Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          z9p23ZdMiS/UuIJDI+wurHj9M2qaD6pInXzke4wLHpM=
Subject key identifier:   56:C9:76:08:9D:FB:C7:3C:D5:AD:25:4F:76:85:EF:BA:43:4C:A8:FB
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       019A50E3C9394105A087A52BDF8CA38B7656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          16A1
Signing time:             Tue 04 Nov 2025 22:01:36 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:36 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:36 +0000
Files and hashes:         1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: VvOoUfDZkTct7kumE4n4Ti7UEEcymLiBkmNG0d5rl6U=)
                          2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:c9:39:41:05:a0:87:a5:2b:df:8c:a3:8b:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Nov  4 22:01:36 2025 GMT
            Not After : Nov  5 22:01:36 2025 GMT
        Subject: CN=56c976089dfbc73cd5ad254f7685efba434ca8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:e2:2b:0a:5e:e8:0b:a1:d7:0c:6e:cc:c6:
                    b1:f7:e7:10:3d:e9:c1:79:a7:5d:47:84:46:19:76:
                    87:61:74:4f:b2:ff:ca:ed:98:fc:20:bc:3f:2d:fd:
                    6e:55:29:ef:c4:59:21:14:a2:73:23:39:2f:43:75:
                    c8:d8:1e:d3:86:60:12:3f:59:99:11:0e:1c:96:42:
                    47:23:ae:cc:c7:a0:65:7e:dd:07:d7:cb:4d:83:bf:
                    c3:c8:9f:93:d1:8c:8a:da:a6:45:0b:cb:e8:be:73:
                    12:ae:e8:7e:b4:5d:3c:86:a4:a4:c5:30:d1:93:6f:
                    3b:ab:a9:ae:52:d7:0b:5b:a1:18:e3:da:ed:65:ab:
                    e8:e5:bf:26:83:0f:d0:44:76:8e:1e:e7:9b:ab:bc:
                    00:10:7a:5d:67:ba:c7:2d:db:92:f7:1d:b8:5f:7d:
                    b8:f6:b3:36:2e:d1:81:d8:b0:a3:d5:9b:d8:56:e7:
                    fe:0a:0c:1b:08:9d:2a:49:f1:32:68:be:7e:61:46:
                    e2:89:33:4e:56:75:d2:eb:f6:63:df:cd:9c:57:65:
                    7e:2c:91:93:2e:70:4d:c0:bc:69:08:fb:7b:32:a5:
                    17:af:8d:da:8f:5b:a2:6f:4f:b7:18:4d:b5:06:63:
                    27:d8:f6:cc:2f:db:1e:0b:71:75:19:f1:ae:32:68:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:76:08:9D:FB:C7:3C:D5:AD:25:4F:76:85:EF:BA:43:4C:A8:FB
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:02:15:c9:2d:7d:26:5c:43:90:04:24:5c:d2:54:6e:3f:
         ff:d1:29:b1:7c:ae:12:85:c2:68:33:c9:bf:78:d3:5d:fa:89:
         4d:1f:07:c8:cc:6f:30:46:0a:f9:e5:c7:6d:b8:7c:96:00:64:
         44:60:67:d5:65:23:5a:bd:ce:b9:db:5e:68:51:f2:ad:f4:db:
         cb:55:3a:9f:e1:91:86:a7:85:bf:70:e7:ea:d4:05:ef:7d:bd:
         54:cd:af:7e:f6:d6:06:8b:fd:a2:44:b6:ca:c2:7f:c9:db:27:
         a4:5b:9d:10:bf:ef:f2:1f:1c:d1:f4:36:bf:f0:92:27:dd:46:
         ce:20:45:b1:bc:03:42:4b:c5:d1:29:07:ad:8c:83:31:66:c9:
         45:49:17:45:87:82:99:7c:0f:a3:51:82:ea:fb:70:5f:d1:a3:
         4e:89:94:46:5a:4c:87:25:26:71:f6:2b:fa:1c:85:f6:bf:34:
         0f:71:ff:43:01:e4:81:d5:fe:05:e4:65:12:ec:3c:cc:41:c1:
         35:29:9c:a9:90:a3:6c:3a:e8:be:16:54:3f:36:d5:29:27:70:
         68:29:cc:ba:99:82:18:2b:09:8c:a3:ae:b4:b5:dc:c9:ea:75:
         34:35:7b:e8:ef:24:91:0e:b2:cc:a6:11:ae:8c:c3:fa:f6:bf:
         74:13:ba:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ48k5QQWgh6Ur34yji3ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5YzEyNmI4MmY3N2NjNjNiNWE2YjZjZDhiZGFlNmUw
ZjVhM2MwHhcNMjUxMTA0MjIwMTM2WhcNMjUxMTA1MjIwMTM2WjAzMTEwLwYDVQQD
Eyg1NmM5NzYwODlkZmJjNzNjZDVhZDI1NGY3Njg1ZWZiYTQzNGNhOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXiKwpe6Auh1wxuzMax9+cQPenB
eaddR4RGGXaHYXRPsv/K7Zj8ILw/Lf1uVSnvxFkhFKJzIzkvQ3XI2B7ThmASP1mZ
EQ4clkJHI67Mx6Blft0H18tNg7/DyJ+T0YyK2qZFC8vovnMSruh+tF08hqSkxTDR
k287q6muUtcLW6EY49rtZavo5b8mgw/QRHaOHuebq7wAEHpdZ7rHLduS9x24X324
9rM2LtGB2LCj1ZvYVuf+CgwbCJ0qSfEyaL5+YUbiiTNOVnXS6/Zj382cV2V+LJGT
LnBNwLxpCPt7MqUXr43aj1uib0+3GE21BmMn2PbML9seC3F1GfGuMmiDowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbJdgid+8c81a0lT3aF77pDTKj7MB8GA1UdIwQY
MBaAFMrXnBJrgvd8xjtaa2zYva5uD1o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2Mt
NGNhNDQ4MDJiNTYzLzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2MtNGNhNDQ4MDJiNTYz
LzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqYCFckt
fSZcQ5AEJFzSVG4//9EpsXyuEoXCaDPJv3jTXfqJTR8HyMxvMEYK+eXHbbh8lgBk
RGBn1WUjWr3OudteaFHyrfTby1U6n+GRhqeFv3Dn6tQF7329VM2vfvbWBov9okS2
ysJ/ydsnpFudEL/v8h8c0fQ2v/CSJ91GziBFsbwDQkvF0SkHrYyDMWbJRUkXRYeC
mXwPo1GC6vtwX9GjTomURlpMhyUmcfYr+hyF9r80D3H/QwHkgdX+BeRlEuw8zEHB
NSmcqZCjbDrovhZUPzbVKSdwaCnMupmCGCsJjKOutLXcyep1NDV76O8kkQ6yzKYR
rozD+va/dBO6Dw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:37 2025 by rpki-client