Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File:                     TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier:          nYTcV6K6ZuOVEcPJH14y5CYRzpd9+FXfbWgPq5r4RdU=
Subject key identifier:   43:30:26:D4:CD:5A:8E:4F:3E:CC:A8:76:BB:F2:CB:D1:44:EB:BB:CD
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer:       /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial:       0199FA6A4ED2537300C997F53FF8ADD06353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 03:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:34 +0000
Files and hashes:         1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
                          2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: SthueyqDnEksASyzL80dFhLwUctok+GY5hOrVuQ+g7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:4e:d2:53:73:00:c9:97:f5:3f:f8:ad:d0:63:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
        Validity
            Not Before: Oct 19 03:01:34 2025 GMT
            Not After : Oct 20 03:01:34 2025 GMT
        Subject: CN=433026d4cd5a8e4f3ecca876bbf2cbd144ebbbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:7e:ee:d8:ce:a3:6b:7a:98:12:f7:25:e5:
                    ba:0d:44:49:c9:ca:10:6f:a3:88:03:02:a3:a5:40:
                    cc:34:60:fd:b5:f9:a5:be:93:c9:63:dc:43:0b:bf:
                    37:1c:f4:db:b4:b1:fc:38:5a:71:df:67:74:e0:cf:
                    d0:a2:88:ec:a2:05:3f:10:07:6d:4e:4c:c9:68:2d:
                    c8:f1:ae:ac:1a:33:bd:10:2c:ea:5f:55:de:60:2a:
                    ff:88:1e:07:65:7d:e7:7a:1c:33:10:41:29:b4:e6:
                    39:12:7d:ee:f0:52:81:6f:70:f8:3d:0b:aa:a0:6a:
                    52:60:0f:68:0f:5e:e3:56:1e:38:2e:47:9d:7d:f6:
                    3b:0f:71:e1:f9:4e:c9:90:79:ed:c9:75:b7:0b:dc:
                    08:5e:74:79:ea:a4:ee:97:38:83:30:ef:73:5f:b9:
                    f9:a1:65:75:92:48:30:de:62:50:b9:a3:d7:f1:cf:
                    fa:57:f1:ae:32:e0:18:75:83:91:f2:32:cc:80:19:
                    76:e7:81:ea:31:ed:bb:e8:7c:74:d6:a4:3e:05:0d:
                    9d:a0:86:f3:db:5c:aa:85:52:6e:ab:16:24:84:a3:
                    d5:57:23:0d:fe:79:5a:1e:16:31:6d:aa:0e:cd:9b:
                    1e:b4:4a:eb:2a:f6:8d:bf:51:71:46:e3:6c:40:4d:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:26:D4:CD:5A:8E:4F:3E:CC:A8:76:BB:F2:CB:D1:44:EB:BB:CD
            X509v3 Authority Key Identifier:
                keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:cf:02:7d:e8:43:bf:19:3f:5c:bb:8f:0b:7a:f2:2a:74:
         6b:58:b8:d2:3e:ca:81:a0:03:13:d0:96:0e:b7:49:84:13:f4:
         df:97:45:8e:ce:74:0e:5a:e9:f0:25:9c:77:91:43:ab:0b:ca:
         18:11:4d:dd:5b:09:28:f3:a2:71:34:01:46:7f:17:79:ee:11:
         ea:86:0c:9d:4a:c2:92:2e:dd:50:ed:fe:7b:d3:e1:36:e1:c5:
         04:06:71:5d:e3:4f:2f:35:1a:91:7c:3d:fd:11:d0:ed:36:05:
         69:43:53:cf:51:1c:d2:5b:ba:4d:66:dd:24:90:70:ca:89:b5:
         fc:0c:63:7b:a4:d0:a1:e4:bc:b4:5f:8c:1f:e9:c4:54:cd:39:
         39:a2:5f:57:25:cc:01:3f:22:13:80:6d:d1:bc:7d:27:e3:e4:
         aa:87:41:89:cf:f8:6c:f8:cf:5b:03:02:71:19:47:31:1b:7e:
         d8:7f:1f:c7:b4:e8:13:81:b7:b0:89:13:a0:7a:cc:07:37:21:
         7c:82:0e:98:6d:42:89:87:b4:5e:88:3b:38:4b:ce:ed:9d:6c:
         10:e0:a0:c2:7e:af:67:b5:0e:ef:b5:5d:f9:6d:89:aa:74:9d:
         7e:a3:c5:9f:c2:55:ef:69:0f:1c:d4:46:0b:03:47:4a:08:23:
         3d:23:2c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6ak7SU3MAyZf1P/it0GNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjUxMDE5MDMwMTM0WhcNMjUxMDIwMDMwMTM0WjAzMTEwLwYDVQQD
Eyg0MzMwMjZkNGNkNWE4ZTRmM2VjY2E4NzZiYmYyY2JkMTQ0ZWJiYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlB+7tjOo2t6mBL3JeW6DURJycoQ
b6OIAwKjpUDMNGD9tfmlvpPJY9xDC783HPTbtLH8OFpx32d04M/QoojsogU/EAdt
TkzJaC3I8a6sGjO9ECzqX1XeYCr/iB4HZX3nehwzEEEptOY5En3u8FKBb3D4PQuq
oGpSYA9oD17jVh44LkedffY7D3Hh+U7JkHntyXW3C9wIXnR56qTulziDMO9zX7n5
oWV1kkgw3mJQuaPX8c/6V/GuMuAYdYOR8jLMgBl254HqMe276Hx01qQ+BQ2doIbz
21yqhVJuqxYkhKPVVyMN/nlaHhYxbaoOzZsetErrKvaNv1FxRuNsQE1iWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMwJtTNWo5PPsyodrvyy9FE67vNMB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkLPAn3o
Q78ZP1y7jwt68ip0a1i40j7KgaADE9CWDrdJhBP035dFjs50Dlrp8CWcd5FDqwvK
GBFN3VsJKPOicTQBRn8Xee4R6oYMnUrCki7dUO3+e9PhNuHFBAZxXeNPLzUakXw9
/RHQ7TYFaUNTz1Ec0lu6TWbdJJBwyom1/Axje6TQoeS8tF+MH+nEVM05OaJfVyXM
AT8iE4Bt0bx9J+PkqodBic/4bPjPWwMCcRlHMRt+2H8fx7ToE4G3sIkToHrMBzch
fIIOmG1CiYe0Xog7OEvO7Z1sEOCgwn6vZ7UO77Vd+W2JqnSdfqPFn8JV72kPHNRG
CwNHSggjPSMsaQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:54 2025 by rpki-client