Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File:                     TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier:          HOJIYGrj7RAq4DV8tR9UQpE++PsWKTq1ZM/3Su2j66Q=
Subject key identifier:   18:5F:4A:D9:60:CB:BD:3A:DA:63:0E:CF:93:24:39:83:C9:A5:36:FF
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer:       /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial:       0199FD6B5473A32DCFD8D3ED43E50F4E9420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number:          0129
Signing time:             Sun 19 Oct 2025 17:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:33 +0000
Files and hashes:         1: QQ_XASovNo3q1eWLyoB1-wbVIbw.roa (hash: +nHnAk51WEvv/rAlJaGO2P/ZVC3It8+Q00l0lZIdxpE=)
                          2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: XCHXh4vH+pL0IiFu6gkSalNcjXRQWJ59FEwTC+n88zs=)
                          3: nD6BDJDA_dWwFQl4pf7gAHlOGhg.roa (hash: 1WAvivFyuRPy1SS+2soFEsbLPwjNLXdysbcvAmnfq4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:54:73:a3:2d:cf:d8:d3:ed:43:e5:0f:4e:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
        Validity
            Not Before: Oct 19 17:01:33 2025 GMT
            Not After : Oct 20 17:01:33 2025 GMT
        Subject: CN=185f4ad960cbbd3ada630ecf93243983c9a536ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:1f:d4:20:2b:1e:8a:d1:3a:64:21:2f:47:
                    ba:1e:3d:7c:83:7a:2d:0e:a3:91:73:25:a0:53:55:
                    65:2d:72:da:6d:66:68:80:4b:82:eb:6c:c9:ca:bb:
                    81:9e:cc:d9:1f:5e:95:06:66:56:43:97:df:87:c1:
                    d5:f3:ce:b1:62:79:17:49:3d:9d:62:90:93:80:57:
                    d0:7b:42:4f:44:ba:8b:96:c0:54:60:28:01:1f:ed:
                    28:43:ce:4e:ae:71:44:4b:d8:84:aa:7c:04:42:54:
                    63:81:e8:b8:07:1e:55:f4:e8:eb:f2:35:3b:fc:b6:
                    36:6f:de:26:a4:5d:3d:87:92:11:9b:29:9f:a7:c1:
                    3d:6f:ce:52:25:9b:0f:6f:63:a3:6f:97:30:af:49:
                    46:ca:df:40:33:0d:dd:ac:cc:05:94:de:06:ce:f4:
                    e3:e2:3b:67:e4:4b:47:18:12:8b:aa:3e:0a:f6:33:
                    a8:1c:0f:46:6d:8f:77:ae:8e:aa:df:bc:3d:94:10:
                    69:11:6a:09:64:0e:b2:f6:b3:9e:eb:d0:cc:5a:50:
                    0f:c0:14:f6:99:83:98:3a:a5:19:75:a6:9e:15:ac:
                    1e:36:44:19:dd:52:d9:f6:7b:dc:1d:b9:b3:89:4a:
                    bf:ba:f5:f1:57:cd:22:0b:45:cf:d6:37:c1:a1:2a:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5F:4A:D9:60:CB:BD:3A:DA:63:0E:CF:93:24:39:83:C9:A5:36:FF
            X509v3 Authority Key Identifier:
                keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:a4:c3:b7:c7:52:f4:48:67:dc:4a:36:07:d1:0b:5f:b4:
         25:61:ad:b9:3d:6e:64:b9:5c:e9:74:f2:ff:ea:ec:33:26:2c:
         f2:50:27:49:2e:c4:45:c8:c1:b6:44:18:aa:93:27:2e:b7:b7:
         c4:f0:db:92:68:c1:dc:7a:c0:bd:56:e5:e3:1b:8f:6e:c4:03:
         57:27:f4:c8:45:b5:a2:f8:4b:20:64:b7:26:06:3f:e1:1d:df:
         59:78:88:57:21:43:60:e9:bc:75:1d:60:6a:c4:ce:a7:4f:02:
         e6:8a:9d:91:8f:6d:a5:10:a3:61:85:e2:72:14:d6:50:e3:63:
         84:29:74:50:6b:bf:33:f6:6d:4a:f6:a0:71:9f:cf:62:cd:5e:
         ee:3b:7d:2c:14:8d:31:eb:26:8a:49:b0:72:89:4f:f4:cb:9d:
         26:c4:3d:7d:aa:4d:db:81:10:1b:88:aa:51:eb:9c:56:54:3b:
         11:7d:f5:48:80:57:b2:2a:05:ae:a7:99:81:bd:3d:0c:87:3e:
         76:07:4d:3d:89:2d:c3:64:37:95:66:e7:42:d4:1c:bf:59:5e:
         c7:6b:a2:87:d5:a6:42:0b:3f:a7:35:29:19:30:f9:7a:c5:17:
         e3:df:c7:13:ab:95:30:90:94:27:d6:2e:c0:b4:e7:8c:6b:d9:
         6a:e8:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:47 2025 by rpki-client