Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          QvAaoYKJ5LZQr7kCvzhjxNoaoZjXzKTwhbCwYMpBU14=
Subject key identifier:   5B:98:9C:EA:84:2B:5E:95:8E:CE:0E:62:FF:88:E9:92:CF:07:DA:09
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       019A5006FBA992A30C9445BECC0ECD328349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          12C1
Signing time:             Tue 04 Nov 2025 18:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:26 +0000
Files and hashes:         1: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (hash: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=)
                          2: FGboOzE5w8Avx6zvXiGJurlcXzU.roa (hash: ME54k9XxSNDAp5P0H67LsrOuZ6Ebe7/DSYtgtZypMoY=)
                          3: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (hash: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=)
                          4: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: 1Ga6IbR1+ZbuOW3i5GeJJbOL+ckdATrRbQxE87TSP6g=)
                          5: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (hash: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=)
                          6: od5OSHsrRHxJrICxzwVu43I_RWY.roa (hash: EQRBns0cqYxWGEdIIr3QIm5kW2CuUKF+BPL8pSHvs8Q=)
                          7: p03EoH5XFva0OIfQnxqffNm4ZvE.roa (hash: Wew8is0Ow617QiWMc1vuUJjZYXt68/dM84EY8eQITFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:06:fb:a9:92:a3:0c:94:45:be:cc:0e:cd:32:83:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Nov  4 18:00:26 2025 GMT
            Not After : Nov  5 18:00:26 2025 GMT
        Subject: CN=5b989cea842b5e958ece0e62ff88e992cf07da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:ce:3c:3a:96:8e:97:ad:a9:a2:4d:3e:e9:
                    0d:9e:37:42:4a:e6:7c:9a:32:8f:e1:52:95:32:f2:
                    00:b6:74:4c:d5:ec:d5:f0:38:fb:18:5b:7f:6a:d6:
                    e3:1a:62:27:fb:20:f5:73:32:ac:40:5c:03:2e:da:
                    cb:df:f3:f2:2c:77:be:4f:ab:22:66:8b:d1:ac:6a:
                    5e:ad:dd:dd:8f:37:b2:7f:0f:4a:4b:31:ab:fc:58:
                    62:4a:b8:e2:a3:c9:0b:7a:fa:9d:49:bc:11:4d:a7:
                    70:26:17:75:07:5e:ff:ad:1d:90:48:2b:03:71:0a:
                    36:82:4f:0b:66:9a:e0:5b:08:03:9d:29:95:85:68:
                    9d:f3:9f:ab:e4:fd:56:e3:c9:42:37:57:74:06:66:
                    d2:48:69:0a:d1:c2:98:18:e7:be:a0:21:d3:56:50:
                    65:a7:65:d6:63:57:a6:fc:08:8a:5b:b9:2c:97:ed:
                    75:23:51:79:18:f5:d0:4c:eb:00:e8:cb:db:8f:fb:
                    2e:41:ea:f5:62:80:16:35:bd:21:42:84:a6:61:b2:
                    4a:32:e8:e1:10:7c:3e:6c:d5:8c:d5:73:d2:aa:ba:
                    92:c7:ce:6e:b9:0f:3e:18:97:e6:f6:85:34:a6:c3:
                    34:eb:1d:46:bc:6a:df:ce:94:c4:3a:ee:84:ed:04:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:9C:EA:84:2B:5E:95:8E:CE:0E:62:FF:88:E9:92:CF:07:DA:09
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:72:92:2b:4b:ab:fb:4f:09:f3:8b:8b:57:ff:4a:08:84:
         75:6f:46:36:d4:16:9a:6f:6c:16:12:c8:5a:4a:83:c6:36:b1:
         0f:62:af:7a:ed:71:02:4c:c3:6e:87:fe:f6:1c:77:39:36:42:
         a8:60:51:68:93:fe:89:99:fb:2c:65:80:f7:10:64:f8:96:e1:
         73:e9:1b:61:71:bc:ee:a1:f9:06:a1:5d:c2:45:60:dd:61:f9:
         db:98:7e:51:d4:9c:71:fd:d1:3f:bd:9f:9b:cb:06:f4:2c:49:
         c6:c4:23:fe:aa:f7:66:94:ce:b6:0e:10:b6:1b:9f:ee:a4:06:
         e0:da:c1:67:31:a5:1a:45:8c:f5:e4:f5:d1:ab:6c:7b:06:31:
         11:b5:9a:e2:e6:3e:a1:d5:91:e5:93:62:a1:d6:37:e6:34:ac:
         d6:f2:b2:f9:17:51:87:a5:ab:fb:f5:df:6e:b1:76:4f:59:9b:
         6c:2a:8e:ab:c7:91:7d:e1:8c:37:0b:74:d9:f8:4f:31:5a:ab:
         b7:de:23:4f:dd:f4:a4:ff:0d:43:6d:d7:d4:5f:0f:bc:76:21:
         b8:ca:93:f4:fe:53:14:80:80:d3:c1:9e:48:97:31:fa:61:de:
         c1:00:8d:51:5c:26:4c:eb:2b:98:54:7c:53:07:71:4c:a2:f5:
         d5:be:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:53 2025 by rpki-client