Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          KHSLrxL8c6hcd6xHFP2E4uzcybHpGlvQGf6FuTmL8jU=
Subject key identifier:   14:E3:CD:7F:E8:49:4F:01:F3:C8:12:1D:CC:9B:BA:86:C3:36:AA:D6
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       0199FE0FE8D0A614F47E55EAA82ADB85CCAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          16F6
Signing time:             Sun 19 Oct 2025 20:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:19 +0000
Files and hashes:         1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
                          2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
                          3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
                          4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
                          5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
                          6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: nPx4sW5EWgNMeWN/bgYfpslQENyS/X3oDH0kKyUmHjc=)
                          7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
                          8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=)
                          9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=)
                          10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:e8:d0:a6:14:f4:7e:55:ea:a8:2a:db:85:cc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Oct 19 20:01:19 2025 GMT
            Not After : Oct 20 20:01:19 2025 GMT
        Subject: CN=14e3cd7fe8494f01f3c8121dcc9bba86c336aad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:90:07:a8:6d:a8:24:7e:c5:b7:d1:bb:b1:
                    19:cb:9d:a6:98:7b:9f:39:d9:04:f0:32:89:5e:a5:
                    24:7f:34:2b:64:e1:d1:39:08:37:05:e7:27:ba:31:
                    76:ba:7d:42:b3:dc:33:ed:cf:56:50:34:80:51:ae:
                    0e:82:b7:9f:cb:6a:32:eb:7b:af:35:ea:ad:81:fd:
                    77:49:37:6b:71:cf:0d:65:47:f7:d5:9a:6d:c1:69:
                    b3:83:f9:4e:3f:5c:a8:f2:ca:d2:7e:29:18:e8:61:
                    83:cd:3d:aa:ec:3d:d6:b2:29:15:f4:05:21:d4:9c:
                    2f:bb:45:c0:a3:c5:c5:1b:ba:f2:c2:f7:c0:59:1c:
                    52:1b:6e:6b:b1:89:b8:af:e6:a4:4e:e5:cc:3a:25:
                    d1:1d:f8:b5:1c:d0:33:70:1f:24:56:fa:b2:9f:00:
                    7f:19:bb:96:af:f8:68:ef:ac:9e:d1:3b:5c:c6:86:
                    88:17:9c:f0:8a:7c:75:fe:cb:6b:ff:65:f7:dc:35:
                    18:66:35:aa:ce:4c:6f:ef:5b:66:b6:82:60:70:47:
                    68:9e:9c:9e:7d:3e:73:4e:c0:c1:5b:12:ab:42:ee:
                    23:45:1b:9a:d9:eb:bf:b7:36:fd:d2:74:77:3c:c2:
                    1d:35:89:0e:76:d0:d3:60:00:a6:ff:0c:0c:5d:86:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E3:CD:7F:E8:49:4F:01:F3:C8:12:1D:CC:9B:BA:86:C3:36:AA:D6
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:f2:dc:28:3d:a3:52:e5:3e:0b:a4:9e:94:3f:6a:31:b1:
         e7:0d:80:e2:c2:18:49:6c:fa:7a:2c:ce:02:4d:9b:ca:be:ef:
         a1:b5:6d:f8:fa:1c:77:c0:8d:b2:c2:27:50:ec:e1:44:2f:76:
         d4:d8:c1:75:25:93:0b:24:93:cc:82:84:6f:94:d2:fd:e7:b6:
         b4:3f:11:94:07:9a:6d:d0:0c:35:a5:03:8f:cf:71:59:74:9b:
         69:0a:fd:27:ef:4a:6d:ee:a0:3a:1a:63:5f:69:fa:e5:0d:7a:
         2b:3d:3c:13:8a:6c:4b:8f:a4:3e:f3:e6:42:9f:c1:d8:a3:0e:
         c0:bc:2e:57:f8:fd:c5:69:27:ee:cf:82:bc:22:a0:ab:9e:a2:
         c2:ad:ca:50:66:65:d4:bb:7f:52:2c:08:cb:62:c5:20:7b:e1:
         ae:ff:54:db:57:ee:fc:19:12:ad:51:9b:d6:31:11:06:84:d2:
         aa:c5:0d:c3:96:69:f0:9c:fa:2f:a3:99:ad:27:b7:87:83:12:
         d7:fc:2f:93:85:bf:be:f1:61:b7:26:29:45:de:52:2e:c7:85:
         1c:d6:3a:76:86:fe:c1:26:19:1e:fd:fa:ff:de:67:f2:16:0a:
         6a:73:ef:ce:f8:81:59:d1:75:8e:26:9f:f2:6b:63:72:31:91:
         d9:42:48:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+jQphT0flXqqCrbhcyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjUxMDE5MjAwMTE5WhcNMjUxMDIwMjAwMTE5WjAzMTEwLwYDVQQD
EygxNGUzY2Q3ZmU4NDk0ZjAxZjNjODEyMWRjYzliYmE4NmMzMzZhYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MWQB6htqCR+xbfRu7EZy52mmHuf
OdkE8DKJXqUkfzQrZOHROQg3BecnujF2un1Cs9wz7c9WUDSAUa4Ogrefy2oy63uv
Neqtgf13STdrcc8NZUf31ZptwWmzg/lOP1yo8srSfikY6GGDzT2q7D3WsikV9AUh
1Jwvu0XAo8XFG7rywvfAWRxSG25rsYm4r+akTuXMOiXRHfi1HNAzcB8kVvqynwB/
GbuWr/ho76ye0TtcxoaIF5zwinx1/str/2X33DUYZjWqzkxv71tmtoJgcEdonpye
fT5zTsDBWxKrQu4jRRua2eu/tzb90nR3PMIdNYkOdtDTYACm/wwMXYYOSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTjzX/oSU8B88gSHcybuobDNqrWMB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXXy3Cg9
o1LlPguknpQ/ajGx5w2A4sIYSWz6eizOAk2byr7vobVt+Pocd8CNssInUOzhRC92
1NjBdSWTCySTzIKEb5TS/ee2tD8RlAeabdAMNaUDj89xWXSbaQr9J+9Kbe6gOhpj
X2n65Q16Kz08E4psS4+kPvPmQp/B2KMOwLwuV/j9xWkn7s+CvCKgq56iwq3KUGZl
1Lt/UiwIy2LFIHvhrv9U21fu/BkSrVGb1jERBoTSqsUNw5Zp8Jz6L6OZrSe3h4MS
1/wvk4W/vvFhtyYpRd5SLseFHNY6dob+wSYZHv36/95n8hYKanPvzviBWdF1jiaf
8mtjcjGR2UJIgw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:33 2025 by rpki-client