Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          PNYGrhUdWo65qqJSQtVmFbWFtmqHXEUcrF1357ZvTIc=
Subject key identifier:   81:15:FE:4F:17:1C:F8:75:E1:8E:DE:41:93:A2:23:DE:E9:94:5A:4F
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       0199FE1059FE86DD5445B48EC3799F2DFE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 20:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:48 +0000
Files and hashes:         1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: RV0vgEU7YZ6/GKd4Rc264z9Ox6mqqtmsN3r/WFjEMu4=)
                          2: vtod0X9q1UxXYWyU0iJvMZK0FuU.roa (hash: hazDQDv/KGyD5MQE7kb1mVj2PkHFae3QD7YWTocQdWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:59:fe:86:dd:54:45:b4:8e:c3:79:9f:2d:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Oct 19 20:01:48 2025 GMT
            Not After : Oct 20 20:01:48 2025 GMT
        Subject: CN=8115fe4f171cf875e18ede4193a223dee9945a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:fa:54:78:33:ed:4a:67:47:cb:f3:28:c1:
                    b7:d1:f1:59:6b:d2:2d:9f:b6:b9:76:c2:fa:c4:2c:
                    d0:c0:bf:2d:40:60:9e:3b:99:95:c8:c2:ed:13:0a:
                    02:a5:0d:4e:18:f2:16:6d:a9:9c:3f:95:62:64:83:
                    e8:77:1f:cf:f7:90:a8:a7:4a:e4:53:8f:ff:3a:a3:
                    24:ac:07:39:b8:56:99:a9:c8:f4:0e:7c:35:a5:a9:
                    c8:c0:c6:a3:57:6e:ae:e3:cf:7b:32:b1:47:16:fc:
                    4b:33:ba:f3:9a:0a:ff:d3:02:42:67:e1:0d:78:06:
                    a4:10:eb:07:c8:0e:31:62:40:8b:21:03:00:22:7a:
                    64:04:bc:84:19:cc:69:ee:5c:f1:04:92:47:5c:38:
                    9d:2f:3a:c3:df:69:05:48:e6:6c:46:22:50:64:8a:
                    e6:d3:c7:60:02:88:e4:d2:d5:f0:98:c6:a1:4e:a7:
                    8e:f6:9d:18:6a:5a:0a:10:5f:45:90:df:aa:aa:9e:
                    47:a4:2c:8b:eb:16:79:9c:66:0e:32:15:b6:3e:fb:
                    75:9e:5f:16:e6:6a:97:a7:6e:dc:f6:f5:25:e0:27:
                    69:88:2f:c0:ae:4a:97:12:75:ac:21:e0:f9:6e:3e:
                    3f:87:d6:aa:88:81:8b:61:1a:e5:0a:31:f5:2d:5f:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:15:FE:4F:17:1C:F8:75:E1:8E:DE:41:93:A2:23:DE:E9:94:5A:4F
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:04:1c:0c:87:4c:80:26:64:d3:d1:7a:94:20:c3:e8:6b:27:
         65:e2:24:7c:bd:82:38:bd:84:c9:54:29:2c:30:29:fa:34:ef:
         4f:74:c8:5d:ee:3f:21:88:12:02:47:e3:07:c3:94:81:a3:67:
         7a:e6:0f:ca:fa:76:2c:b5:ca:08:0d:80:83:1d:5a:0f:5f:bb:
         e1:f3:72:77:c6:c0:a1:fc:02:dd:e8:69:1f:ce:86:07:66:39:
         08:51:83:fe:aa:77:35:fe:c4:20:d4:03:db:9f:12:99:97:52:
         b5:38:3e:33:dd:d4:13:b5:20:d6:77:a5:82:03:2a:14:06:f5:
         2d:d9:01:01:ae:04:f2:76:7c:d6:2e:30:0e:e9:ed:fb:61:83:
         a9:ad:2d:39:da:ea:bc:3d:0e:a2:4c:f5:42:39:0b:2b:d4:f2:
         a3:a8:d5:ba:2a:33:6e:c5:d5:71:fc:e2:75:2b:16:c7:ef:70:
         13:a0:b7:1e:3c:fe:5e:04:67:d9:2b:17:25:85:10:7b:b7:af:
         85:3b:c5:8f:4f:71:77:30:4e:ae:d4:c2:23:5b:ac:0f:4d:46:
         c8:54:24:f7:00:1c:fb:59:cf:24:31:94:c6:6e:aa:2d:17:9c:
         c5:7a:e7:79:7f:3f:d4:b4:55:d4:b2:eb:fc:12:8a:1e:41:59:
         60:18:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:33 2025 by rpki-client