Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          fKTB35DMIG+k8Dc0jtbBWLkgKq+zgxOUbyoT20x6WRA=
Subject key identifier:   07:30:B1:03:D7:C3:45:03:4C:DE:CA:71:AF:54:40:57:7F:45:64:BD
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       019A03DA1B976BEFC640DD3A231833C6EEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          16F9
Signing time:             Mon 20 Oct 2025 23:00:16 +0000
Manifest this update:     Mon 20 Oct 2025 23:00:16 +0000
Manifest next update:     Tue 21 Oct 2025 23:00:16 +0000
Files and hashes:         1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
                          2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
                          3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
                          4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
                          5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
                          6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: cL+0EmmjdKWO+SfTLrti6ImFwem7tDsypljbh09ljw0=)
                          7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
                          8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=)
                          9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=)
                          10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:da:1b:97:6b:ef:c6:40:dd:3a:23:18:33:c6:ee:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Oct 20 23:00:16 2025 GMT
            Not After : Oct 21 23:00:16 2025 GMT
        Subject: CN=0730b103d7c345034cdeca71af5440577f4564bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:c3:e6:02:e8:73:0f:1f:6a:54:cd:c8:c8:
                    ff:40:10:45:24:22:75:42:c1:7c:29:bc:8c:d5:38:
                    da:e6:36:e0:3d:cb:a8:46:de:80:f6:f6:0e:68:f6:
                    bc:86:a6:59:86:19:8a:3e:ae:88:43:04:88:ce:d1:
                    45:ba:92:27:3e:0d:80:ef:25:a1:d4:da:f8:c1:5f:
                    ee:0a:bd:7d:51:ef:89:ba:14:28:df:ad:08:24:09:
                    80:4b:7b:bc:4e:7d:f5:19:f9:8d:12:a7:25:d7:b3:
                    ab:58:0f:03:9f:bf:a6:07:8a:72:96:24:b6:27:e3:
                    6b:d3:6f:5c:c1:e6:a5:e1:46:f5:b5:33:b2:b3:f1:
                    65:b8:4a:6d:0a:cb:50:29:c6:cd:55:c6:96:39:43:
                    00:db:a9:71:14:2f:16:a3:6a:2f:c7:c4:ac:d6:63:
                    9c:cb:88:a7:6f:9a:f5:b8:3d:af:2d:05:c8:ef:97:
                    53:bf:e9:21:26:05:44:b8:6b:56:40:66:b7:95:43:
                    d8:61:28:32:cc:91:42:25:18:cf:d0:47:0c:a5:33:
                    df:20:ba:45:76:ab:80:14:f9:94:4e:43:87:15:82:
                    26:8f:35:f4:05:8e:c5:8d:d2:24:91:cd:75:d1:58:
                    3a:ae:2e:f3:93:f5:c5:5f:f5:4a:21:d1:04:9a:05:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:B1:03:D7:C3:45:03:4C:DE:CA:71:AF:54:40:57:7F:45:64:BD
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:85:e8:c2:03:fc:6c:f9:ad:16:6c:ce:8c:30:d2:d4:21:34:
         27:42:78:db:25:cb:f5:47:06:5b:f9:10:65:bf:a8:c5:5e:ad:
         92:95:60:ba:f1:00:44:e8:46:a5:d3:7c:8a:b1:00:a6:a7:28:
         80:5c:14:1e:7d:0b:97:87:7b:a4:07:2e:c0:50:dd:18:73:d7:
         17:8b:da:b3:36:67:83:eb:6a:85:52:b2:74:7b:14:87:16:22:
         06:ae:d1:12:b7:14:fe:bc:79:a3:77:6d:ca:16:11:68:89:c2:
         1b:84:57:b1:1f:f7:f5:a2:a3:14:f4:e5:3b:cc:48:e8:a1:4c:
         94:72:9d:b1:00:f4:71:a6:97:ff:e3:75:51:de:f5:9e:fb:45:
         31:90:98:ae:88:c7:f1:4e:3f:c4:20:0e:e5:43:90:c5:ce:6f:
         07:7b:14:46:29:d6:4e:3f:e6:3c:33:ec:36:ba:dd:6a:bb:30:
         b8:b9:1a:78:f5:9d:4e:56:5d:13:ad:a2:88:3c:19:0c:02:eb:
         8b:27:b2:57:6c:b6:63:c7:58:55:7e:73:9c:56:77:1a:7e:7d:
         21:7e:ce:8c:00:f2:64:6d:0c:1c:40:42:f4:46:8d:04:b8:2c:
         8c:1b:03:a3:83:6b:14:40:a5:b5:c8:15:fa:17:38:56:3b:43:
         ec:59:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:31 2025 by rpki-client