Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          tuU5k2fz2OdgDEHtDiyw1fAlT5L7JxUvJNucrZaR89g=
Subject key identifier:   49:AC:24:D8:46:56:D4:16:27:85:E3:3A:AD:68:3A:6F:61:99:82:E7
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       0199FD33F5EFF597C15EAFEDC10BF1FB01DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          10DD
Signing time:             Sun 19 Oct 2025 16:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:04 +0000
Files and hashes:         1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: ywwiO7ZNtYIEfcBChiPyrvQ07sTjK17SYMOsveTup5k=)
                          2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f5:ef:f5:97:c1:5e:af:ed:c1:0b:f1:fb:01:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Oct 19 16:01:04 2025 GMT
            Not After : Oct 20 16:01:04 2025 GMT
        Subject: CN=49ac24d84656d4162785e33aad683a6f619982e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:2f:ba:ac:dc:64:b9:48:94:16:1d:e6:92:
                    c4:09:1f:17:77:e1:86:a5:1d:f5:f0:7e:10:6f:ed:
                    6c:93:0c:0b:8c:f9:95:74:ff:fe:4f:dd:ac:cf:32:
                    70:67:86:19:d6:e4:16:c0:ef:c8:e2:79:37:dc:4a:
                    4d:27:9e:29:07:23:51:4f:57:e5:64:09:6d:12:47:
                    7a:8c:1f:1c:bb:ab:e0:d4:87:08:a6:20:32:65:5a:
                    e4:3d:7b:99:64:9c:3b:b4:cc:73:83:0d:aa:66:07:
                    f0:08:8b:5a:0a:7a:20:92:32:3b:9f:85:79:0d:3f:
                    67:97:ad:5f:3a:07:22:e1:3e:90:c0:ee:73:25:2e:
                    06:02:98:04:9f:37:21:97:38:16:e3:a8:33:e7:fd:
                    7e:73:6c:ce:13:ec:71:8b:65:6d:70:50:c6:28:6a:
                    fa:c0:f2:7c:af:2e:23:96:14:9b:61:47:ab:95:18:
                    1a:ff:35:84:4b:52:96:92:6a:ea:d4:c9:a6:06:b0:
                    1c:3f:dd:59:b0:1b:37:a4:c5:9a:b4:62:1f:f1:55:
                    d1:21:ec:2c:a5:aa:62:32:a1:1d:5b:7d:fe:3a:b0:
                    26:03:ee:43:0b:a5:78:43:63:76:69:9c:2d:08:fc:
                    92:36:60:82:49:e1:38:82:b1:e7:95:cb:db:21:9b:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:24:D8:46:56:D4:16:27:85:E3:3A:AD:68:3A:6F:61:99:82:E7
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ea:b9:87:7b:52:c9:a0:66:57:70:a6:10:85:2d:4a:83:cf:
         69:71:e1:ee:7b:7d:88:38:ab:67:2c:e2:98:47:55:c3:57:0d:
         c7:27:18:70:9f:14:0f:cd:1d:67:c9:55:c9:43:43:f1:34:1c:
         20:b8:f5:ef:bc:9b:d7:b1:0a:6f:d5:62:20:01:7a:96:f1:0b:
         9a:53:b0:05:df:39:41:14:16:94:19:f6:19:bd:26:02:92:66:
         a5:6b:7c:24:9b:4d:d5:0c:81:85:4b:ac:fa:f1:a9:4e:08:f9:
         0a:13:4d:67:a3:8d:4d:8d:77:48:59:51:48:ae:ea:3b:01:c0:
         4a:fd:01:2b:fe:9b:78:97:a3:d7:c2:8b:0a:3c:87:52:ec:35:
         21:fd:89:56:c8:24:51:03:6c:9b:35:3d:9e:86:a8:ee:67:35:
         d9:55:f8:e5:0a:63:6f:37:28:d7:66:34:57:f1:f1:71:28:7c:
         08:75:15:26:3c:41:ef:16:c4:1f:95:d6:d1:98:66:27:a6:dc:
         a7:cc:87:98:6a:58:b7:8b:d2:c9:13:05:06:d4:7c:17:1e:dd:
         fa:1c:a4:50:7c:71:f8:bf:60:e5:a8:3e:8b:f2:31:ec:cb:97:
         17:1d:f9:95:23:fd:47:a1:1d:bf:49:79:a3:a9:71:59:27:3a:
         5b:ab:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:10 2025 by rpki-client