Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File:                     tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier:          UZAFr5gb+qXXqYvC/01vTunBotBY7UakoxXP+FQCVQI=
Subject key identifier:   C6:93:CC:90:DE:D6:41:A6:9B:86:E0:30:0E:EF:55:1D:FC:5F:51:D8
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer:       /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial:       0199FB0F286422887AAE025C6643F7335A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number:          0D46
Signing time:             Sun 19 Oct 2025 06:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:38 +0000
Files and hashes:         1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
                          2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: v4OuQx9j8vQN75+ADz/4pxPQFwXSeORjkkQRQrel02Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:28:64:22:88:7a:ae:02:5c:66:43:f7:33:5a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
        Validity
            Not Before: Oct 19 06:01:38 2025 GMT
            Not After : Oct 20 06:01:38 2025 GMT
        Subject: CN=c693cc90ded641a69b86e0300eef551dfc5f51d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:61:65:58:33:94:75:0d:c0:48:e9:10:cb:
                    9e:bc:3f:8d:e0:99:ed:5d:bc:94:d9:44:fc:30:33:
                    b9:7d:1a:c2:30:f2:15:80:38:7d:f3:cd:58:41:c4:
                    dd:e6:74:12:aa:fd:9c:02:a6:35:ce:94:d3:ac:70:
                    83:97:d0:7f:02:52:fd:a4:20:fe:87:b3:45:47:13:
                    73:9a:32:0c:b3:8e:9d:a3:81:fa:d1:de:0b:59:55:
                    40:34:b0:6a:1c:0a:9e:de:75:e4:bd:90:be:4b:3c:
                    e0:71:75:d6:56:4a:92:58:96:ad:c6:3e:5d:b2:1f:
                    26:63:3c:5b:fc:9d:8a:4d:5d:23:0b:e7:2a:31:af:
                    cf:25:63:e6:34:a7:fe:c0:37:00:63:f4:b8:c6:a1:
                    54:e4:6a:98:4d:33:9e:eb:e9:85:04:ae:53:49:21:
                    5f:0c:15:fc:1c:aa:15:5e:86:3d:39:ff:3d:d1:bc:
                    d3:37:74:cd:b2:59:96:9f:56:b5:b8:34:4b:f6:8d:
                    54:f5:dd:15:73:23:05:9b:9a:d2:89:a9:d7:7b:4e:
                    55:2e:6b:f8:fa:7f:70:49:56:d2:77:74:77:52:4d:
                    95:3c:4b:a3:ac:8f:1f:03:ed:13:1b:44:40:64:d3:
                    07:9d:e5:99:21:d7:9c:c5:17:1f:22:ee:fc:3e:50:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:CC:90:DE:D6:41:A6:9B:86:E0:30:0E:EF:55:1D:FC:5F:51:D8
            X509v3 Authority Key Identifier:
                keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:06:7f:2c:47:ff:a9:c2:14:33:d1:05:c6:52:96:b9:23:
         f1:ff:d9:fa:6d:ac:66:31:75:46:d6:f2:0b:ef:a2:b0:58:c0:
         2b:03:4c:04:a9:c2:3e:98:6c:bb:f6:62:55:08:07:48:87:0c:
         82:ac:f7:89:ca:16:4f:c1:7f:3f:af:41:3a:3f:27:a6:43:aa:
         75:fa:1a:ca:dc:83:86:27:c8:39:6d:8b:7e:0c:e1:76:51:61:
         b7:8b:7d:8f:51:ea:95:14:72:7c:ac:22:b3:d8:b4:ac:2c:a2:
         29:99:c9:b2:a4:ee:ef:3d:dd:4e:81:cf:24:14:65:2f:2c:1c:
         76:25:e7:ed:e0:f8:c2:a0:c4:4e:96:33:0e:e9:72:86:da:09:
         68:23:7c:a0:f2:58:59:e9:15:72:b7:8c:01:e5:59:32:82:04:
         1f:04:b7:d7:91:9a:82:b4:f1:5f:81:f4:49:78:a3:aa:48:ed:
         ba:ae:ae:a4:8e:c3:7b:bf:9f:4b:41:a5:62:6c:9a:dd:0b:f3:
         0b:3f:2e:b1:fd:e7:24:27:aa:f5:c4:c9:af:94:92:22:07:03:
         c3:5d:a0:3a:5d:69:ba:66:ee:c3:e8:99:5e:18:37:e7:bd:a9:
         b7:84:0e:0a:9b:03:c7:ee:e1:ce:02:12:13:95:dc:53:a0:9d:
         d4:5c:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:28 2025 by rpki-client