
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          GqjjKD04OJQK6g8fYnMMz4g+edrZviZiHUX0UhLj0QM=
Subject key identifier:   F4:D9:85:97:F1:1D:C5:42:14:58:1F:32:65:6F:88:6D:D7:B7:1B:C3
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       019A4E18EDD721058876595C7C1095614400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          099F
Signing time:             Tue 04 Nov 2025 09:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:47 +0000
Files and hashes:         1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: V5Ecdyic8i8p0yIom3DqubU929PRKPp0KiLiITfo6Ak=)
                          2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
                          3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=)
                          4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
                          5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:ed:d7:21:05:88:76:59:5c:7c:10:95:61:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Nov  4 09:00:47 2025 GMT
            Not After : Nov  5 09:00:47 2025 GMT
        Subject: CN=f4d98597f11dc54214581f32656f886dd7b71bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:2c:13:e9:d8:04:5c:59:24:27:e7:ed:ed:
                    9e:7b:19:a5:42:a0:82:73:c1:2b:9f:ca:73:08:c6:
                    f1:2c:d4:a9:a5:04:57:c8:ef:21:f2:94:fd:96:27:
                    da:2f:02:c3:30:f2:22:98:25:7d:d6:74:8f:47:74:
                    c2:78:1d:66:55:87:94:cf:49:0f:5b:c8:a1:d9:cf:
                    be:6f:7f:60:ce:69:ec:2b:97:b9:88:0d:1b:93:c1:
                    21:ae:a2:12:fa:7d:f1:e9:b9:6d:bb:60:96:04:54:
                    bd:78:de:7d:f6:ee:24:b0:64:30:b9:60:a8:cd:3b:
                    eb:d3:c3:1f:1e:ba:2a:f0:65:22:f2:e2:1b:5c:b6:
                    45:e1:d8:a0:32:0f:6f:65:71:48:d7:d4:6e:44:2b:
                    a8:5d:7d:53:50:4c:35:74:c3:9c:b4:2c:6f:58:c1:
                    2d:b1:a7:6e:bc:3e:ef:c7:6f:ac:7a:ef:88:d9:9f:
                    1b:ac:1d:e7:c0:a2:ae:b7:d3:a7:52:33:df:ec:4a:
                    1a:14:e4:e7:d8:77:2b:62:0a:64:9f:be:4f:56:98:
                    04:24:bf:02:14:2c:bb:0e:09:ed:52:8e:f1:1d:be:
                    79:96:8b:fb:5c:ba:10:60:b0:14:ac:93:11:bc:23:
                    a2:88:e8:6f:ce:bb:34:64:d6:38:0e:76:b4:ba:00:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:85:97:F1:1D:C5:42:14:58:1F:32:65:6F:88:6D:D7:B7:1B:C3
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         99:d2:b7:0f:73:09:a2:ca:e2:68:1f:81:8c:97:ca:87:89:43:
         f6:87:3b:1e:88:43:63:81:91:77:9b:ee:b8:73:bc:f7:b7:c9:
         d8:2b:ce:0f:f6:f4:f2:aa:5d:12:bc:82:c1:a7:d0:77:1c:f5:
         38:62:d1:5c:2a:2b:34:17:48:82:48:24:13:f4:99:53:0d:0d:
         c3:35:1e:ee:db:c0:03:64:95:2a:8b:a5:11:87:c0:b7:da:53:
         e9:b9:0c:a8:5c:58:a7:7d:c1:70:09:69:60:7f:7c:1d:83:7d:
         2c:e3:de:8c:b6:c7:1b:39:b3:d4:01:06:b5:a9:17:c2:52:7a:
         db:e1:c9:96:e0:91:92:5b:c4:7f:2f:10:27:4c:16:3b:d6:f3:
         86:b5:31:6c:8d:58:17:18:35:5c:49:4a:c8:dc:60:bf:e0:75:
         24:ca:b8:36:ff:16:55:c4:69:68:f8:23:76:80:79:3a:25:7a:
         7b:b0:d5:fc:94:cd:f2:b9:b1:29:e6:10:49:e5:d5:b4:56:60:
         d0:b8:89:0a:2b:c6:e6:f0:f2:4f:0c:d6:e8:51:cc:ab:bd:ac:
         ae:42:b8:d1:a8:e4:87:e1:dd:5f:54:f7:11:e6:00:c9:3a:59:
         6e:27:c3:53:59:c6:e5:d8:1d:64:0c:3c:3c:6e:12:27:42:de:
         fb:8f:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:51:14 2025 by rpki-client