Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File:                     SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier:          u/Lb3SnXEn9zCRURc0gTjUcP602kaAWADf4/+ze4nPA=
Subject key identifier:   E5:3A:8D:D4:54:38:3B:3D:81:86:8E:87:B7:AF:9D:49:0B:DF:F0:A6
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer:       /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial:       019A5075158094BCC7362CB99CB586805181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number:          0E0D
Signing time:             Tue 04 Nov 2025 20:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:41 +0000
Files and hashes:         1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
                          2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: Je+3zOa5xsFVNIrA22/KGABbWDWfW+U5Bkum79gS3vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:75:15:80:94:bc:c7:36:2c:b9:9c:b5:86:80:51:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
        Validity
            Not Before: Nov  4 20:00:41 2025 GMT
            Not After : Nov  5 20:00:41 2025 GMT
        Subject: CN=e53a8dd454383b3d81868e87b7af9d490bdff0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:91:89:09:ce:f7:e1:c3:f1:6d:2b:08:9b:c0:
                    37:36:1b:04:ec:49:5d:09:41:9f:f6:17:e7:81:26:
                    9e:de:a1:9b:ef:44:4f:f3:2d:bb:65:4e:c9:aa:74:
                    ac:1d:ed:9d:c8:c5:4d:76:0b:39:e2:d8:2c:40:07:
                    00:20:26:ca:0b:b3:86:a4:45:9c:9a:d1:8d:69:b9:
                    3f:b0:00:c4:9d:8f:43:b0:61:1b:fa:88:99:e2:47:
                    26:38:d1:64:ac:4f:6c:63:44:23:9b:40:3d:dc:60:
                    02:af:40:b9:e3:a1:a7:04:65:0f:bc:eb:d5:a5:8a:
                    1d:f3:8e:22:a3:0c:0b:95:fb:c1:7b:4d:35:77:c3:
                    18:9a:d2:04:2d:c0:ee:23:ac:b9:d6:38:9b:d0:4e:
                    65:29:8e:e3:7d:ee:15:c4:ea:c8:23:84:0a:a1:57:
                    b2:12:52:43:2f:de:d0:3e:09:28:f0:51:42:5f:3f:
                    bc:0e:c7:be:d5:16:e9:bd:13:8a:10:0b:bd:dd:bb:
                    5a:54:f7:c2:8b:b0:47:41:4c:8f:ac:45:e1:50:25:
                    b9:8f:09:cd:9b:15:ba:e5:9f:4c:1f:fb:d4:ca:a4:
                    d1:fa:c9:df:3c:34:6e:7c:ad:85:05:93:18:8b:93:
                    70:5d:87:13:8d:bd:88:40:03:67:3e:85:b3:4e:92:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:8D:D4:54:38:3B:3D:81:86:8E:87:B7:AF:9D:49:0B:DF:F0:A6
            X509v3 Authority Key Identifier:
                keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:7f:0a:e8:7b:16:e1:66:85:10:f8:a7:eb:4f:c5:f4:fa:
         75:74:dc:cf:a1:84:9a:55:cc:9d:81:30:68:39:be:93:c2:39:
         60:65:50:6c:f9:1d:17:76:51:88:11:0d:57:64:4d:c2:e1:89:
         0d:6a:ba:be:3a:ef:f1:d7:6c:8e:d9:49:e8:74:1c:a9:29:4e:
         54:e8:dc:20:e4:7b:f3:3f:a3:da:fa:2f:dc:48:56:39:af:a8:
         e5:45:d0:e6:fe:a4:1f:e0:f0:5c:73:12:5a:f0:67:98:25:42:
         56:e8:31:0b:88:e1:4d:48:a2:5f:ae:eb:b7:08:d1:db:05:3c:
         ff:18:48:94:a5:bb:79:8e:0e:83:83:f3:01:bc:13:e6:8e:a3:
         6b:92:de:f8:e5:f6:ea:4b:6b:d8:de:db:d7:3b:05:41:61:38:
         a6:fd:fb:bf:dd:dd:0f:17:0f:05:7e:75:18:72:ee:16:78:e0:
         9a:bc:46:71:34:8d:bc:a8:c1:bc:d6:1a:ec:d3:e5:02:d2:5c:
         20:ba:8b:74:f8:13:0f:06:dc:c1:49:a1:7a:e2:d9:84:87:f8:
         5d:3a:1c:99:c1:11:97:b2:d4:9e:26:b1:9e:66:b4:95:5d:ef:
         b6:c0:63:52:90:0b:61:cb:05:d7:89:61:a1:cf:ee:ef:06:b1:
         0d:f8:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:53 2025 by rpki-client