Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          T0TWJ56eEszmMHgAktwN15g+EnI1GZz/bfBWL952pHo=
Subject key identifier:   91:A6:1E:43:F9:D3:C6:0B:19:D9:F0:99:51:97:A5:77:5D:C4:74:6A
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019A5119B7390030949787A4B372C108C5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1722
Signing time:             Tue 04 Nov 2025 23:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:31 +0000
Files and hashes:         1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=)
                          2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
                          3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: wz3/wjIlqJwf+6BDNJbWTpphOPOgDks1xqIQvSZLgGU=)
                          4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
                          5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
                          6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
                          7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:b7:39:00:30:94:97:87:a4:b3:72:c1:08:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Nov  4 23:00:31 2025 GMT
            Not After : Nov  5 23:00:31 2025 GMT
        Subject: CN=91a61e43f9d3c60b19d9f0995197a5775dc4746a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:e5:b2:51:47:8b:35:5a:be:48:67:9d:9e:
                    0a:30:90:d8:3d:92:2c:dd:8e:08:17:b3:41:67:8d:
                    7b:b9:0a:03:8b:d3:b6:e1:7e:3b:42:6f:54:3c:8b:
                    d1:22:14:10:25:b0:dc:5d:57:fd:9d:8a:f3:a6:23:
                    41:75:2f:3f:6d:4a:f8:d5:91:5a:83:59:e4:1a:f7:
                    2f:46:e8:87:55:ea:26:20:8d:2c:3e:56:4c:88:9d:
                    a9:47:c8:5a:99:dc:6b:dd:b8:e2:23:62:ce:81:3a:
                    40:6c:4b:6b:8f:76:06:98:14:e2:a7:67:f3:1d:d1:
                    3f:5b:d9:71:16:7a:86:61:2c:9c:1f:8b:47:8d:e3:
                    34:4f:24:b6:84:1e:db:fa:a5:94:15:88:45:8f:0b:
                    f1:b1:7e:ae:03:c9:a9:ee:80:1c:31:36:6d:5e:8a:
                    38:3b:94:29:ba:a0:ce:f8:3e:7e:17:52:b1:94:71:
                    52:21:d5:fd:9e:60:30:ef:52:1e:52:f9:44:2c:27:
                    2d:91:e0:80:f3:87:2e:62:25:a0:1b:8c:43:31:68:
                    93:d4:20:67:a2:e0:f2:a1:72:b1:36:38:68:d4:29:
                    11:e5:c7:5c:2b:81:04:e1:58:df:98:5d:36:8e:ff:
                    4d:20:9c:55:2b:eb:34:d3:2b:43:fa:5c:9a:6e:d8:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:1E:43:F9:D3:C6:0B:19:D9:F0:99:51:97:A5:77:5D:C4:74:6A
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:fa:f7:e1:4c:db:6d:63:71:8b:c9:0a:74:32:50:c4:36:
         7c:7d:0b:1e:24:5c:ee:4f:8d:0f:2d:6c:76:21:f9:9e:6d:c0:
         98:25:f5:fc:cd:a8:ca:bf:d6:cf:cb:3e:64:dc:0b:48:ab:01:
         fe:ae:a8:18:0f:da:59:64:c7:5c:8d:f7:e8:5e:db:db:d5:ca:
         bb:5c:31:d3:51:0c:09:45:d3:37:ef:c3:3e:52:4b:b2:19:35:
         57:a0:01:7f:1a:b4:b9:91:7e:7f:0f:20:d6:4f:d5:a2:03:19:
         e5:16:d3:77:b4:b6:f1:b5:2d:f8:0e:e8:2b:c3:1c:c7:23:1e:
         83:cd:2b:ef:15:04:b0:48:82:3c:cb:32:ab:76:6c:a2:b9:63:
         39:9d:28:0a:e4:d7:b2:50:3f:82:9e:23:e9:5e:f5:c0:0c:8f:
         1a:69:64:f4:53:ad:d6:b2:c8:60:b7:50:d6:b0:41:55:a3:44:
         7c:3b:1e:04:34:4c:98:63:95:fa:81:21:01:fd:e8:d2:a8:f5:
         a1:81:0d:ae:20:ab:ca:16:1c:47:3e:ca:91:3d:f5:09:1d:d3:
         6f:a5:ef:b6:ee:0e:57:15:28:a4:b7:52:f3:6e:d1:f2:a8:fe:
         6d:41:07:60:49:46:b1:a1:05:6f:7c:7b:e3:17:0f:62:fc:fa:
         e1:18:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:01 2025 by rpki-client