Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          4k+AVfs6rG/XKOQGHFsidnuFtuZPv5yjGsqNMYF2ssE=
Subject key identifier:   6F:62:A6:30:74:52:9E:2C:9D:04:F0:A8:01:19:1D:A4:36:B8:07:C3
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       019A503E4C8C6C5E52F40EDAE84AEDE79F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0975
Signing time:             Tue 04 Nov 2025 19:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:51 +0000
Files and hashes:         1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: /PwQIjVpFvXsgWyc28wNmbvIZTuQQkSQujeozI2nMR8=)
                          7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:4c:8c:6c:5e:52:f4:0e:da:e8:4a:ed:e7:9f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Nov  4 19:00:51 2025 GMT
            Not After : Nov  5 19:00:51 2025 GMT
        Subject: CN=6f62a63074529e2c9d04f0a801191da436b807c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:50:f7:7e:d4:4b:f6:03:b9:87:ac:42:8c:
                    46:1c:d3:50:27:55:fd:24:06:5a:ff:95:cc:2c:c1:
                    17:56:50:38:37:41:46:3b:90:9a:a4:54:0c:28:ed:
                    ec:2d:fa:fd:b1:6a:4e:34:2e:f1:58:d9:99:13:cb:
                    e8:0c:1b:69:84:d3:cf:67:cc:74:4a:42:2b:e3:d2:
                    75:59:11:8f:e2:d6:22:d9:67:df:5c:60:76:06:27:
                    32:e1:29:3e:42:b8:8f:3c:50:a5:d8:d9:bf:c6:40:
                    46:93:06:b7:1a:90:1d:8b:0f:7e:5f:b5:23:30:9b:
                    fe:fd:0c:ef:eb:c2:fc:f0:d6:e9:47:11:3a:1c:94:
                    89:b3:aa:14:a4:a8:62:67:a7:e1:9f:c9:ae:7b:c9:
                    f3:5c:25:d2:1c:67:8a:49:30:68:ce:c0:02:8a:3b:
                    aa:ab:53:71:26:5d:21:c4:14:4c:6b:f8:ee:ba:32:
                    65:9f:86:44:68:6d:36:35:5a:c6:71:6f:63:5f:d4:
                    e0:fe:b2:fd:0d:ae:32:ba:d8:7f:07:27:ed:3f:a2:
                    bb:f9:14:3c:a5:a1:61:e5:ae:de:0f:15:f8:74:ef:
                    53:3f:83:be:8e:92:bc:b4:7c:65:79:f8:57:ad:a0:
                    8b:3b:3a:ba:3f:ff:9f:51:52:06:f0:d8:20:ff:5d:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:62:A6:30:74:52:9E:2C:9D:04:F0:A8:01:19:1D:A4:36:B8:07:C3
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:e2:53:42:97:c1:78:d9:3e:21:15:6c:4f:2a:1a:29:63:
         20:56:5f:19:42:fc:3c:c2:6b:20:e0:6c:20:1d:a8:74:ee:5e:
         3e:e2:5c:80:32:26:4a:5a:f4:48:bc:bf:ba:9c:f6:25:b4:91:
         b2:8a:69:52:99:f4:d5:9c:4d:56:79:1b:b7:9a:fe:89:d8:7b:
         16:8c:3e:10:9f:6b:95:59:a6:4a:8c:b5:a2:af:7e:66:79:48:
         07:53:0b:d1:a2:2d:66:d1:e4:6c:f1:3c:fc:cd:e9:cf:39:55:
         3b:e1:b4:dc:04:bf:b1:2d:5b:52:52:d1:5b:87:2d:9a:c4:61:
         4c:d6:dc:37:05:48:a7:8b:91:c0:76:9f:06:0f:0f:4a:02:7a:
         4f:60:cf:d6:69:87:4a:8f:92:e6:0d:eb:80:b4:b7:f2:30:18:
         41:b9:09:db:fb:df:ee:35:e7:1f:68:19:7e:56:f2:d7:8f:7a:
         21:e2:64:ce:5c:e8:22:7d:13:97:73:14:a5:1e:7c:a1:3a:fa:
         ca:17:89:82:67:81:5d:d9:74:ba:82:68:49:37:d6:c6:45:fc:
         20:a1:b8:cc:11:82:27:5f:4b:54:4a:35:cc:52:ef:29:17:41:
         b9:a8:b7:73:73:0e:0a:d1:74:3d:5a:06:c4:3c:2c:7f:34:b1:
         b3:8a:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:55 2025 by rpki-client