Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          3PJ6vXFr406Nbk2/j8jo4hfkvYIxd+ZHGlRTFA3zR6s=
Subject key identifier:   0D:0F:D8:8F:BF:74:30:E1:82:25:9B:35:C0:B7:7A:91:E5:BA:5D:8A
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       019A500704C0255DD0AB3F2ECF15BB3CB292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0B9E
Signing time:             Tue 04 Nov 2025 18:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:28 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: GjSGNggIwuWsLO/9RQFcZk/bqyT0J8O0xg0f6vWGQ8E=)
                          2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:04:c0:25:5d:d0:ab:3f:2e:cf:15:bb:3c:b2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Nov  4 18:00:28 2025 GMT
            Not After : Nov  5 18:00:28 2025 GMT
        Subject: CN=0d0fd88fbf7430e182259b35c0b77a91e5ba5d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:08:31:a0:34:62:8c:e1:9d:c1:59:89:58:
                    a4:50:7f:32:87:33:b4:ec:ec:b2:a0:bb:e9:b2:85:
                    07:1f:7d:bd:ba:43:99:ad:7a:0c:3f:ca:7f:5d:e1:
                    96:ac:7a:01:0d:05:bb:65:d1:4e:03:4c:82:8c:9c:
                    2f:ee:60:01:59:81:4b:d5:aa:88:70:e5:1c:09:08:
                    60:68:ec:ca:83:e0:d8:4a:92:c6:11:11:67:11:35:
                    2a:ac:fa:e6:37:58:53:66:e9:e6:e9:72:25:c7:15:
                    9e:67:95:46:9e:f9:8f:2f:f9:ab:cb:b1:67:30:1b:
                    5b:88:32:b9:99:c0:56:1f:d4:11:90:69:9b:63:96:
                    29:f0:be:c0:4f:19:75:2d:ab:55:80:39:64:02:4f:
                    17:7a:6f:be:3f:c2:34:12:0a:f7:13:fa:83:1a:fa:
                    b1:a4:d9:e9:db:fa:4f:21:6e:96:92:2a:6b:90:98:
                    ed:ff:b2:7b:b6:fe:7a:55:4e:ed:18:e9:fa:ae:b6:
                    3e:4f:b1:dd:e4:22:3e:1a:43:54:5a:47:a7:b7:50:
                    82:9e:6a:bf:f9:ec:af:ed:ea:ce:57:5f:cc:c0:db:
                    31:2f:f2:51:cb:4c:47:92:05:d9:0b:28:07:25:3a:
                    1e:85:6f:c7:67:ae:00:61:d9:36:b3:69:81:86:15:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0F:D8:8F:BF:74:30:E1:82:25:9B:35:C0:B7:7A:91:E5:BA:5D:8A
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:3d:c3:b9:ae:f3:5b:56:e6:4a:d0:9e:9c:a8:a7:ef:aa:33:
         d7:5f:5e:2e:2c:4d:38:36:b3:3b:05:a7:37:1f:78:6b:5f:a3:
         0a:86:68:18:10:9d:e4:13:6b:58:7c:48:36:7e:92:49:02:ac:
         10:97:9b:f1:49:16:c1:26:6c:5b:6d:b8:e9:ed:d5:7b:0c:ec:
         e6:4d:aa:a3:8e:80:f6:e8:d3:8b:28:73:86:de:47:51:f2:ce:
         69:2e:93:c0:96:09:a3:32:1e:20:a8:5d:a9:4a:d8:ad:25:38:
         63:49:65:4b:45:7e:96:a1:05:b9:bd:20:c1:d1:45:29:33:39:
         8b:85:16:b2:e7:6d:d0:e3:35:90:57:34:38:a0:b2:03:1c:2e:
         5f:71:86:e4:ba:ad:48:38:97:de:20:f3:f7:11:49:b6:0b:51:
         d0:ac:59:81:f7:2e:02:89:65:cd:db:19:7e:c1:79:4e:54:98:
         5b:bd:ab:6b:00:73:81:e0:01:33:78:6f:f3:ef:1c:aa:94:d1:
         ad:dd:21:31:9e:a5:83:d1:3b:83:8f:28:fd:ea:18:59:e7:20:
         14:67:8f:07:b8:55:da:8c:7c:f9:b0:7c:00:be:95:89:d0:2b:
         eb:55:93:af:27:23:d5:12:6f:31:a4:6b:c3:74:e9:54:62:90:
         6f:6c:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:33 2025 by rpki-client