Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File:                     TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier:          RM2+e2y1bUit1fKYcVrQWKDi83Ixoc/pkUvoBH2PIdg=
Subject key identifier:   62:F0:03:85:C6:9A:2C:EC:53:55:6C:D5:2E:47:2C:32:F1:E7:5F:BA
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer:       /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial:       0199FA6A6EBF8A556E981D93C657D8B2DDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 03:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:43 +0000
Files and hashes:         1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
                          2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: mEdHtq6OkB+SEhGlPFtuWzgFRVwvWMTPLe9MDENh+TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:6e:bf:8a:55:6e:98:1d:93:c6:57:d8:b2:dd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
        Validity
            Not Before: Oct 19 03:01:43 2025 GMT
            Not After : Oct 20 03:01:43 2025 GMT
        Subject: CN=62f00385c69a2cec53556cd52e472c32f1e75fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:87:09:71:b1:ba:35:e9:5d:23:06:94:c0:
                    07:d9:ca:c7:7e:03:f0:4f:4e:6f:75:70:49:45:70:
                    5b:6f:78:89:56:71:d7:09:73:d1:c4:47:55:31:a1:
                    47:51:0a:4c:8c:4b:9f:26:7f:b2:a4:fc:a4:05:e2:
                    48:59:ff:47:07:9e:6d:ef:fe:fe:8c:7a:e1:8f:6e:
                    96:4f:76:69:9f:21:b1:6d:b4:5a:67:f8:87:32:89:
                    a2:6a:23:53:a1:57:a0:60:ca:d7:7a:d1:75:d5:6b:
                    1d:d3:77:e6:08:30:8c:93:c5:d3:22:ab:cb:cc:95:
                    58:48:c1:03:c3:39:aa:f5:fb:b7:75:58:e4:98:3d:
                    79:94:8a:0c:d8:e9:6d:eb:b5:16:65:c8:21:cb:37:
                    d0:f8:0b:5c:12:80:97:50:67:21:6f:54:7b:ec:35:
                    84:97:03:8a:f7:5f:a3:cc:21:f4:d7:e0:51:4c:25:
                    a4:52:14:7d:f4:5c:16:e6:e1:2c:31:2e:33:a9:ca:
                    bb:a5:bf:06:f9:3c:b8:fe:7b:6c:82:43:d1:e0:46:
                    28:43:ca:85:23:3c:84:32:0d:d8:4a:64:eb:fa:e9:
                    c9:68:25:3f:b5:87:e8:28:ac:63:a2:ba:fa:37:d6:
                    de:9d:b3:f4:cc:57:a3:a1:d7:a0:c4:1b:bd:10:0a:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:03:85:C6:9A:2C:EC:53:55:6C:D5:2E:47:2C:32:F1:E7:5F:BA
            X509v3 Authority Key Identifier:
                keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:99:45:f2:b8:bf:99:e8:53:5b:3e:40:30:a1:ef:5e:08:
         f6:57:09:84:3e:f6:c4:22:89:c6:7e:ec:48:05:20:62:f9:af:
         d1:3b:f5:03:02:8f:ce:d1:a3:60:1f:db:ba:90:0a:15:ec:50:
         0d:1d:56:18:3f:90:65:ad:4b:89:cb:80:09:38:52:5c:d5:22:
         e2:f1:d0:a9:12:98:e6:dc:d6:6d:1e:8a:85:fb:c7:a8:2d:28:
         fe:be:74:a6:74:fb:b6:61:39:6b:21:e3:2a:c6:32:fb:2a:29:
         1b:ea:63:ce:b6:86:9e:02:d7:82:13:d7:7d:d4:9c:b6:83:3c:
         73:96:26:c0:40:ac:1a:71:be:1d:cb:74:48:d2:78:2f:7e:30:
         e0:37:c0:3c:b6:f0:4c:f9:cc:d2:05:a6:be:5a:74:fc:c0:f3:
         f4:19:87:8e:d8:67:43:a4:eb:e8:54:aa:13:e7:e9:fb:01:53:
         c0:a4:5f:26:91:a9:ef:f4:2d:46:e5:d5:be:46:fc:fe:8c:38:
         95:8e:8a:71:7d:e5:82:70:7a:ba:0f:2d:d2:e7:ce:f5:9c:c7:
         30:59:4a:58:60:8e:98:e6:1e:d2:3a:72:74:94:9f:8c:0e:12:
         40:e8:82:3e:ba:81:b1:5f:e9:35:22:4b:e0:a0:26:6a:f2:2a:
         77:de:3c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6am6/ilVumB2TxlfYst3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz
MDM2NWEwHhcNMjUxMDE5MDMwMTQzWhcNMjUxMDIwMDMwMTQzWjAzMTEwLwYDVQQD
Eyg2MmYwMDM4NWM2OWEyY2VjNTM1NTZjZDUyZTQ3MmMzMmYxZTc1ZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r6HCXGxujXpXSMGlMAH2crHfgPw
T05vdXBJRXBbb3iJVnHXCXPRxEdVMaFHUQpMjEufJn+ypPykBeJIWf9HB55t7/7+
jHrhj26WT3ZpnyGxbbRaZ/iHMomiaiNToVegYMrXetF11Wsd03fmCDCMk8XTIqvL
zJVYSMEDwzmq9fu3dVjkmD15lIoM2Olt67UWZcghyzfQ+AtcEoCXUGchb1R77DWE
lwOK91+jzCH01+BRTCWkUhR99FwW5uEsMS4zqcq7pb8G+Ty4/ntsgkPR4EYoQ8qF
IzyEMg3YSmTr+unJaCU/tYfoKKxjorr6N9benbP0zFejodegxBu9EAp5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLwA4XGmizsU1Vs1S5HLDLx51+6MB8GA1UdIwQY
MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt
M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk
LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLyZRfK4
v5noU1s+QDCh714I9lcJhD72xCKJxn7sSAUgYvmv0Tv1AwKPztGjYB/bupAKFexQ
DR1WGD+QZa1LicuACThSXNUi4vHQqRKY5tzWbR6KhfvHqC0o/r50pnT7tmE5ayHj
KsYy+yopG+pjzraGngLXghPXfdSctoM8c5YmwECsGnG+Hct0SNJ4L34w4DfAPLbw
TPnM0gWmvlp0/MDz9BmHjthnQ6Tr6FSqE+fp+wFTwKRfJpGp7/QtRuXVvkb8/ow4
lY6KcX3lgnB6ug8t0ufO9ZzHMFlKWGCOmOYe0jpydJSfjA4SQOiCPrqBsV/pNSJL
4KAmavIqd9480Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:02 2025 by rpki-client