Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          iPdms1Nkj0zkGwlltjNEADbapSAPwMkyuER6CprvWzI=
Subject key identifier:   51:03:EA:DF:1C:9F:17:EE:3C:A3:4B:65:D9:9D:66:00:27:3C:FA:ED
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019A006C27F8E70374881CB9F44C59978D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          16ED
Signing time:             Mon 20 Oct 2025 07:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:19 +0000
Files and hashes:         1: 16-jUNfPaeEDFi2CG2Dls7NK5lg.roa (hash: 9zFXZ8EDGdJp6On1sZ8dp628uiNp48YN4eESkdpnuOk=)
                          2: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
                          3: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: OLRWbNQOTFlWpvjGSlkxO8u0BynHBnrl+GhA2B3jT9Q=)
                          4: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:27:f8:e7:03:74:88:1c:b9:f4:4c:59:97:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct 20 07:01:19 2025 GMT
            Not After : Oct 21 07:01:19 2025 GMT
        Subject: CN=5103eadf1c9f17ee3ca34b65d99d6600273cfaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:76:15:ee:6a:75:78:24:db:84:89:31:65:
                    c5:a5:16:8f:1f:ee:8c:de:fe:92:95:31:09:b7:34:
                    44:00:02:15:46:88:53:f7:3c:14:37:bc:25:e1:8b:
                    7c:ec:bb:09:76:3a:6c:26:ef:1d:95:56:e6:83:3b:
                    98:bd:9c:0e:23:48:3f:f2:e6:ef:d4:4c:29:5a:f7:
                    8a:2e:e7:ea:2b:87:27:fd:24:ad:20:3c:3b:d7:8e:
                    11:04:97:da:d0:04:2d:e8:b2:61:d3:c3:91:4d:40:
                    38:f8:5b:95:5f:96:36:57:76:44:40:46:07:13:b5:
                    8e:61:ba:15:d1:4d:90:8d:4a:8d:b6:98:42:fe:6a:
                    24:73:b7:99:69:45:16:71:61:cd:9e:97:95:8f:93:
                    4c:65:88:3a:69:0d:49:ad:02:9d:6b:4d:20:09:3c:
                    4f:ee:4a:9f:13:a7:8d:1c:53:a6:21:12:69:14:f2:
                    86:0c:16:f4:a0:dd:f4:e4:2d:3e:98:75:21:06:35:
                    8f:6a:db:52:8e:62:49:d0:61:e4:7c:92:16:24:1a:
                    4f:19:9d:4d:61:df:11:51:07:a7:83:87:ef:b7:f5:
                    be:23:ff:f6:b0:e2:d4:ba:cf:0f:48:62:0c:e5:42:
                    82:0d:03:62:78:21:19:87:db:76:6f:4f:58:e6:4c:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:03:EA:DF:1C:9F:17:EE:3C:A3:4B:65:D9:9D:66:00:27:3C:FA:ED
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:df:15:53:17:23:ec:ae:95:94:b8:89:c6:57:ea:a3:a8:
         fd:98:64:e8:15:17:b6:3e:e4:ec:b8:39:0b:a4:09:29:5b:e8:
         31:51:87:4f:59:18:d3:cf:5e:4c:0f:d4:09:ff:7b:fa:28:04:
         4f:4f:1e:49:d5:a6:61:c0:b7:61:1d:2e:cc:6d:89:7c:b6:d7:
         d8:c7:15:e7:7e:35:d7:5c:e2:d1:1c:8c:60:e2:88:19:21:d1:
         54:08:0c:d8:2f:aa:38:20:ce:84:b3:9a:f7:75:7b:c2:dc:08:
         65:42:55:44:1a:ed:65:ea:40:d3:1d:0c:90:04:6e:0b:bd:b2:
         90:24:22:d4:49:80:35:d5:75:76:ed:77:44:28:97:e5:e4:8b:
         c0:d6:ca:1c:62:c9:e7:81:85:2d:87:dd:99:30:00:ac:4c:88:
         a2:46:e3:a2:0a:01:42:80:bb:15:15:0e:3d:0b:74:44:0f:6c:
         0b:17:8e:cc:3e:75:ab:57:d6:5b:cf:e9:f5:47:a2:ee:d8:c6:
         97:73:e5:c0:ea:54:57:20:bd:3b:91:b6:1d:c2:36:2c:ec:03:
         3e:1a:5d:42:18:dd:f2:9a:ce:97:88:cc:31:f7:f2:6e:63:8d:
         ca:3c:95:d5:13:5c:54:d4:67:39:a5:62:94:f4:53:6b:5d:07:
         3e:f5:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:50 2025 by rpki-client