Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          KvoArvVTz5ZhpNbkODdHUNJcERxiSA7vf/443VwLyXc=
Subject key identifier:   E4:22:98:67:78:EB:57:85:B8:D5:93:EB:B6:80:22:B0:C5:D7:7A:C7
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019A03A47856AB810A44567EB2C51FD50F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          16FA
Signing time:             Mon 20 Oct 2025 22:01:41 +0000
Manifest this update:     Mon 20 Oct 2025 22:01:41 +0000
Manifest next update:     Tue 21 Oct 2025 22:01:41 +0000
Files and hashes:         1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: PpjJQZ6Ve2FuY4BQpX1fVjLE4gJkiJyHZWNUovlbPPI=)
                          14: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          15: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          16: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          17: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          18: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          19: qkTqrO7XelpW6Q5iX68CrdjzWos.roa (hash: 2la/hVcZll8gvRBsY59IVSBJ7qK4GiwOVnBOoPlYkfg=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:a4:78:56:ab:81:0a:44:56:7e:b2:c5:1f:d5:0f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Oct 20 22:01:41 2025 GMT
            Not After : Oct 21 22:01:41 2025 GMT
        Subject: CN=e422986778eb5785b8d593ebb68022b0c5d77ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:ec:2b:8f:9a:de:72:31:2d:20:82:55:2b:
                    f3:f1:50:57:18:3f:08:fb:a7:fb:13:eb:86:f1:b0:
                    13:bd:1a:19:b3:21:1b:23:59:76:33:eb:c9:6a:d8:
                    7b:e3:64:ae:c8:31:03:ea:b8:e0:ed:49:65:60:01:
                    23:2c:2c:74:31:d0:7a:91:83:73:8a:f0:6d:af:11:
                    bd:ff:fe:3e:ee:b8:3b:5f:e0:14:c9:54:d3:52:15:
                    06:c2:e3:6d:f3:b2:a5:64:37:27:93:42:da:04:d1:
                    2c:c7:78:e0:22:97:3c:0f:8d:70:79:5b:05:09:41:
                    7d:0d:f8:e7:ad:fc:f5:fb:20:89:36:34:dc:2e:7d:
                    d0:b7:a6:12:2d:81:b1:86:f8:e2:34:79:f9:50:0d:
                    52:d5:5a:fd:ab:c1:55:0d:d3:42:ba:fa:bc:ef:1e:
                    01:cf:24:67:8c:1b:3d:31:50:fd:c0:12:15:5f:d2:
                    eb:ea:96:0e:dd:5c:fe:1e:d1:52:7c:26:6f:34:f2:
                    31:17:c9:1a:8d:03:a6:96:78:4e:84:18:51:d8:ca:
                    09:da:96:80:cc:79:b3:0c:97:1f:fd:c3:8a:66:21:
                    d9:f9:40:ac:bc:1f:2a:89:06:21:d5:89:4c:39:a6:
                    43:4c:b2:f9:dd:cd:d1:ad:6d:18:f7:be:68:86:96:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:22:98:67:78:EB:57:85:B8:D5:93:EB:B6:80:22:B0:C5:D7:7A:C7
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:14:e0:ff:19:03:c4:f6:37:61:28:1c:de:25:49:86:bc:73:
         8e:dd:9d:2c:e5:2c:f7:57:f6:42:51:96:28:ec:f1:56:40:56:
         8b:dd:c9:a4:09:5c:34:14:4f:c1:b4:8c:f2:b3:dc:2e:4f:4c:
         71:81:64:ff:61:e1:6c:2b:5b:aa:62:1d:72:1a:a0:e9:7e:7e:
         3b:1f:f7:e0:ba:df:30:e0:f7:a5:fe:e9:7a:5b:4e:24:da:34:
         b3:9f:28:00:be:28:95:80:16:a4:a6:41:23:a3:51:a6:88:9a:
         49:f5:1c:89:94:47:1e:19:6a:cf:e2:a2:ba:d7:0a:65:66:29:
         dc:43:94:cf:b9:93:a4:d2:58:f0:22:cd:94:90:ab:68:4c:c4:
         2a:fc:bc:70:6b:f0:4e:13:7a:86:95:e2:1f:5f:62:94:0c:43:
         e2:09:79:67:95:8e:ad:55:12:b0:5f:c2:8b:48:01:b0:79:7b:
         bc:9b:ba:20:c6:ce:b8:b1:bc:06:ba:b5:98:09:1b:00:af:18:
         78:45:57:b9:be:64:92:ce:bf:ef:2b:67:fa:7d:da:44:df:37:
         57:7a:c7:04:d4:07:9f:ab:82:5c:b3:72:c8:7b:cc:48:94:af:
         33:e5:21:9a:e1:91:3a:f6:e9:06:cb:ab:5d:6c:ee:a6:f2:a0:
         7c:ce:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:22 2025 by rpki-client