Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          RQIskSyCoKq7lH+FeC3ucxalrK5ky6vQUG3FhhRH6jg=
Subject key identifier:   2E:62:5D:5C:F7:7D:6C:BE:1F:82:D9:DE:D8:56:CF:C8:7C:F5:25:BD
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       0199FDD936D6492F8D8B49532C19FB7C2842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          061F
Signing time:             Sun 19 Oct 2025 19:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:34 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: FE+I8xNiljrWkBNfVuE5tXYkquwiOR+ZIu50xBV6rV0=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:36:d6:49:2f:8d:8b:49:53:2c:19:fb:7c:28:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Oct 19 19:01:34 2025 GMT
            Not After : Oct 20 19:01:34 2025 GMT
        Subject: CN=2e625d5cf77d6cbe1f82d9ded856cfc87cf525bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:24:f2:bf:2d:7b:65:7b:0b:14:40:0a:b3:
                    1b:21:fe:45:be:99:2d:0c:82:c0:17:bc:28:60:f4:
                    e7:6b:71:4e:2b:18:d5:d5:24:47:e3:33:8a:12:08:
                    80:dc:a7:c4:d3:ac:85:a8:19:56:7f:ba:47:ce:98:
                    94:ba:c2:d6:12:26:5e:43:3d:77:91:31:7b:63:3f:
                    ff:cd:a9:f8:81:d7:f8:d4:15:c7:9c:23:e7:9e:9b:
                    d9:ad:2e:e7:14:5a:b2:65:d2:cd:b5:09:30:bb:7f:
                    d8:1f:25:bc:07:15:11:e9:0d:39:5d:72:19:d8:99:
                    72:68:34:ad:af:21:96:5b:79:36:5e:32:a2:2d:e3:
                    15:b3:ca:1c:4d:93:4c:13:70:66:3d:3e:29:26:a8:
                    5e:5d:31:bc:10:3d:1d:ec:fc:35:25:48:22:70:b9:
                    5f:49:b4:95:9e:74:dd:5e:55:6f:d4:07:fe:91:00:
                    d2:db:5b:de:55:e0:5b:1a:31:7b:e1:1d:7a:ef:13:
                    95:c7:dd:06:3f:51:64:3e:c9:82:77:01:56:17:5b:
                    73:08:67:83:1d:e2:85:17:10:bd:2b:f6:73:31:69:
                    cc:87:6d:0d:9c:da:0b:1f:b6:63:1f:06:d0:7c:fe:
                    6f:bd:14:17:bb:4d:26:48:52:a4:66:e3:be:37:21:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:62:5D:5C:F7:7D:6C:BE:1F:82:D9:DE:D8:56:CF:C8:7C:F5:25:BD
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:e1:68:ba:f9:b9:d6:4f:7c:e1:6b:05:fd:25:e6:a3:47:
         08:22:7b:5f:c0:33:79:a4:64:06:b8:5d:db:cd:c5:df:19:a2:
         28:9e:2a:86:0a:47:9c:11:d9:08:a4:2b:0f:22:17:4e:5f:25:
         5e:cd:53:9f:23:a8:64:a7:07:d0:b7:76:5c:4a:53:7b:22:72:
         0c:c1:95:69:57:66:77:83:82:a7:09:03:04:b7:51:1f:9b:2a:
         ed:62:df:40:e2:50:ce:91:80:46:84:64:d4:4d:aa:f6:b0:67:
         f6:31:2e:eb:4c:89:7b:6f:5d:aa:51:39:e2:9c:a8:3f:a9:18:
         62:81:9e:28:be:05:89:1a:d5:05:69:69:10:c8:a1:ca:a5:8f:
         16:84:5b:19:a3:2a:5b:a0:cf:95:17:a6:a6:4f:ed:46:e2:c1:
         74:c0:ad:1e:ac:63:2c:b5:ab:7d:e3:3c:b2:94:64:7b:b2:d6:
         2a:84:f1:ae:36:90:17:1e:b1:8b:39:59:84:bf:39:dc:cf:8b:
         d4:ae:bf:04:21:bf:7a:2a:48:42:c2:c7:15:92:07:d1:6e:5c:
         93:67:50:46:49:10:af:d1:99:55:d7:d1:1c:3c:fd:dc:6d:2a:
         75:f6:12:c6:e5:6e:8d:4a:b3:df:d8:de:54:31:89:40:bc:72:
         ad:b7:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:17 2025 by rpki-client