
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          Ee4LVABNyNICljiYqLlCP3TFrZpdhe1ovse9jCozHBo=
Subject key identifier:   B8:2A:3C:A2:AA:EC:4A:97:1D:B1:E1:DA:65:AF:EE:C4:D1:89:A9:77
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       019A4E4FC64C30D1A98F75072E39D9A0357C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          103F
Signing time:             Tue 04 Nov 2025 10:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:42 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: YuY4xZhhvZkK33/wGYXnwIaXVduAYO6g8HIKVzdV5p8=)
                          2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:c6:4c:30:d1:a9:8f:75:07:2e:39:d9:a0:35:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Nov  4 10:00:42 2025 GMT
            Not After : Nov  5 10:00:42 2025 GMT
        Subject: CN=b82a3ca2aaec4a971db1e1da65afeec4d189a977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:b5:58:d6:17:16:7f:21:e8:b5:0a:15:ae:
                    91:fd:c3:49:85:e5:aa:24:e2:3f:f7:84:65:60:43:
                    92:c6:cc:7f:4b:41:fd:3b:94:a9:a1:e1:7c:67:61:
                    25:6e:33:6b:1d:cd:00:91:a8:bb:4c:44:fb:13:59:
                    72:0c:ce:6e:4d:3c:22:49:ff:d3:7b:1b:ed:6a:7a:
                    9f:51:4b:82:49:a2:cb:fe:82:2e:5d:16:f8:14:2c:
                    f9:b6:c4:ff:63:b7:b3:2f:7b:78:a2:c6:b3:5b:74:
                    47:cc:0c:c2:ae:93:f4:07:2f:f7:f2:82:1d:af:d9:
                    eb:04:0b:d7:dc:f6:10:3a:41:eb:fb:c5:79:62:19:
                    ee:d5:c9:1d:48:9a:3d:c8:11:28:b1:74:8d:33:27:
                    2b:df:72:fd:8c:01:a9:9c:e7:e7:c6:0b:38:33:a2:
                    e6:a1:19:2a:b1:15:68:44:b8:f2:0b:89:e4:86:ed:
                    26:b1:75:1b:9d:94:93:99:65:20:eb:50:c4:55:4b:
                    4a:ac:ab:a6:c6:57:66:a8:59:33:cc:79:d4:6e:36:
                    f9:72:36:1a:f0:29:0d:ae:fe:d2:13:ca:44:6b:82:
                    7c:a2:a0:d9:47:41:cf:74:b5:82:60:a7:f4:1a:37:
                    19:81:fd:39:07:07:ce:5a:b2:11:5a:e5:61:81:7a:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:3C:A2:AA:EC:4A:97:1D:B1:E1:DA:65:AF:EE:C4:D1:89:A9:77
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         21:2f:63:9f:89:b8:78:f3:90:a6:85:3c:a6:87:59:66:88:f8:
         4e:46:91:e9:85:a1:05:90:6d:ec:f8:c5:86:c7:76:9a:6d:af:
         e2:d1:e0:d7:45:d1:3c:57:f9:8a:89:3a:9e:94:cc:8c:1b:a3:
         81:17:79:18:c6:0f:6d:67:bc:d4:b4:20:00:fa:2d:5e:4e:1e:
         01:b7:8e:6d:38:05:2f:83:60:a2:4f:53:4a:e7:93:e7:c0:de:
         e3:a0:3e:4d:e2:88:88:9f:60:3e:dd:43:c8:56:dc:2b:be:e9:
         a6:e9:49:50:2e:75:41:aa:85:b9:96:91:f2:f6:53:0c:99:bd:
         3e:65:47:02:53:87:98:24:b4:e0:3f:06:f8:ea:b4:22:4a:b7:
         a8:96:3d:05:65:e9:7b:e3:a3:6a:05:97:ee:28:85:85:9c:93:
         4d:c9:8f:77:33:f8:8c:92:b9:28:b4:28:75:ae:59:d0:f1:69:
         be:60:6c:04:88:a5:7f:6a:c8:dc:fc:49:6c:4b:3a:09:33:fe:
         27:8c:66:cf:e2:15:b5:1c:e0:70:4b:0a:57:2c:4c:ad:ea:ee:
         80:c4:c8:87:df:37:e8:cd:ba:87:f4:81:f6:03:59:14:9b:63:
         6f:d7:42:77:0b:ce:65:8d:32:b3:5c:33:06:95:28:95:2b:19:
         64:bb:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:28:23 2025 by rpki-client