Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          3b0rSocFVqj9uDfoDg2iJV05b48D8woz/Lj8AnQd2L0=
Subject key identifier:   9B:D5:B9:38:01:49:DE:4D:0B:CD:CF:34:38:70:8F:1E:58:5D:F6:39
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       0198D65F19FA99465642609C699C69B16536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          165D
Signing time:             Sat 23 Aug 2025 10:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:13 +0000
Files and hashes:         1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: lJ4yE59knnWOtKvQKkMFVTynieUQpsfJphKxGkl13iQ=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:19:fa:99:46:56:42:60:9c:69:9c:69:b1:65:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Aug 23 10:00:13 2025 GMT
            Not After : Aug 24 10:00:13 2025 GMT
        Subject: CN=9bd5b9380149de4d0bcdcf3438708f1e585df639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:7e:c8:bd:3f:c8:aa:9b:76:6a:42:b9:c8:
                    c1:8f:67:cb:59:67:0a:be:21:3b:83:5b:00:a4:dc:
                    9d:28:a7:a5:76:16:6a:6a:8d:65:e7:ff:5a:0f:69:
                    6f:a7:e1:9d:ff:09:db:19:39:55:3b:84:dd:98:a9:
                    63:7f:19:f8:ed:24:2f:e4:d2:97:c6:02:e9:80:c1:
                    a3:a1:57:a0:2b:1b:08:0b:e9:7f:0b:e3:75:95:49:
                    bc:ce:61:3d:44:9f:03:4d:89:ea:3f:e9:d7:e5:73:
                    2a:e9:fc:cf:d9:14:fd:46:5f:2e:95:7a:60:bc:95:
                    4d:92:98:63:d3:08:a9:14:28:66:1d:b9:c9:b5:2c:
                    39:02:02:54:82:b9:40:fa:61:bc:a7:6a:fc:3a:3c:
                    bd:5a:e2:84:46:12:77:63:dd:f6:3e:f7:31:c3:0b:
                    61:39:32:47:e5:2b:61:c6:8a:81:79:10:a0:19:60:
                    36:22:3d:5c:3e:c6:87:62:65:6a:a8:8c:56:e4:cd:
                    1d:fa:65:a9:5f:b6:b8:c2:a5:52:64:99:75:81:2b:
                    0b:7a:b6:e3:f7:e1:b8:51:e5:69:70:8e:d3:73:dc:
                    cd:c7:00:5e:36:39:ff:72:30:f1:40:58:21:83:d1:
                    6e:30:98:30:73:2c:73:2a:5a:b6:87:1a:eb:a8:e1:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:B9:38:01:49:DE:4D:0B:CD:CF:34:38:70:8F:1E:58:5D:F6:39
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:68:e1:1b:d4:7f:d8:ee:75:cb:4d:41:bd:1b:3f:6c:04:
         86:17:bd:76:9d:1d:53:f4:ad:6d:41:ab:be:f2:ac:fd:b0:c3:
         23:22:d9:1c:94:98:cb:08:5e:60:d4:1d:b3:99:90:3a:4b:28:
         7f:59:26:01:b7:7b:82:ce:df:03:5d:03:b5:81:96:bb:73:fe:
         88:3d:0f:d1:60:48:5a:8a:bf:f1:83:3b:88:a1:19:b4:7f:db:
         60:49:dc:d0:f0:2b:89:d2:7d:a1:66:2c:81:48:5b:17:b2:48:
         94:f7:e5:57:d0:85:4f:3d:21:a4:08:1a:81:ce:2a:d6:b3:43:
         ad:35:e3:2e:b3:48:f4:b0:da:37:e3:22:78:7d:69:0f:10:d6:
         1d:22:c7:a5:3c:81:69:26:b5:ed:84:0f:14:40:a2:e9:19:43:
         b4:ac:8c:0c:1b:0b:62:e4:16:24:7b:c9:58:5e:cc:94:d9:91:
         7f:b1:45:99:ec:c1:6d:70:b6:48:8f:77:6a:cf:b5:8c:ce:7f:
         1a:c3:cd:ab:e6:4e:3c:9e:b7:1d:e0:95:12:44:af:53:aa:14:
         33:37:e4:b9:92:60:1f:06:60:3f:b7:fe:4e:7d:d3:3e:40:ae:
         59:1d:c7:3d:5d:43:8f:11:d4:17:47:4e:21:00:2f:4f:ee:b5:
         19:b7:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:31 2025 by rpki-client