Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          /9LuLSz7lAeqBZfqNy8ji/HqubwrzmNMl9nFXDMi414=
Subject key identifier:   4F:B7:C3:3D:23:EA:0C:A4:AB:49:2E:C4:9F:5E:F5:78:30:B4:47:E7
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       0199FBEAF5ACC6379A90FC3D34E7EE71D887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: hTXQ2WeZ776fg15SYPJrzUDXYuvK82/x6co/WZtZXWg=)
                          2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f5:ac:c6:37:9a:90:fc:3d:34:e7:ee:71:d8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=4fb7c33d23ea0ca4ab492ec49f5ef57830b447e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:4e:1a:bd:f1:94:8b:7c:46:b9:d6:81:9c:
                    d8:43:d4:eb:92:c2:55:c7:0b:86:1f:43:5b:0d:4c:
                    72:43:58:1f:f5:b5:6c:f9:67:60:a8:59:63:5e:b9:
                    2f:b3:ce:48:0b:b6:7a:0a:f8:c8:00:86:fc:b8:cc:
                    ff:c2:29:fb:bd:b2:07:8c:ce:5a:ad:6e:66:9c:34:
                    bb:40:2e:a3:73:38:4b:73:f8:15:6b:a6:82:e6:28:
                    a7:92:69:4e:cf:fb:01:d0:7b:b0:c7:9a:cd:c2:63:
                    88:6e:7e:4a:39:0b:32:46:26:eb:9b:9d:3c:b4:a5:
                    75:ce:df:6a:fb:ad:11:b3:84:2a:37:7b:67:ed:e7:
                    f9:b8:0e:e8:11:24:7a:09:59:6d:72:36:0e:9e:0b:
                    50:c4:9f:e5:8e:e9:03:ed:dc:74:03:fd:51:94:66:
                    48:a0:01:20:30:5a:31:8f:58:83:34:6d:06:72:84:
                    ac:1c:ea:21:cb:c0:b1:e1:39:ba:be:e3:65:9f:96:
                    10:ba:9f:f3:a9:59:20:aa:8b:8c:24:ab:bd:89:90:
                    e6:2c:08:55:07:fd:f1:5f:3c:6a:87:6b:66:4e:e4:
                    ce:37:d7:8a:60:8a:5b:81:ac:26:6b:8c:f0:81:1c:
                    35:ab:6f:46:44:81:ef:4c:3c:6c:ca:1c:89:b8:e7:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:C3:3D:23:EA:0C:A4:AB:49:2E:C4:9F:5E:F5:78:30:B4:47:E7
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:65:d2:71:0d:50:d0:73:6e:bf:de:38:49:49:45:44:ef:
         17:cc:a8:af:3d:0d:e0:7b:41:01:34:f9:fd:10:5e:bd:5d:d5:
         0a:39:58:05:11:6f:9f:1e:9b:67:c4:30:b9:0b:05:15:bf:33:
         46:15:dc:44:45:f8:46:90:bf:ce:51:d1:ab:bf:d1:3b:0e:c6:
         c6:25:b2:d1:45:ef:4a:8b:b9:35:8c:0f:48:c6:8d:f2:45:a6:
         d8:a1:02:52:ff:dd:29:80:1c:2c:e7:3e:0e:78:a8:70:fc:fd:
         7c:66:4d:d6:07:40:9a:86:f3:27:18:1a:42:4b:55:77:fd:ee:
         31:6e:97:a1:d1:05:da:49:62:9c:ee:9c:47:b6:fc:fc:24:c4:
         54:c5:de:8f:3f:ec:c0:01:8c:ed:08:c2:5f:85:59:ba:f0:e2:
         72:ff:5a:95:1f:da:3d:06:44:0e:2c:ef:5c:26:52:a5:92:1c:
         a9:a8:87:17:1c:67:dd:d9:eb:bc:fe:e3:ab:4e:bb:f1:6a:a7:
         5c:4f:d4:74:aa:e6:23:db:49:25:f1:ec:23:42:61:5b:7d:cf:
         e4:67:6a:de:8d:10:43:31:80:bc:ce:a0:ab:de:8d:e3:e3:11:
         6d:69:73:8a:32:ce:13:82:ed:e7:eb:95:da:9c:5c:75:b1:64:
         08:d1:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:15 2025 by rpki-client