Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
File:                     TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json)
Hash identifier:          yrVtXH3KAi7hcizucMCL8uayl3Crz28yv5r7xNNLtEw=
Subject key identifier:   7E:A7:64:BB:AB:28:EF:B6:0B:10:ED:37:B9:75:23:AC:3B:9D:A4:EF
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Certificate issuer:       /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial:       0199FC58BF776604571D422B21C2427D2909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
Manifest number:          16FB
Signing time:             Sun 19 Oct 2025 12:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:38 +0000
Files and hashes:         1: 15pjcL48pkWZSvyXnDWjH3srMzQ.roa (hash: dmd97hcLtSzZy7Qz5O/ccY1dtF/UXlYHWlHQGTz9cV0=)
                          2: OW3nOicLkrmXZdp3r5orx47eGJQ.roa (hash: 5EmIochVR6v8ogsSzgwpakcQSlqncNbG0N7JC4GvEpY=)
                          3: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: ozHb5tZtZc9P8dtKudw5rfudNBdDkrkVo8I+/A5RfQ0=)
                          4: XRjqskDJfCb5PURI6gE2z-7afCI.roa (hash: lC6CdL71ZqZQFEg499ebGpokdZd/v2A2IJbWINe+nqc=)
                          5: aVSDFG9S0qVagyGCDyRaZCcj4uM.roa (hash: 10vd3ei8CEhJdvfMHANX2v90tno0+7P3mxjOYtPwbi4=)
                          6: i_KPYNfH_ISHnwyYczzOTNrsq74.roa (hash: 5HYx2Gk9YXAdl7mXcKfoivpRSdlZngwuZv9PRr3UOHA=)
                          7: yCdRlY1dy91_yoXt5TFoEdJrw-o.roa (hash: KareyGqAsZ0sDsSq6dTpkWiy0kkcW1Zx+0QaG17jqGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bf:77:66:04:57:1d:42:2b:21:c2:42:7d:29:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
        Validity
            Not Before: Oct 19 12:01:38 2025 GMT
            Not After : Oct 20 12:01:38 2025 GMT
        Subject: CN=7ea764bbab28efb60b10ed37b97523ac3b9da4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:cd:4b:fc:c4:33:8c:37:22:b1:c3:d6:a7:
                    ab:37:51:d1:58:ce:8d:7a:72:61:57:3d:d5:35:c1:
                    1f:54:a6:65:1f:dc:b6:b1:86:82:b4:10:31:30:54:
                    0f:ed:8f:fb:2c:43:34:d9:88:a6:cf:73:a7:be:0b:
                    a6:1e:8e:70:f7:e3:8b:9d:7c:bb:a8:37:ae:95:24:
                    b3:61:06:c9:74:5d:c7:e7:93:87:68:2e:4b:de:9b:
                    75:9b:03:61:0b:69:85:f6:77:a3:e6:4a:dd:4e:de:
                    36:63:a2:31:98:d2:25:9c:84:9f:39:54:c0:bd:7e:
                    80:bb:2b:56:ea:35:31:10:63:93:73:73:6a:5b:31:
                    14:90:08:08:2b:dd:8a:00:a2:b6:1b:92:4c:7a:2d:
                    d2:b4:87:2e:da:3b:94:33:cb:a6:36:fd:da:14:53:
                    05:88:a4:4e:48:85:fa:70:c8:b4:83:74:fb:f7:f9:
                    f8:52:eb:d0:1a:26:87:40:76:d2:59:c1:b1:f5:e5:
                    d9:d5:c5:88:76:d0:a6:35:cc:57:95:22:7e:11:88:
                    97:3c:7e:a7:cf:2b:69:07:c0:62:0f:67:a0:78:20:
                    69:be:c4:dc:88:6d:19:f5:6a:df:9d:c2:9d:a6:d9:
                    97:2a:b2:d3:65:42:e6:c9:41:56:c2:40:3a:c4:d1:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:64:BB:AB:28:EF:B6:0B:10:ED:37:B9:75:23:AC:3B:9D:A4:EF
            X509v3 Authority Key Identifier:
                keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:a1:40:44:83:b1:fc:68:bf:60:5e:37:71:0f:a5:72:1b:
         67:29:e2:34:6a:01:1c:46:be:66:e3:3e:f2:87:32:eb:7f:a5:
         3b:4b:a0:b7:cb:31:15:95:d9:c8:4b:b4:f4:b3:d4:bf:08:19:
         f8:a8:97:49:13:7c:9f:31:be:e4:aa:9d:82:43:08:e9:c9:6c:
         09:66:2d:15:66:a8:2d:aa:71:87:5c:c1:73:22:f9:9a:cd:e4:
         e4:59:43:a3:89:c4:ad:e7:ea:9e:7d:ec:b6:68:33:ed:ee:f7:
         1a:13:07:da:38:e2:ce:12:ea:6b:d3:13:1b:2e:b2:8d:a5:f7:
         26:0c:07:82:2d:f5:d5:38:e8:62:8e:73:28:bc:9d:f8:f0:35:
         8d:ad:80:e5:24:1d:4f:32:33:c0:10:43:33:90:32:e6:f9:33:
         a9:ee:9e:b9:cd:27:34:f0:c6:8e:57:59:65:10:ea:f1:6b:51:
         91:3f:bf:c2:cd:5b:20:c0:6e:3d:e3:c1:78:d1:b9:40:7b:c6:
         55:37:c4:f6:af:bb:17:48:6e:0a:9a:14:16:aa:9f:67:45:e3:
         6d:63:04:9e:ea:a8:ea:01:4d:39:b0:5b:39:9a:0f:84:c9:3a:
         3f:c3:50:9f:26:9c:b4:89:89:bb:dc:df:b8:32:67:8c:d4:9a:
         ac:df:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:10 2025 by rpki-client