Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
File:                     YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json)
Hash identifier:          SDyZ4gM/BWzEg+4k3jcMfh2BTtlhEUs1U0WmrSv1nTU=
Subject key identifier:   68:C3:DB:55:C9:6E:B6:EA:B7:54:E7:D9:5F:EB:56:08:2E:23:A1:D1
Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23
Certificate issuer:       /CN=60e2c8f75f385acb4b94a68d899351ba347a3323
Certificate serial:       019A50E3FF3281C4086622D09EDDB41867A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
Manifest number:          161D
Signing time:             Tue 04 Nov 2025 22:01:50 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:50 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:50 +0000
Files and hashes:         1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: 4dawU0UDEnJgJWHfuawDXm3RdX56974IwKHV/35P96Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:ff:32:81:c4:08:66:22:d0:9e:dd:b4:18:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323
        Validity
            Not Before: Nov  4 22:01:50 2025 GMT
            Not After : Nov  5 22:01:50 2025 GMT
        Subject: CN=68c3db55c96eb6eab754e7d95feb56082e23a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:02:13:69:1c:35:2f:08:89:43:86:9f:9b:
                    9b:92:0d:45:fe:1c:db:43:a0:bc:2b:76:99:ed:06:
                    4e:df:72:e1:9e:8b:c3:ed:d1:a4:52:b9:af:c6:6a:
                    a0:5b:1a:55:45:45:8e:98:1e:ba:37:6d:57:b9:36:
                    8a:50:c2:2c:ce:a4:c5:85:6e:5f:50:ee:d6:00:52:
                    08:47:3a:8c:9e:37:5f:c3:8b:5f:a4:5a:91:34:e0:
                    2e:d5:14:6e:7c:ed:85:30:6b:68:bb:58:c8:81:de:
                    b3:cd:cb:1b:a0:5f:ec:e4:e0:08:12:86:72:9a:11:
                    db:69:82:19:77:40:9c:5c:fc:ee:d8:f0:d2:09:f3:
                    e8:18:96:f4:9a:5c:60:63:ab:3b:1d:a4:e3:21:80:
                    c9:1e:83:5b:44:33:75:56:9f:88:b0:26:11:17:da:
                    e4:d3:2d:24:9d:60:8c:36:67:bf:ab:57:58:6c:de:
                    02:d4:e1:81:04:6b:7d:43:8b:f4:43:e5:71:ce:64:
                    eb:74:67:a6:5c:3b:20:28:71:0c:87:7b:1a:a3:19:
                    17:9f:a1:41:95:81:7c:dc:cb:03:54:47:d5:1a:d3:
                    90:c9:4d:f9:17:0b:28:74:da:51:1d:a2:80:14:68:
                    af:90:10:5f:b9:b0:29:46:15:73:21:6e:17:d2:c9:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:DB:55:C9:6E:B6:EA:B7:54:E7:D9:5F:EB:56:08:2E:23:A1:D1
            X509v3 Authority Key Identifier:
                keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:c4:d2:c8:07:ee:c1:64:68:2d:24:94:7d:1f:ff:f4:bc:
         67:18:d9:98:2f:92:ee:dd:06:7f:10:1d:ba:5e:37:71:c2:94:
         7c:54:09:e4:ba:f6:d0:0c:7c:4e:44:b6:73:a6:84:73:ad:5e:
         0e:45:81:06:a5:3e:da:1c:f0:8b:06:2f:26:25:a8:4b:23:c1:
         cf:f9:04:72:fb:6e:8b:1e:9b:5b:77:64:0e:12:03:68:a9:60:
         b4:a3:5e:00:a3:b6:91:6f:1c:05:e9:44:75:9e:33:1d:da:e6:
         b2:4b:97:ee:db:eb:10:c4:71:96:f8:6e:b8:22:8a:92:45:09:
         c6:44:7d:78:d2:4c:30:1d:8e:cf:10:79:7e:f2:06:73:86:79:
         bd:29:1c:fd:b5:50:09:77:a9:f9:b8:46:ac:52:47:1c:12:c5:
         55:f0:c3:13:cd:4b:ea:89:06:98:7e:3d:09:60:a3:88:46:ea:
         ba:77:8d:b1:39:c5:aa:3e:00:b2:f5:2e:b8:27:bd:87:97:3e:
         c5:ce:71:37:0d:42:2e:1c:08:37:a4:18:f8:93:c3:8d:dc:27:
         21:f6:05:cd:b2:90:4a:bc:fc:08:fa:e6:c4:05:1c:d0:d1:e5:
         3e:5e:2e:29:71:57:65:a1:a9:99:5a:a8:99:48:4d:aa:da:39:
         f5:3c:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:01 2025 by rpki-client