:3b:78:bd:96:9a:44:49:09:03:d1:
         16:fb:ac:41:92:5b:4a:db:a0:ef:87:9d:80:88:db:da:0f:0f:
         c3:06:55:d6:45:22:98:eb:b9:8c:de:b8:7d:fc:26:1b:45:ea:
         41:41:94:7e:dd:6b:76:f5:3b:77:4f:6c:17:3f:4b:a7:7c:87:
         87:ed:51:c3:b2:6a:4f:ac:d4:ec:db:04:c9:6e:d5:dc:18:29:
         57:e0:2d:31:f0:80:ab:30:b2:ef:d4:5d:d5:29:20:2e:45:f3:
         04:66:93:34:ef:eb:b1:e8:54:24:c6:a2:83:eb:81:a9:54:f3:
         87:88:b7:20:47:82:47:0b:c6:8d:ad:66:56:b4:56:5b:33:5c:
         1f:eb:10:15:cd:03:05:11:d5:30:71:d1:d0:77:45:6b:c2:5a:
         77:46:60:12:61:7c:8a:0e:1c:e8:a0:d3:c3:03:fd:85:2a:ff:
         8e:85:51:f9:08:a6:02:e4:72:33:cf:f7:36:b3:35:d5:12:8b:
         14:73:89:84:b0:26:fe:ea:84:7e:5b:af:f3:d4:d0:25:97:5b:
         51:e6:46:c8:2f:b8:0a:69:2e:d6:4b:d0:94:29:13:e6:5e:7c:
         bc:96:94:e8:65:4c:f8:75:20:fc:88:d3:1a:91:ba:3f:db:20:
         e2:cf:f8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmPHNFF9eVTenVUELeMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjUxMDE5MTQwMTIzWhcNMjUxMDIwMTQwMTIzWjAzMTEwLwYDVQQD
Eyg4MzYwMTM2NTIyYTgxYmY1YThiODVjZDJjNWEyNjU0YjBiMzhlMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsSaGLPEL1a4Nn5b2qJRrWkqYPoI
EENSjBvddkKWP9rSBNOQSvOUbMavNaZeL+CSgZ49TOGYyeVOq3+7wDxnCQw/2tXL
f1kuT72bBXSfYDyXhs6acm+JM/Ot1cf0cZGXwpwNBET1yMvi4m0fIzMvgc+ooC1Q
B0/1HnOtgw1GuWucBOVsP52ClitrEZ3mWCH7lSnhRbtZVJc5BiqPvKE0SzlFCqIi
dKsSKQUgHPvRpeiImIcJ8hsoHIidUUHG2lGVxBplrYiwXK/2m/P215kdLbUb/yXx
+IhbJtG+blh0j63kwF66nnX09p4k8gUdKcmyBpC3BuNh9404mGS8NiT++QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINgE2UiqBv1qLhc0sWiZUsLOOLxMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActe8ZEjC
sdQ7eL2WmkRJCQPRFvusQZJbStug74edgIjb2g8PwwZV1kUimOu5jN64ffwmG0Xq
QUGUft1rdvU7d09sFz9Lp3yHh+1Rw7JqT6zU7NsEyW7V3BgpV+AtMfCAqzCy79Rd
1SkgLkXzBGaTNO/rsehUJMaig+uBqVTzh4i3IEeCRwvGja1mVrRWWzNcH+sQFc0D
BRHVMHHR0HdFa8Jad0ZgEmF8ig4c6KDTwwP9hSr/joVR+QimAuRyM8/3NrM11RKL
FHOJhLAm/uqEfluv89TQJZdbUeZGyC+4Cmku1kvQlCkT5l58vJaU6GVM+HUg/IjT
GpG6P9sg4s/4YQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:12 2025 by rpki-client