Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File:                     YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier:          tTIofRav7LN64MQXJqFfrrbBPlg08IDaFJEuHGCa8tQ=
Subject key identifier:   D0:6B:9F:91:77:E3:D7:EF:DB:0A:C7:4B:98:BA:4C:76:1D:65:C9:9D
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer:       /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial:       019A50E429979AA007D4F30D574953384F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number:          07F2
Signing time:             Tue 04 Nov 2025 22:02:01 +0000
Manifest this update:     Tue 04 Nov 2025 22:02:01 +0000
Manifest next update:     Wed 05 Nov 2025 22:02:01 +0000
Files and hashes:         1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: 2cpoxpT0/+tJmBh5ELEOhawcDh1E7Mrg8UQiSzsLcdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:29:97:9a:a0:07:d4:f3:0d:57:49:53:38:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
        Validity
            Not Before: Nov  4 22:02:01 2025 GMT
            Not After : Nov  5 22:02:01 2025 GMT
        Subject: CN=d06b9f9177e3d7efdb0ac74b98ba4c761d65c99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:57:77:6d:8b:3e:24:b9:c0:89:23:40:21:
                    14:4c:b0:a7:fa:79:83:cc:f4:3f:dd:0d:1d:82:eb:
                    6f:ad:fe:9d:3f:99:44:f7:67:54:2f:b8:14:49:88:
                    cb:10:b4:6f:c7:6b:91:8e:d4:08:9e:ff:38:91:c6:
                    43:61:78:69:d3:f2:04:a3:82:4b:68:34:9a:28:98:
                    b2:f9:82:46:a9:df:7b:7b:4d:d5:c3:14:18:f8:c4:
                    d3:cd:4a:35:77:77:81:7d:49:de:18:7f:10:80:ce:
                    de:78:26:d4:83:3a:fc:57:b8:38:56:a0:5f:6c:b8:
                    df:30:72:b2:e3:3e:d3:34:c2:0e:fe:07:c5:44:b3:
                    e1:ea:0f:c1:47:2c:39:c2:06:8c:04:43:f6:af:a7:
                    c3:b3:a5:cc:22:ac:28:ca:9a:3c:c2:eb:f4:a0:73:
                    24:5e:65:d2:17:39:8a:29:ec:fb:5c:3e:cd:e6:b6:
                    fa:3a:d5:8d:db:b9:25:e6:4a:83:df:78:ec:1b:d1:
                    83:f5:6a:a9:c6:dd:45:f2:28:51:35:f1:8f:37:c6:
                    ee:f6:2e:aa:d3:e9:6f:1d:47:fe:46:11:33:ba:8e:
                    83:4e:04:c6:d6:26:73:94:af:d3:a9:27:52:a4:c5:
                    97:50:2a:25:6f:4f:ac:82:a8:c6:41:3f:c3:75:0d:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:9F:91:77:E3:D7:EF:DB:0A:C7:4B:98:BA:4C:76:1D:65:C9:9D
            X509v3 Authority Key Identifier:
                keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e4:4f:97:1e:36:ac:78:0d:41:eb:aa:06:20:3a:2c:f1:35:
         c5:b3:36:bf:4e:fa:d7:ed:70:ae:33:38:c2:6b:bb:f0:63:6b:
         0e:d1:9e:94:30:ac:85:e2:1b:5f:05:f9:95:41:b6:71:e6:22:
         08:a0:90:bc:25:a9:22:6d:a3:9c:ac:4e:fd:ee:a7:87:4c:13:
         32:89:20:42:80:b1:78:3d:41:17:84:96:b1:76:96:1a:01:f7:
         70:a6:a3:32:a9:31:87:ac:1f:a1:3d:c6:48:85:60:1a:5d:07:
         fc:9d:45:3f:06:b7:00:c8:8a:16:7e:9e:ed:4c:7a:64:21:63:
         6b:3c:ec:e6:57:1b:14:f0:41:65:ae:0f:13:3d:67:b7:e1:39:
         0a:b2:ec:21:97:47:71:46:c7:da:4d:85:58:c8:72:f8:c2:4e:
         0c:80:8a:e5:bd:79:75:bb:6e:ed:83:7e:bf:17:f3:79:6a:a8:
         de:26:51:80:e3:fb:91:e4:c4:bb:80:92:cd:bf:a8:bc:b7:ce:
         72:c2:4a:37:fa:d8:17:75:a8:b0:7e:04:c0:16:91:d5:1c:f6:
         0e:09:9e:dc:d4:be:cb:a0:a2:84:6a:b5:8b:ae:88:da:d0:fd:
         f9:92:80:b4:e9:de:06:f1:e8:d3:19:95:67:e3:e9:9b:55:90:
         94:5a:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:21 2025 by rpki-client