Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          sNo9o0p4aHPL5P4OEBYe5/vU6MSwqalfl6dtabIKW0M=
Subject key identifier:   2A:29:0E:B9:92:24:38:E0:91:22:10:05:52:14:2D:4C:88:27:A9:DB
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019A50E2E627F0EEE15891E03231577D7FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          0104
Signing time:             Tue 04 Nov 2025 22:00:38 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:38 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:38 +0000
Files and hashes:         1: 4Vk4JEUOO7Z8F7RLvQIBiIwUlEI.roa (hash: rcW0o0NPhb5z9zMvMiuZsijCh+e9Jb8o7gbV3WSd0Yo=)
                          2: 5eOpZ_VbK_AsCtNFBwr6V5q25mA.roa (hash: /d2c751AjrNowXlWGm7ktfdmB8uq9hd//jNoOLsL47A=)
                          3: 9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa (hash: Oph3EY1I7qKANoza6w+PZiQdqIJHyMeGx03HDQGfB8E=)
                          4: J-BM_Ca54Ppe1TH_JAPmfmThPF8.roa (hash: 2hiZg6+oGhdSn69vdZDUaG+7SsG9WkxCcOP68C1coYw=)
                          5: JQHcV8OOuQy1QSZyp2cuqOKhFPY.roa (hash: aBTrfIT3ktKIIu+swwWMWw3Bg8+yjsrokXyn1wHp47Y=)
                          6: KS0evwzT0fKZKmO6x2f1TLJa10Q.roa (hash: QH1PZvfD6pJeC9AVUb3+wuoacHUFSdtLTDCGMZ5OfC8=)
                          7: MBeLFpwB8QjHf_N_IxAcOZ8IyuM.roa (hash: P6+QO6fgMYgkt8NQWFPGEIfzkGs7o3tSOrpCD+C2W5w=)
                          8: RKoG6yGzYUsbwzkvak0IDVmP8aI.roa (hash: NYzAPW/dpm/sRwQxxpLinnVE8uK7AfRUJKejz4Su0j8=)
                          9: Xh6fOuIqrHup_0uREFffoWmnBPM.roa (hash: VRFG28rlxAV4XGduEJBQ/BW/nmxOEOmyQM8JZVbblfI=)
                          10: YahDmohiSAbupO4pyQbF5JsUr_U.roa (hash: 7XssqAlsGbNOMEn1S3yiheROEDNC0UVbD5IP+8hqNdU=)
                          11: ZKrSVjIyp3c4vmsRta99lxJ1nWk.roa (hash: V86J8geSpEHBLLo/A/uTbJtr9YVbr3Cw49uNukpc0Ds=)
                          12: _p1bqdZFVV-yCNRgEU5D9s9zduA.roa (hash: ceBcN8Y3K7sjyx/xdHHBUfHwwn6/AgpxvZfQOED4K7s=)
                          13: fmg5GUDKj3L9SuYf_M-1A94BHqQ.roa (hash: 1LrtxsZqEizRlM+kerihrTQg03P7e3dIyw1N/Vnu3/Y=)
                          14: jiDJSvi9EqJddMvuoh8wcY-xXLI.roa (hash: Az6PcHeJNE/JDkLE74QtKZcLIoSRO07Ltp+s6SDMm7g=)
                          15: lIsU5M82Q_Q6z8rDWhFmVz7T4Ec.roa (hash: HB9E/o72V0zVeoUgJVG284a4pw9VdNVj0soXlhohpjM=)
                          16: nnRaPTdWT0I5mCAIv3uUnoBDHog.roa (hash: WHO0LN3x988yfZy6sulNPi/HXNoZ+/jemZUpVJlOqso=)
                          17: rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa (hash: v+pd4dmoz8jOnZlQ7TRnQpQrIxQ0T2Ba231XJowrkiA=)
                          18: srVqEm74KpTVMl3qC8QeYm8ZOA4.roa (hash: eQXf7qYx6EafQLGPgfHgbR98ETU7M7ws9rJT2ka8KBc=)
                          19: tM10Pkad9yq5Hsv-cfqn34_LFRc.roa (hash: c2YwqEFmRVt/GP93CPEiCCw94qEe+FsD0C6QrcTdxKg=)
                          20: tuig2McYqtXX_-PGUedAeeH6Gc8.roa (hash: mNb7ugtDqM+5WQB4XF8NRapcLPX1pQXy2Ip8g/Fb0zE=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: g+7SYA4J3znY5QUbFyplYph8YwRkXPUtG3soOACTHGI=)
                          22: wjqbq6cegrBZnivnBbcWQDIwUA8.roa (hash: 7rSsH79YeiFL4Us+BpiHOVr7sYUtCYWM0OTojI6TbUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:e6:27:f0:ee:e1:58:91:e0:32:31:57:7d:7f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Nov  4 22:00:38 2025 GMT
            Not After : Nov  5 22:00:38 2025 GMT
        Subject: CN=2a290eb9922438e09122100552142d4c8827a9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:1a:a2:bf:0f:cb:f6:fa:4b:e1:3a:2d:4b:
                    b7:71:c8:e7:4b:19:3d:3f:d5:77:21:78:61:60:82:
                    64:ad:8a:f7:bd:da:30:bb:cd:ec:c8:de:6d:82:96:
                    33:b6:c5:bd:b7:77:d5:af:9c:08:85:e2:b4:bc:cb:
                    59:6b:3e:bc:74:27:8e:b5:be:f5:4c:cf:e7:2e:d5:
                    10:22:e0:99:1d:5e:74:32:35:e6:96:45:37:8a:1e:
                    46:30:b5:5c:9d:3b:a0:ef:18:72:a8:6a:0e:64:29:
                    6e:0d:86:54:ea:2a:d6:f5:bb:d4:2e:13:77:42:e9:
                    b3:dc:bf:4f:4a:6d:7e:c7:ed:b3:57:22:c8:a1:28:
                    73:5c:dc:4f:0c:7c:f2:90:28:7d:96:f1:5d:6e:96:
                    04:cd:dd:7f:27:bf:e6:67:69:17:13:7c:4d:6a:31:
                    3a:a0:b4:53:05:3c:9c:22:0f:66:af:07:ae:70:7f:
                    a2:ca:9e:02:f2:8e:87:3a:26:fc:17:5e:48:36:be:
                    db:50:9b:78:a7:62:55:b4:e4:b4:c2:32:da:08:1a:
                    71:b8:34:19:f0:07:74:2c:c1:b7:f5:f9:8d:8d:22:
                    20:11:f0:a2:55:7c:54:95:4f:af:67:e1:41:c9:fe:
                    13:b8:64:7a:44:91:7f:e6:39:51:4c:2c:88:c9:be:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:0E:B9:92:24:38:E0:91:22:10:05:52:14:2D:4C:88:27:A9:DB
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:b0:21:22:4c:d3:cb:c1:d0:73:3d:b2:9d:71:14:1f:e0:
         63:be:3b:8a:a0:c2:e1:a1:15:6e:93:29:cd:79:0f:c3:95:50:
         da:66:e2:ac:d7:cb:aa:65:a4:5c:d7:fc:10:a4:84:7a:30:e8:
         ad:e5:ce:8d:8e:20:85:0e:9c:45:ca:d9:c1:13:de:be:dd:de:
         22:ce:98:b1:e9:09:e3:61:83:da:49:24:7c:b0:5f:b4:d8:51:
         f8:6b:1d:c9:e1:f2:37:8d:7c:38:e1:fa:18:02:00:0b:5c:03:
         e1:2d:db:d6:3a:e8:2e:45:2f:6c:d2:ae:f2:9f:a6:e3:f4:9c:
         37:1f:fc:1a:9f:b2:da:76:ec:9b:20:b3:21:1b:7d:c4:9f:46:
         5a:1e:99:2e:39:52:6d:db:92:17:bc:91:2e:bd:94:c3:0f:b7:
         7a:db:1f:8c:c0:d7:f1:97:b4:ad:4a:10:c1:b2:6e:f3:45:68:
         55:66:7e:d4:76:6d:c5:c9:ab:61:4c:f6:af:e3:e6:90:a3:3f:
         f4:6e:23:73:ac:62:fd:68:2a:64:16:51:b8:80:8a:82:e6:e8:
         8f:13:7e:d3:1f:fe:5c:2a:6a:82:18:4f:a0:ed:dc:cf:4c:57:
         e4:f1:0e:df:10:d1:c2:ba:63:f2:e9:f8:f3:bf:16:bc:eb:3a:
         03:f6:94:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uYn8O7hWJHgMjFXfX/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjUxMTA0MjIwMDM4WhcNMjUxMTA1MjIwMDM4WjAzMTEwLwYDVQQD
EygyYTI5MGViOTkyMjQzOGUwOTEyMjEwMDU1MjE0MmQ0Yzg4MjdhOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswaor8Py/b6S+E6LUu3ccjnSxk9
P9V3IXhhYIJkrYr3vdowu83syN5tgpYztsW9t3fVr5wIheK0vMtZaz68dCeOtb71
TM/nLtUQIuCZHV50MjXmlkU3ih5GMLVcnTug7xhyqGoOZCluDYZU6irW9bvULhN3
Qumz3L9PSm1+x+2zVyLIoShzXNxPDHzykCh9lvFdbpYEzd1/J7/mZ2kXE3xNajE6
oLRTBTycIg9mrweucH+iyp4C8o6HOib8F15INr7bUJt4p2JVtOS0wjLaCBpxuDQZ
8Ad0LMG39fmNjSIgEfCiVXxUlU+vZ+FByf4TuGR6RJF/5jlRTCyIyb4AqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCopDrmSJDjgkSIQBVIULUyIJ6nbMB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfOwISJM
08vB0HM9sp1xFB/gY747iqDC4aEVbpMpzXkPw5VQ2mbirNfLqmWkXNf8EKSEejDo
reXOjY4ghQ6cRcrZwRPevt3eIs6YsekJ42GD2kkkfLBftNhR+GsdyeHyN418OOH6
GAIAC1wD4S3b1jroLkUvbNKu8p+m4/ScNx/8Gp+y2nbsmyCzIRt9xJ9GWh6ZLjlS
bduSF7yRLr2Uww+3etsfjMDX8Ze0rUoQwbJu80VoVWZ+1HZtxcmrYUz2r+PmkKM/
9G4jc6xi/WgqZBZRuICKgubojxN+0x/+XCpqghhPoO3cz0xX5PEO3xDRwrpj8un4
878WvOs6A/aU5w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:41 2025 by rpki-client