Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          +ugptIScaAyxrcgqeCrsl6k15zG/BqgoTAqVShRJFmQ=
Subject key identifier:   E7:A5:EA:40:56:48:18:04:A5:F8:30:E1:71:54:81:FD:EF:CF:A7:96
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019A4E864301590DC78ACD66188D86AEFCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          07F3
Signing time:             Tue 04 Nov 2025 11:00:13 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:13 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:13 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: WdIvDP43ESRwIiQdavL5FgQf7CdXrOODDuqpfhqqP2Q=)
                          2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=)
                          3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=)
                          4: HANmGqWDLzD8xzgH1N2qbf2RpVU.roa (hash: w2O64hJj+mcPhVqUkjApVC5JtsigQzHQewLezmoT9do=)
                          5: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:43:01:59:0d:c7:8a:cd:66:18:8d:86:ae:fc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Nov  4 11:00:13 2025 GMT
            Not After : Nov  5 11:00:13 2025 GMT
        Subject: CN=e7a5ea4056481804a5f830e1715481fdefcfa796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:28:5c:32:9c:d9:6f:ee:ba:1c:c2:ce:ad:
                    22:73:a2:0d:c0:78:d7:01:11:c1:9c:9c:62:89:bc:
                    4b:7f:fc:f0:36:6f:8f:d3:8c:31:10:45:1d:1c:55:
                    8d:46:fc:fa:8d:ca:04:1b:02:76:41:80:6d:64:ac:
                    47:dc:69:bf:50:01:a1:ce:3d:1d:36:52:4a:e4:07:
                    94:40:37:27:12:93:92:60:17:ed:1f:cf:b2:94:3a:
                    d9:4f:a3:d7:a9:84:de:d2:5e:29:01:ac:39:54:42:
                    b7:60:94:64:81:ee:4c:47:a7:d4:ea:27:f7:fd:a1:
                    83:17:04:eb:95:cf:33:9c:9b:a2:10:0a:4a:f2:73:
                    2e:6f:b7:c8:57:2c:0d:43:54:40:83:f3:c7:33:72:
                    38:33:ac:66:81:9e:46:10:a7:99:64:c0:be:9a:13:
                    ed:a1:5d:db:93:14:6e:fa:9a:b1:4e:ea:7f:a1:95:
                    6c:34:d8:32:c5:54:fc:c3:79:44:ae:ef:4c:98:c9:
                    db:94:2a:a7:b3:4e:b0:f6:56:44:8d:e6:b9:86:11:
                    a9:89:86:73:5f:af:09:cf:eb:08:72:de:f7:d7:0b:
                    9d:15:1b:1b:65:d2:05:2c:2a:4f:26:fe:cf:ca:05:
                    64:77:11:69:ae:35:86:af:fd:68:f7:32:ae:cc:f5:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A5:EA:40:56:48:18:04:A5:F8:30:E1:71:54:81:FD:EF:CF:A7:96
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:73:2f:1a:4d:26:96:9b:7d:89:c0:02:3f:62:ff:43:2a:
         c3:e4:81:8c:dd:e8:1a:75:df:85:d3:ff:3e:90:51:e9:91:48:
         b8:19:16:ef:c5:ab:28:a1:fb:08:53:16:e3:08:6f:2b:3c:73:
         9f:76:ba:e6:b3:a0:f5:8c:97:a0:a4:04:7c:9e:9c:a6:31:1f:
         02:66:f7:e7:2b:8d:8a:32:36:ef:e0:ad:1d:50:8c:56:dd:e9:
         20:23:7d:07:cc:89:b8:60:9b:a8:78:1a:0a:fc:1d:d2:79:20:
         c0:78:d0:fc:ba:6b:96:7a:d1:e9:d2:35:bb:4c:5f:fa:f3:e9:
         36:b7:8d:6d:3d:23:3f:b1:b0:77:f0:e5:31:f7:d9:f5:6a:a1:
         bc:a5:60:84:34:52:47:df:86:ef:8c:d2:33:ad:77:26:40:88:
         e7:54:f3:76:fe:80:0e:6d:f2:c0:b4:5a:fb:5a:70:b6:27:02:
         eb:57:68:38:4b:f3:c1:ab:f5:5f:c3:34:50:c4:07:af:87:37:
         71:12:6e:ee:08:72:d6:98:96:e5:8b:e5:01:2a:cd:b3:4f:ea:
         e8:af:2a:36:0b:71:4a:74:80:f3:7d:61:df:ea:07:7b:27:f6:
         a1:5c:c6:80:7d:a7:7b:fd:a1:13:c3:8b:38:c7:8b:91:5a:7f:
         3c:5e:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:17 2025 by rpki-client