Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          4MQ1Cm8flHeOezECr+3BAnTh2RNltp9CnKfGfGvn864=
Subject key identifier:   A4:79:F1:04:0C:31:C6:E5:37:11:56:0A:35:81:64:4C:2D:9C:0E:4F
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       0199FB0ECEBB4B2870B2F98456B0E5A720EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 06:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:15 +0000
Files and hashes:         1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: KyuRj9go19hz5aYqnav3aMujqiDiTrFZcVTjcxKUcBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:ce:bb:4b:28:70:b2:f9:84:56:b0:e5:a7:20:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Oct 19 06:01:15 2025 GMT
            Not After : Oct 20 06:01:15 2025 GMT
        Subject: CN=a479f1040c31c6e53711560a3581644c2d9c0e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:76:ad:b3:d1:d8:4e:a8:71:77:b7:4b:c9:
                    fc:dc:f4:eb:77:7e:90:42:df:83:b6:cc:42:25:b7:
                    1d:06:0d:06:51:eb:38:1c:70:59:50:2a:98:c1:ce:
                    9c:19:91:91:39:79:5d:03:83:15:33:45:9f:2e:43:
                    04:19:32:96:db:95:64:f0:65:e2:74:5d:f5:61:66:
                    50:e6:a6:ed:36:8c:3d:2a:ab:74:dc:e5:02:dd:f0:
                    8a:b8:f7:b0:7f:93:4c:ff:57:2c:11:22:dd:04:30:
                    d9:64:f6:04:6a:1b:99:31:8c:bf:26:e7:0a:47:b3:
                    64:0f:a7:b8:bb:46:1a:7c:54:31:8d:fa:f7:ef:1d:
                    0a:57:f8:0a:10:83:c5:cc:d3:19:20:86:a6:d0:0e:
                    50:6d:31:9b:c3:fd:05:15:32:26:54:2f:b2:44:d4:
                    a4:df:38:51:14:27:39:0a:b3:6e:1e:0c:3c:c7:4b:
                    bf:4a:e3:57:77:24:d9:cc:77:c6:bc:dc:dc:12:e9:
                    ee:56:e9:2b:1a:ef:cc:6c:cf:d4:b3:17:7b:bb:46:
                    40:07:80:e4:8f:8e:c5:d8:62:fb:38:4c:85:b8:59:
                    8d:9c:0e:1a:38:ea:cd:73:b6:28:d0:81:20:5b:92:
                    ff:46:aa:4c:da:e2:ee:42:6c:b9:59:d8:cf:2f:88:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:79:F1:04:0C:31:C6:E5:37:11:56:0A:35:81:64:4C:2D:9C:0E:4F
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:89:82:1f:47:f5:08:bb:af:06:5c:fc:50:62:85:17:6b:
         4f:2c:a5:30:29:e7:25:f0:78:c6:a6:9c:cb:1a:e5:39:75:05:
         bf:d6:8c:cb:8a:9e:34:b2:de:cb:39:9b:a7:71:ce:5f:23:6f:
         3b:b5:73:9c:71:66:df:b8:e1:ca:75:42:62:e2:59:7d:77:c4:
         a8:ce:b0:65:4d:cb:c0:f5:d0:75:0d:df:0d:c9:31:15:f1:85:
         98:57:b3:88:66:b4:3c:fa:74:ee:79:ec:c9:c7:54:95:04:ad:
         3b:ec:4d:75:89:56:8b:6c:36:be:4c:a8:56:49:9e:9d:8f:a7:
         29:9c:e2:52:89:47:ca:15:6c:59:d2:8a:ca:8a:e4:0c:ce:69:
         25:b7:7e:8d:31:61:34:09:cc:07:67:03:5e:d2:77:26:b3:11:
         d9:46:e6:b5:e9:0a:e4:be:eb:bf:7e:9a:dd:80:ac:8d:ca:b3:
         7b:0d:d6:90:b3:e8:3c:af:54:f4:e8:ce:f7:d1:64:3b:f1:8d:
         fe:75:ca:99:2e:c8:d9:c2:17:a0:41:c6:5c:c2:a4:9f:71:b7:
         4a:f1:0a:ef:3d:f6:0e:ae:29:a9:e7:68:a9:14:3a:bc:77:c6:
         54:cd:28:60:de:79:76:eb:1d:69:74:e9:68:6b:e0:41:a8:63:
         dd:ef:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:12 2025 by rpki-client