Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File:                     TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier:          tvoy5+UKbs1qbEIN5PQHb7zw6CZw4hDE8kWawG2sA1Q=
Subject key identifier:   8B:72:B9:6B:6E:1A:E6:DE:F0:E4:FB:49:A3:6A:3B:D1:39:61:18:67
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer:       /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial:       0199FB7C972D1BAA9A9574ED961475A81FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 08:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:10 +0000
Files and hashes:         1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: MSqn0t0G9nfGdy+Rd64csJ169ivbGbzUr78KrL29Pcg=)
                          2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:97:2d:1b:aa:9a:95:74:ed:96:14:75:a8:1f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
        Validity
            Not Before: Oct 19 08:01:10 2025 GMT
            Not After : Oct 20 08:01:10 2025 GMT
        Subject: CN=8b72b96b6e1ae6def0e4fb49a36a3bd139611867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:33:f9:d0:7c:03:36:8a:74:19:21:1c:d4:
                    8b:ff:c1:81:9e:44:db:b4:22:23:6e:f1:79:bd:da:
                    08:d8:c9:6d:de:a6:ac:db:21:32:f9:a1:02:c7:bf:
                    c9:fb:68:58:46:48:58:7f:cd:36:95:2e:65:67:77:
                    a5:4a:0a:dd:53:0d:3a:f3:3e:e0:f4:5a:ad:e0:c6:
                    63:18:fb:33:ca:d4:e5:f1:cc:51:96:f1:66:9e:af:
                    d9:3e:53:ee:ca:fe:65:13:f7:85:52:b1:f0:ab:46:
                    2f:ae:9d:8c:14:42:aa:1f:a6:7a:1a:84:35:2c:d1:
                    07:6d:b4:50:d6:a6:e8:a4:17:56:6f:14:e9:67:e1:
                    90:ad:93:c7:c8:f1:38:23:b9:a8:1d:65:65:9c:48:
                    95:e7:c0:99:c3:b6:6e:ec:e2:fa:d4:f8:c9:3d:41:
                    c3:a6:e5:5f:f2:36:90:08:8c:9d:49:87:8d:f3:a9:
                    39:60:d4:ca:5b:4e:72:2b:66:db:70:21:13:be:11:
                    2b:67:24:85:7a:7f:84:0d:f4:61:7f:e0:49:8d:8d:
                    38:18:85:24:c1:99:9f:67:05:32:8e:dc:39:31:7a:
                    c0:9c:40:93:da:36:8b:53:71:35:72:f4:7c:38:bb:
                    3f:14:4a:d4:cd:1a:3a:56:fb:4a:7b:4a:f9:98:66:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:B9:6B:6E:1A:E6:DE:F0:E4:FB:49:A3:6A:3B:D1:39:61:18:67
            X509v3 Authority Key Identifier:
                keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:45:7d:3f:15:53:c2:ee:c7:03:a1:ef:6a:38:bd:14:4f:
         b6:5d:47:01:9a:05:c8:e4:52:57:48:90:9f:93:f4:33:35:bb:
         d1:c4:72:42:4d:7e:b3:51:f6:16:df:86:1e:b4:f1:fb:1d:91:
         15:f1:ab:ea:41:bf:e7:3f:5e:81:24:71:03:b5:ea:07:2f:7c:
         95:d7:ec:9e:50:f8:b6:33:2d:a7:10:b3:eb:bb:fc:99:cf:f4:
         73:9e:1b:ee:b6:54:e9:d5:67:d2:16:6b:00:46:fa:27:9b:02:
         1f:7d:fc:fd:72:2f:0b:61:11:17:cb:c9:ac:34:c5:c3:4e:44:
         55:c8:ea:68:ab:0e:fc:68:a1:75:40:96:f4:21:1c:e2:79:3e:
         04:33:73:4e:cd:1d:68:6f:97:8c:5d:60:cb:15:29:31:8e:a2:
         64:67:e5:75:de:47:8a:e7:34:83:78:b2:96:9b:b6:ba:9c:f4:
         25:ce:9c:98:59:dc:8b:cd:c2:58:fd:af:f1:8c:a2:d2:5f:5f:
         72:ea:3a:79:c6:0f:18:84:a2:39:c4:05:a7:61:4e:1d:5e:72:
         c6:47:ce:ad:16:c4:47:dc:ae:28:f5:21:cd:db:9d:b2:e5:c7:
         85:17:3c:0a:71:9f:96:a8:6b:cb:52:0a:c2:c4:39:7a:9a:4e:
         a6:44:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:00 2025 by rpki-client