Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File:                     TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier:          M7b2ttjXknM1CkKdKqxydZ+sLesahuAX/4uuPd0E/rs=
Subject key identifier:   2D:8F:25:72:F0:9A:2E:70:26:07:A5:83:57:A7:72:2A:C2:DD:11:55
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer:       /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial:       0199FDD8B66B3389771E6CC304A3ECC0D18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:02 +0000
Files and hashes:         1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
                          2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
                          3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: QSRvJe6u18Xi4yRiND0wNu0QeGr9Tu46fKGIinzLkmE=)
                          4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:b6:6b:33:89:77:1e:6c:c3:04:a3:ec:c0:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
        Validity
            Not Before: Oct 19 19:01:02 2025 GMT
            Not After : Oct 20 19:01:02 2025 GMT
        Subject: CN=2d8f2572f09a2e702607a58357a7722ac2dd1155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:4a:e2:00:d5:81:fe:12:9a:ce:6e:15:6e:
                    35:3e:8d:24:9e:9e:51:a4:96:f7:40:c8:08:89:f0:
                    45:24:8d:80:24:2f:19:8f:91:4f:dd:3a:10:22:a6:
                    36:c7:37:0a:72:f7:50:5a:28:36:81:ad:1e:0c:ee:
                    61:43:28:22:86:4c:f9:fe:95:22:98:97:ba:95:eb:
                    ac:60:f0:df:c5:4d:81:c1:86:b9:e6:44:9c:fb:db:
                    db:7d:4d:09:17:a0:53:61:40:4b:4a:0c:ba:01:2c:
                    96:9e:7f:f0:d4:3a:26:45:f6:6e:d1:4e:b8:c8:d1:
                    e2:bf:45:fa:2a:f1:8f:22:92:b9:76:eb:7b:bc:15:
                    de:da:e6:ff:79:16:dc:c9:21:62:d0:d8:5a:33:09:
                    77:59:8a:1c:82:e7:0d:32:cb:59:cc:6b:b7:06:f1:
                    b5:03:e9:e8:07:b7:81:e9:2d:54:f9:6c:cd:95:17:
                    3f:0a:2d:8a:a3:61:b1:a7:2e:b3:84:c0:9f:09:e5:
                    61:1f:14:ea:c9:c2:99:3a:b8:d6:7f:3d:af:1a:2e:
                    96:67:d1:dc:97:7a:e5:3e:8e:8e:e4:3c:13:79:26:
                    80:10:18:fb:89:46:09:d7:31:2c:c6:50:29:90:f3:
                    89:95:80:d0:5b:6e:9c:51:49:48:78:34:ab:a0:6c:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:25:72:F0:9A:2E:70:26:07:A5:83:57:A7:72:2A:C2:DD:11:55
            X509v3 Authority Key Identifier:
                keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:f5:c4:e5:29:7a:b2:58:0c:a5:b8:4d:5b:e2:86:79:2e:3a:
         4f:9b:c6:49:14:4d:ff:65:8a:e1:fc:85:d1:6e:15:c5:f4:de:
         3a:b3:18:9f:34:98:6f:ad:e0:02:1a:b4:c5:56:82:b3:2e:8c:
         ba:f4:c0:55:fd:74:2b:69:42:1d:1d:ea:01:82:d5:73:09:5b:
         a9:04:63:7d:48:f5:32:09:0b:ea:6e:f5:55:52:69:06:dd:a6:
         ac:b1:3c:c8:b8:a8:d8:dc:19:ad:f1:43:52:de:a4:22:1c:de:
         c8:53:9d:8e:18:46:3f:dc:8a:cb:9e:80:0f:42:e1:66:2c:c9:
         33:be:0f:78:5b:ec:79:63:dc:89:42:07:a8:ee:63:5e:87:13:
         a2:52:05:c4:fa:e4:02:a2:4e:79:b2:38:aa:56:17:85:42:aa:
         6f:fc:44:49:36:6b:e4:9a:e5:35:c3:a0:84:79:70:7b:20:04:
         b4:1d:bc:7a:56:74:3d:ae:55:3f:97:81:f4:ab:4e:fc:03:36:
         ad:9a:0b:79:16:81:96:4c:3c:81:01:78:30:26:bd:d1:67:97:
         85:dd:6a:1e:f7:72:b8:01:82:7e:ad:60:1c:33:5a:8b:45:90:
         cd:22:e8:c8:2e:e6:4b:65:31:f5:91:54:48:0f:9f:61:3c:37:
         63:fe:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:34 2025 by rpki-client