Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          N8Zc7QHpEdMyi9bSgmNQ5pXEd9OZbBNkopKyBumKee8=
Subject key identifier:   04:E2:1C:02:D9:8F:74:9D:38:D0:63:ED:B5:75:7F:FE:B7:DC:73:C4
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       019A4F61E86AA59828B9A8CDECDFBE121ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          1275
Signing time:             Tue 04 Nov 2025 15:00:07 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:07 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:07 +0000
Files and hashes:         1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: xfPS4xF1z/K2EDv2ys4I8Uly0Mdt8qALBpNxBlEhixA=)
                          2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:61:e8:6a:a5:98:28:b9:a8:cd:ec:df:be:12:1e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Nov  4 15:00:07 2025 GMT
            Not After : Nov  5 15:00:07 2025 GMT
        Subject: CN=04e21c02d98f749d38d063edb5757ffeb7dc73c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:00:c8:af:87:a9:5c:b8:1e:35:a6:7d:bc:
                    01:27:cf:8b:0e:d8:8e:88:3a:84:95:76:45:5b:eb:
                    f9:43:8c:f0:6f:e5:dc:c1:9f:bd:b9:f1:a3:96:4f:
                    d4:73:8e:cc:c5:f4:e6:08:3a:d8:34:20:37:ac:fc:
                    3d:93:60:5a:db:d0:e4:f7:87:fe:bd:40:5f:d3:62:
                    f2:d6:26:b4:8b:13:66:fa:0b:d9:dd:03:66:73:8a:
                    95:ad:f9:53:76:0d:01:fb:74:3b:1d:a1:55:3b:af:
                    68:d4:e5:91:7b:51:1f:65:34:71:3c:06:d3:bc:a0:
                    26:01:ed:5a:20:1a:74:c0:c4:76:d8:0f:29:7d:c5:
                    8e:89:fc:b8:4b:5a:74:76:ee:3d:ec:34:fd:e5:29:
                    5d:c0:cc:71:5c:bb:b2:7e:c1:87:94:b7:40:2f:66:
                    e1:bd:5c:f0:8c:1a:c5:ff:da:27:10:aa:79:20:0d:
                    d3:64:ea:06:89:a6:44:a6:60:b9:65:44:52:b0:90:
                    de:7b:84:04:3a:08:3c:f7:bc:d2:ab:88:d7:bd:45:
                    ff:3d:11:ed:66:e9:d8:c7:3f:b8:a7:11:31:5c:96:
                    33:6a:4a:b1:f1:a4:79:06:16:c6:ba:8a:a6:1e:90:
                    f1:6c:6e:d9:9f:20:13:b9:98:6d:2d:14:fa:f3:01:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:1C:02:D9:8F:74:9D:38:D0:63:ED:B5:75:7F:FE:B7:DC:73:C4
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:53:9c:45:65:9d:d1:42:23:a3:c6:27:c0:50:80:26:48:
         20:37:59:7b:c6:db:4f:9a:cc:23:99:9c:a8:19:80:46:57:4e:
         c4:d1:36:8a:a9:0e:c6:a9:0e:c5:99:b4:4b:87:98:a6:78:c9:
         66:60:8f:f4:64:e1:d1:1f:57:47:bf:76:2a:ff:ee:d6:aa:0c:
         29:7e:a5:9c:b7:5b:76:85:ec:89:2e:3b:84:f3:57:77:54:38:
         38:76:df:41:5f:e9:26:22:53:91:0f:6e:ba:a8:2e:d3:c0:47:
         43:4d:dd:83:eb:49:9e:9a:28:09:c0:3c:68:e4:d0:57:bd:29:
         03:e4:a4:df:3b:2d:bf:51:03:1b:61:02:12:f0:74:d7:f2:bd:
         86:ea:c5:e4:0a:77:f3:da:b5:a3:96:2d:82:50:20:e2:ab:bc:
         eb:b9:ad:79:bb:0e:4d:48:4b:d6:88:b2:70:b7:6d:d9:08:c9:
         4b:6e:cc:20:42:d5:bb:5c:bc:5d:99:35:c5:17:8f:4c:2f:38:
         1e:f1:7d:74:e2:9b:60:de:39:01:7a:f4:70:63:b8:1b:fe:c9:
         45:2a:eb:a7:c1:14:a4:ac:00:97:e2:94:60:3f:64:b8:bc:8f:
         2c:b2:41:b5:29:02:83:61:d6:84:f7:b4:6a:bf:1b:58:aa:15:
         54:40:a5:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYehqpZgouajN7N++Eh7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2
MTI1MzEwHhcNMjUxMTA0MTUwMDA3WhcNMjUxMTA1MTUwMDA3WjAzMTEwLwYDVQQD
EygwNGUyMWMwMmQ5OGY3NDlkMzhkMDYzZWRiNTc1N2ZmZWI3ZGM3M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjcAyK+HqVy4HjWmfbwBJ8+LDtiO
iDqElXZFW+v5Q4zwb+XcwZ+9ufGjlk/Uc47MxfTmCDrYNCA3rPw9k2Ba29Dk94f+
vUBf02Ly1ia0ixNm+gvZ3QNmc4qVrflTdg0B+3Q7HaFVO69o1OWRe1EfZTRxPAbT
vKAmAe1aIBp0wMR22A8pfcWOify4S1p0du497DT95SldwMxxXLuyfsGHlLdAL2bh
vVzwjBrF/9onEKp5IA3TZOoGiaZEpmC5ZURSsJDee4QEOgg897zSq4jXvUX/PRHt
ZunYxz+4pxExXJYzakqx8aR5BhbGuoqmHpDxbG7ZnyATuZhtLRT68wFC+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATiHALZj3SdONBj7bV1f/633HPEMB8GA1UdIwQY
MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt
NTcwZDE3ZjlmMmE1LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1
LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz5TnEVl
ndFCI6PGJ8BQgCZIIDdZe8bbT5rMI5mcqBmARldOxNE2iqkOxqkOxZm0S4eYpnjJ
ZmCP9GTh0R9XR792Kv/u1qoMKX6lnLdbdoXsiS47hPNXd1Q4OHbfQV/pJiJTkQ9u
uqgu08BHQ03dg+tJnpooCcA8aOTQV70pA+Sk3zstv1EDG2ECEvB01/K9hurF5Ap3
89q1o5YtglAg4qu867mtebsOTUhL1oiycLdt2QjJS27MIELVu1y8XZk1xRePTC84
HvF9dOKbYN45AXr0cGO4G/7JRSrrp8EUpKwAl+KUYD9kuLyPLLJBtSkCg2HWhPe0
ar8bWKoVVEClKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:08 2025 by rpki-client