Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          CSYUqG6rlIZnsGND+ivBJ40J42A3EXx6JPLF3Nc9oqI=
Subject key identifier:   60:16:8D:64:25:C5:22:56:E0:E7:21:EC:27:F1:3C:17:8E:D7:3A:BD
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       019A5307B681922A01237239A6B58FA8A537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          170F
Signing time:             Wed 05 Nov 2025 08:00:05 +0000
Manifest this update:     Wed 05 Nov 2025 08:00:05 +0000
Manifest next update:     Thu 06 Nov 2025 08:00:05 +0000
Files and hashes:         1: 5QH7uoE58dfucr5l0cknmb5_6nM.roa (hash: am7mbJzCmfdx1pMjvSb/IknD/TSfo87lHt1mL7pdZCQ=)
                          2: U9TChuEsKrileu5LPlClTPiblHw.roa (hash: iW3rj/qTsfRQaeDi2vFF7FLZOCFmBBPXZ/tRsBWwt4A=)
                          3: botr4mqTB6e3Z366JpSN6qT4H4s.roa (hash: aKjhoPVp3MyiJCkQJ3KF625JVgfmfjs5tdeStuyIYnY=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: gruWMWBbGrBae35y/lpL4WSYBVFsvFtfZHG8Pe17kuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:07:b6:81:92:2a:01:23:72:39:a6:b5:8f:a8:a5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: Nov  5 08:00:05 2025 GMT
            Not After : Nov  6 08:00:05 2025 GMT
        Subject: CN=60168d6425c52256e0e721ec27f13c178ed73abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:4e:2b:b7:1a:19:e2:8d:9b:d4:d8:a2:9e:
                    ab:94:fd:44:35:19:cf:1b:28:15:44:59:af:bf:d9:
                    fa:09:2d:f6:80:ac:e7:66:1e:c1:9b:bb:37:23:35:
                    90:8e:a3:f4:3e:af:70:e9:a5:16:ed:92:2b:b5:1c:
                    0d:cf:8d:d9:87:f5:fd:5f:e9:24:1b:6c:9b:7f:da:
                    ff:d5:c9:37:30:0c:b3:7f:b7:9d:23:80:0e:6f:34:
                    ac:3a:23:0d:4e:67:39:5d:bb:e9:5d:55:84:42:25:
                    7d:46:bb:54:6e:7f:0e:e7:1f:ae:f5:35:2d:50:21:
                    77:fa:50:1c:1f:59:f1:11:2b:15:84:6c:0e:78:e2:
                    ab:58:1d:54:fb:71:9b:42:ca:8c:8e:46:06:43:cb:
                    8c:f3:dc:2f:0f:2b:5f:1d:0c:dd:5a:69:29:10:67:
                    6f:bd:1a:1e:45:87:d2:1a:41:26:5d:99:a9:7c:0d:
                    ab:b3:b7:2d:1b:17:46:2c:b6:23:87:0e:45:b4:49:
                    ff:ea:f1:4a:70:06:82:56:a2:a7:f2:9f:65:60:e1:
                    e6:8d:d3:02:59:95:d9:50:d6:0d:ff:88:e9:49:50:
                    1d:b0:a9:04:5f:2a:98:24:f1:65:a3:0e:c9:0e:da:
                    86:75:97:71:7d:4e:ce:43:54:eb:49:fb:2a:ff:37:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:8D:64:25:C5:22:56:E0:E7:21:EC:27:F1:3C:17:8E:D7:3A:BD
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:d7:cf:75:a2:57:c6:59:11:3a:0f:8e:1f:90:db:ec:32:
         7a:26:69:d6:b7:32:d0:a0:28:6e:51:05:6e:4f:44:27:b2:9f:
         1a:43:4a:e6:f3:1c:4f:66:b2:97:82:49:b1:44:99:50:a7:58:
         54:7f:6c:06:bc:84:61:27:fc:38:b1:0e:7b:7c:92:63:79:8f:
         4f:dc:05:41:68:bf:8f:57:c7:5a:2f:47:3c:aa:1e:4f:ad:91:
         25:46:20:fd:74:0b:cc:d9:92:e2:63:b5:bd:df:f5:2a:02:0c:
         cc:ca:72:c9:71:1d:94:03:a7:ef:47:40:35:d4:b6:01:ac:f5:
         4e:23:b5:14:32:a7:e1:e0:6b:11:0c:40:0a:87:56:78:51:68:
         7c:29:22:30:a7:02:ab:b4:d4:ce:b0:0a:8b:97:ef:90:28:68:
         51:0f:09:de:2f:4d:09:c6:8c:17:a0:b0:52:20:39:30:49:a8:
         07:d3:90:77:99:c2:29:90:f1:c8:5b:8f:04:56:5b:37:77:e9:
         55:54:74:98:7c:a1:6c:5f:f9:15:ff:9a:c4:b7:58:5b:6c:7c:
         6d:77:9b:da:44:72:1b:59:81:2c:2d:d6:a0:f4:dc:b6:07:8c:
         de:c4:d9:6c:bb:df:68:c7:30:05:28:f2:92:2f:e0:53:6d:56:
         ea:28:5f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB7aBkioBI3I5prWPqKU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMmFlNDVjNTA5MDQxYTc5NmE5Njg5NTM1ODFmNTFkNDVi
ZmNlNTUwHhcNMjUxMTA1MDgwMDA1WhcNMjUxMTA2MDgwMDA1WjAzMTEwLwYDVQQD
Eyg2MDE2OGQ2NDI1YzUyMjU2ZTBlNzIxZWMyN2YxM2MxNzhlZDczYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuBOK7caGeKNm9TYop6rlP1ENRnP
GygVRFmvv9n6CS32gKznZh7Bm7s3IzWQjqP0Pq9w6aUW7ZIrtRwNz43Zh/X9X+kk
G2ybf9r/1ck3MAyzf7edI4AObzSsOiMNTmc5XbvpXVWEQiV9RrtUbn8O5x+u9TUt
UCF3+lAcH1nxESsVhGwOeOKrWB1U+3GbQsqMjkYGQ8uM89wvDytfHQzdWmkpEGdv
vRoeRYfSGkEmXZmpfA2rs7ctGxdGLLYjhw5FtEn/6vFKcAaCVqKn8p9lYOHmjdMC
WZXZUNYN/4jpSVAdsKkEXyqYJPFlow7JDtqGdZdxfU7OQ1TrSfsq/zeglQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAWjWQlxSJW4Och7CfxPBeO1zq9MB8GA1UdIwQY
MBaAFI8q5FxQkEGnlqlolTWB9R1Fv85VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzct
YWM3ZjIxYjZiNzRkLzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzctYWM3ZjIxYjZiNzRk
LzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmDXz3Wi
V8ZZEToPjh+Q2+wyeiZp1rcy0KAoblEFbk9EJ7KfGkNK5vMcT2ayl4JJsUSZUKdY
VH9sBryEYSf8OLEOe3ySY3mPT9wFQWi/j1fHWi9HPKoeT62RJUYg/XQLzNmS4mO1
vd/1KgIMzMpyyXEdlAOn70dANdS2Aaz1TiO1FDKn4eBrEQxACodWeFFofCkiMKcC
q7TUzrAKi5fvkChoUQ8J3i9NCcaMF6CwUiA5MEmoB9OQd5nCKZDxyFuPBFZbN3fp
VVR0mHyhbF/5Ff+axLdYW2x8bXeb2kRyG1mBLC3WoPTctgeM3sTZbLvfaMcwBSjy
ki/gU21W6ihf8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:01 2025 by rpki-client