Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          oI/zxnPlK9kNQv9/OX6VkS4FYuphCaQcgKjkb/+Qo+Q=
Subject key identifier:   1F:06:D2:C7:18:AA:F8:57:D3:98:47:A0:29:D6:BD:11:29:4C:1E:02
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019A4E4F9075212011DBB90A82F1A6F43DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1716
Signing time:             Tue 04 Nov 2025 10:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:28 +0000
Files and hashes:         1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=)
                          2: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=)
                          3: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=)
                          4: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (hash: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=)
                          5: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (hash: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=)
                          6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 6sCC+LHvgdCJQXymXo8I3g9A78T/sUiprqbdVK51Ndg=)
                          7: zSyEja7s6-FcC2A4cfsL-HNjtEE.roa (hash: 2GY8yor4l2LD8bv0Z/SVmO/KolDg2zRMpa7nMwkf0ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:90:75:21:20:11:db:b9:0a:82:f1:a6:f4:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Nov  4 10:00:28 2025 GMT
            Not After : Nov  5 10:00:28 2025 GMT
        Subject: CN=1f06d2c718aaf857d39847a029d6bd11294c1e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:9e:79:92:39:7b:31:23:1f:d9:c8:38:bf:
                    bf:7f:7f:42:ba:50:c4:ae:ac:87:7d:d6:92:20:83:
                    9a:74:b2:26:6f:ed:7e:07:fb:79:45:a7:66:9f:8c:
                    66:5c:90:3b:a2:63:ef:46:6b:2b:3e:aa:bf:57:e1:
                    e1:12:e0:34:19:e8:de:27:5c:a5:87:ca:f3:83:62:
                    d6:bf:bd:92:ee:cc:f3:da:32:bf:61:65:1a:4d:ac:
                    8c:93:3e:51:0f:a4:44:33:f9:9e:91:9c:0b:fd:6e:
                    25:7f:c3:d8:df:fd:b8:a6:c3:30:28:a1:57:ad:d2:
                    00:d1:08:35:02:8c:99:51:f0:c0:6b:5b:eb:b5:d1:
                    ec:7d:fe:0d:65:90:08:55:d1:13:25:bc:f1:88:e3:
                    9b:51:b2:35:26:f7:1b:4e:ee:64:38:a2:b5:f2:7c:
                    a3:24:68:40:76:72:70:6d:f2:11:3d:e6:46:76:a8:
                    5e:22:7a:aa:3e:ac:ac:12:b3:c4:63:59:aa:24:9e:
                    33:a6:be:5b:ef:68:3a:51:73:7a:78:84:ba:49:2a:
                    51:a0:d1:b0:8a:4f:f3:e4:79:d7:35:dc:d6:b3:64:
                    1d:be:34:96:b5:2c:ca:c7:22:68:b8:4f:ce:79:c2:
                    3f:b8:21:78:6a:26:fb:35:77:96:26:53:83:e3:84:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:D2:C7:18:AA:F8:57:D3:98:47:A0:29:D6:BD:11:29:4C:1E:02
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:02:88:1d:00:2c:ee:d7:c9:a3:e7:bd:cc:34:91:ec:4c:
         e4:4c:98:d8:90:6b:37:f1:32:df:f5:d8:8b:f8:0b:b9:a8:51:
         03:5c:3e:cd:1e:db:56:6c:8b:e9:10:39:8a:df:09:b2:d8:2a:
         65:31:ca:a6:db:2b:7f:83:0c:00:38:63:b1:d1:2f:90:48:7b:
         5d:61:b7:c6:ed:f6:2a:b9:4f:db:ea:c3:97:33:bf:0d:a1:40:
         41:5f:58:70:2b:de:f5:58:ec:b1:e4:58:a4:99:a0:b0:6b:3f:
         d3:33:48:94:ca:62:60:b6:8d:5f:7c:da:ad:d6:40:ee:d3:5c:
         48:06:d8:7f:85:db:1e:74:0c:fc:d3:57:2c:ce:ef:26:0c:51:
         ca:77:60:4a:1c:be:7a:ef:a7:a7:82:22:21:58:c9:b4:2d:32:
         62:6e:8a:f6:e2:78:d3:e1:55:8e:f4:c6:cf:ea:38:9b:bb:8e:
         e5:0f:87:1b:93:ef:6d:15:6b:01:ca:8e:12:25:b9:22:f1:cf:
         b3:69:df:d0:10:0d:a4:7c:89:9d:85:17:0d:8c:26:b5:c0:0a:
         d6:44:b6:7c:b3:d4:ec:4d:e6:54:26:a2:e9:51:2f:64:2b:d4:
         e2:18:10:4f:89:6f:41:7c:50:9a:ea:70:bc:0b:0d:3f:c0:df:
         37:14:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:07 2025 by rpki-client