Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          rzPPr8/2Drf6QYG6ywpeFNUmGwD1ceoiezAnPJo0v7g=
Subject key identifier:   99:68:B9:54:50:7D:DF:B7:44:C3:7A:80:49:76:6A:E3:0E:1E:E2:EE
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       0199FCFDA98C2EDC3EB3975148A1A52E8335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          12C3
Signing time:             Sun 19 Oct 2025 15:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:46 +0000
Files and hashes:         1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: aefy0NSQVwpPf2Cd74ZlI4LTtCcjajPV+WlS+HVpCsg=)
                          3: mVQlHhnVYgof6PbGg47IlXbHufE.roa (hash: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=)
                          4: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:a9:8c:2e:dc:3e:b3:97:51:48:a1:a5:2e:83:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Oct 19 15:01:46 2025 GMT
            Not After : Oct 20 15:01:46 2025 GMT
        Subject: CN=9968b954507ddfb744c37a8049766ae30e1ee2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:81:87:7e:ec:1b:fb:a2:b4:2d:88:ec:e4:
                    76:df:03:9c:72:b2:d8:07:cb:82:87:67:d0:02:bc:
                    d8:78:19:5c:c0:d8:d5:e9:e2:ba:5e:09:7a:70:63:
                    e4:cf:7e:d0:f3:af:1e:50:82:e6:7d:e3:5d:eb:8a:
                    cb:0a:b3:69:15:4d:85:0f:77:56:0a:56:70:78:e9:
                    0b:0d:dc:a5:cc:e9:22:81:fa:d1:c4:f3:dc:2e:ea:
                    78:a9:3b:8b:61:fa:b9:02:d7:c5:74:f9:1f:88:91:
                    80:6e:c5:3b:9c:1e:95:da:e2:78:5a:5d:51:fd:35:
                    d0:2b:f6:c5:f5:71:e7:11:23:45:00:41:6b:a7:64:
                    59:a9:91:e6:e9:33:c6:45:8a:b3:e3:ee:d6:c9:9a:
                    c1:13:89:a5:a0:63:c1:4f:3e:8f:96:f1:74:62:d9:
                    5c:04:7e:c8:e4:3a:f7:c0:e4:2d:b3:67:36:d7:f9:
                    bc:aa:8f:ed:1c:4b:cf:34:21:7e:7b:dc:f1:87:e4:
                    1a:de:c2:3b:a5:97:17:0c:32:9f:98:cd:36:47:10:
                    2b:b1:3d:ce:a6:b9:2a:6b:72:0c:61:77:a1:af:2d:
                    4d:14:17:f8:dd:aa:ee:aa:60:a6:c3:4e:72:b3:d6:
                    13:15:0e:a9:a3:9e:82:11:c1:4e:c6:7d:55:53:2a:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:B9:54:50:7D:DF:B7:44:C3:7A:80:49:76:6A:E3:0E:1E:E2:EE
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:fe:b9:2d:8f:bc:f7:3e:84:5d:c3:5b:ce:cc:bf:fb:c3:
         ec:f7:ed:5c:a1:7e:97:ed:b4:3a:58:da:02:85:8a:88:83:46:
         56:77:8d:59:9d:9f:55:59:2c:59:c1:73:da:cd:b7:9f:dc:e3:
         69:b9:a7:9d:85:cb:38:d1:26:85:00:ef:a5:ad:73:f9:61:51:
         61:65:bd:f0:e1:28:87:32:50:73:f7:b1:44:04:f3:3f:c4:96:
         ca:fd:99:01:bb:a8:d8:3d:1c:b7:4d:5c:08:94:7a:de:0b:84:
         36:bb:6a:2d:43:6c:70:66:7c:cf:3c:ce:12:0a:62:9d:3d:1c:
         94:55:32:41:11:4c:43:0e:8b:65:01:b6:4c:0d:26:74:2e:12:
         e4:37:db:87:12:07:4a:63:9f:79:1d:73:3b:26:4a:8b:77:3c:
         bb:26:b7:2a:85:81:75:03:de:16:5f:d9:87:8f:d4:20:4d:94:
         cf:43:84:58:6a:02:77:d7:5b:1b:91:95:c6:05:3a:82:c0:70:
         fb:e4:13:b2:ca:a6:bc:57:86:bb:96:36:8c:b4:0e:ad:f0:6c:
         d9:df:3e:ea:5a:c6:7f:00:96:dc:94:6e:6a:de:af:50:e2:41:
         fe:8b:ba:05:23:53:57:33:08:15:5f:ad:8c:88:a3:80:a0:77:
         31:c7:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:11 2025 by rpki-client