Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          3E7fgkURhSbILwILQZ+2TSi3xACIzc6HWzGE61hITkc=
Subject key identifier:   7E:EF:15:D2:CC:32:19:74:D6:0D:53:83:04:76:3A:11:F8:7E:D1:9B
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       019A00356ECC0567CB41F2D5B964EB7B305D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          16EB
Signing time:             Mon 20 Oct 2025 06:01:33 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:33 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:33 +0000
Files and hashes:         1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
                          2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
                          3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: HgupwmSC+bM3JlLtOIra8JHzVTLsQIo9Gk5ELHdInbk=)
                          4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
                          5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
                          6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
                          7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
                          8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
                          9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:6e:cc:05:67:cb:41:f2:d5:b9:64:eb:7b:30:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Oct 20 06:01:33 2025 GMT
            Not After : Oct 21 06:01:33 2025 GMT
        Subject: CN=7eef15d2cc321974d60d538304763a11f87ed19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:96:95:bf:0c:03:45:1c:fb:a6:85:82:c7:c8:
                    b6:20:8a:84:79:ec:42:c0:d0:6e:1b:f4:07:e9:be:
                    8a:c2:c6:81:59:c9:5d:d3:f0:18:34:5a:df:e2:0f:
                    30:b9:62:84:1f:45:c1:48:50:49:60:f7:43:cf:93:
                    16:94:ef:a2:b0:c7:19:c4:d3:fa:91:5d:0e:e9:55:
                    af:db:6d:3d:ff:d8:e6:56:a2:a1:a8:c0:cf:78:ab:
                    c6:7d:c5:07:d5:14:a0:4a:6c:00:b5:6f:23:b1:d3:
                    06:8f:af:07:5a:39:95:84:ec:9b:f2:5d:52:8a:0b:
                    86:b5:0f:8f:2d:76:9a:fb:35:79:92:d9:05:cb:85:
                    80:1f:18:be:f8:ba:b8:76:29:d9:0d:a7:af:94:96:
                    92:ef:db:52:e3:5f:a0:24:24:c7:b8:ce:59:41:12:
                    2a:ab:25:63:80:09:28:f6:c3:ad:2c:1d:38:81:08:
                    74:1d:a4:9a:07:bc:e1:0a:21:f9:6f:6b:61:cb:dd:
                    78:6b:c4:e7:4e:8b:5c:04:c3:86:e7:d6:c7:ed:ed:
                    c7:78:b8:f8:a1:4a:1b:1a:be:a1:b9:a3:84:9f:08:
                    ee:80:3c:9a:fb:d4:77:53:6e:69:d6:b3:21:d2:a0:
                    f9:f3:9b:da:a1:73:69:e6:aa:91:6d:fc:0c:8b:0c:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EF:15:D2:CC:32:19:74:D6:0D:53:83:04:76:3A:11:F8:7E:D1:9B
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:62:53:cc:9c:f6:f9:f3:a4:9b:e8:e2:af:51:aa:31:ad:
         0b:be:f2:bc:1a:a7:5e:0d:e7:b7:6a:8f:0e:27:f6:7d:b4:c7:
         1d:ad:32:b7:2e:9c:70:1d:9f:3f:6c:51:42:8e:ae:57:65:83:
         f7:49:24:85:6b:a6:5a:2b:a2:4f:54:2f:4f:cf:fe:0b:8e:38:
         aa:e1:86:0b:2c:9b:6a:0c:8b:5d:d0:64:3e:bf:4d:3b:08:7a:
         b6:20:33:7a:94:7b:9e:40:41:3d:16:27:d5:c6:05:19:47:0e:
         aa:5d:03:b1:0c:e7:7b:f3:a9:35:95:bf:6b:79:73:a3:44:2f:
         e7:33:6b:77:f8:6b:1a:1c:e7:0e:32:5a:ff:e7:78:e2:9c:56:
         d1:83:f7:8d:0a:89:da:2e:8d:e7:a9:53:72:d7:f1:09:65:25:
         d5:a2:78:82:60:12:60:17:d7:a1:e9:6e:3b:7d:4f:65:05:e3:
         b5:4b:d2:5b:a9:fe:ba:38:44:d6:72:9b:ba:47:28:9d:cc:3f:
         d2:94:36:c8:b8:89:d9:de:65:7b:a0:9d:63:0f:03:f0:cb:9b:
         65:83:37:5f:e9:7d:d4:cf:bc:15:b9:e1:2b:1c:ec:d7:43:ec:
         16:64:31:4d:fd:51:19:10:46:9b:8e:2c:3b:48:6c:26:17:0c:
         bc:2e:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:44 2025 by rpki-client