Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File:                     TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier:          2RjrZHHxHIJiIUvgs9bNAk0Lcz5LiC0SJYnOYOFR5jI=
Subject key identifier:   0C:72:89:40:47:2D:AA:F9:BB:A3:29:9A:FD:E4:FA:1C:AB:E5:6F:7B
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer:       /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial:       0199FC5899EBE53CE05AA1A87F91D05F8546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number:          0A0E
Signing time:             Sun 19 Oct 2025 12:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:28 +0000
Files and hashes:         1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
                          2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: m5Dt8uyYRUd0YVqQmN3NQCjkmTRBwH1S8zJlo9sIZ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:99:eb:e5:3c:e0:5a:a1:a8:7f:91:d0:5f:85:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
        Validity
            Not Before: Oct 19 12:01:28 2025 GMT
            Not After : Oct 20 12:01:28 2025 GMT
        Subject: CN=0c728940472daaf9bba3299afde4fa1cabe56f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:59:8c:9a:8a:d8:30:be:06:fc:ba:53:28:
                    c3:0f:5e:0c:be:61:3b:aa:b6:e8:cd:46:86:0b:f1:
                    89:77:21:d3:fd:9a:b1:55:af:7c:18:8a:00:b9:04:
                    ad:b7:cb:be:19:2c:82:39:46:fe:6f:0b:6a:ed:b2:
                    66:69:e3:32:5c:e3:bf:0c:8f:ed:6e:28:42:de:d6:
                    e6:78:a5:a5:23:20:d5:5b:2b:aa:3e:b3:d1:15:5e:
                    5b:d8:66:f3:7c:21:24:5f:51:4f:b8:87:b6:c3:2c:
                    eb:b8:0c:70:7d:d9:ee:28:95:38:31:ce:b1:f2:2c:
                    96:55:12:51:20:29:84:f0:9e:b4:4d:bd:2a:d0:66:
                    35:6a:4e:ac:1c:be:df:7d:8d:f7:aa:c8:dc:ff:08:
                    1c:2d:0c:6f:d1:5e:dd:15:78:4d:1c:c1:14:84:67:
                    ff:1d:2d:77:39:49:27:16:9f:94:d5:6b:66:c3:c0:
                    2f:0e:d6:9c:fe:6c:2f:aa:47:ae:e4:c8:91:e8:dd:
                    9c:3a:6f:ca:4c:cb:f7:44:d8:65:08:07:50:e3:b8:
                    8d:6c:3f:35:5b:58:af:d9:79:25:33:40:d3:de:e3:
                    6f:0c:42:3d:ef:48:a7:3b:9f:0b:16:88:75:a1:92:
                    87:3f:c0:8b:aa:6c:a6:b9:d2:9f:a1:94:e5:e6:f7:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:72:89:40:47:2D:AA:F9:BB:A3:29:9A:FD:E4:FA:1C:AB:E5:6F:7B
            X509v3 Authority Key Identifier:
                keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:a7:ea:d2:88:89:ba:47:86:32:6c:fc:ea:a6:1d:cd:7a:
         e2:fb:e9:50:77:01:7b:18:6a:3b:f4:99:4f:bf:fa:01:9d:2d:
         ae:34:0f:a1:59:f8:6e:17:cd:23:01:42:aa:7b:63:be:d5:24:
         20:77:d0:b9:fd:1a:c8:7a:83:12:03:11:83:58:ff:de:5a:dd:
         57:be:97:98:f5:3a:9d:52:54:04:bf:04:c0:a0:2b:71:da:36:
         9e:29:5b:73:fc:b0:96:da:c3:e4:d2:fe:72:79:c0:73:99:ea:
         0c:17:2c:70:58:9f:3b:98:7c:33:41:72:df:3f:be:84:db:7e:
         1f:05:60:98:4f:ef:74:85:0c:01:e0:0a:2e:3b:14:c5:df:17:
         d7:4e:8b:e5:89:53:14:3f:aa:89:6d:90:5a:a0:c2:69:9a:1d:
         70:61:3f:e7:fb:be:8f:0d:02:ac:e3:95:a4:cb:4f:5d:99:7e:
         de:a2:61:f1:43:78:02:f4:c7:2c:3e:41:a6:79:cf:81:f7:d2:
         ac:b7:43:e8:d8:f3:9b:0b:c2:51:55:10:53:42:a1:9f:c0:5a:
         05:ea:27:a4:2e:0e:6c:48:3a:f8:8f:10:19:59:fe:94:87:28:
         7a:10:2a:3a:35:d6:16:f9:18:f7:97:66:d7:d9:44:e5:b4:81:
         8d:63:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:21 2025 by rpki-client