Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          jsODS9Aarj1xZSZVM1D/gmLcdl/RGnaEHkEIIxvrx00=
Subject key identifier:   30:F5:13:D4:5E:01:FC:B2:D0:F1:A0:A9:12:16:EB:C1:8D:0E:EE:61
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       019A541AE8628ECE19AC4380B3953769ECA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0977
Signing time:             Wed 05 Nov 2025 13:00:40 +0000
Manifest this update:     Wed 05 Nov 2025 13:00:40 +0000
Manifest next update:     Thu 06 Nov 2025 13:00:40 +0000
Files and hashes:         1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: HelRKNCZJzM/2afjycd19b6FxzEKIQnr/yEXb3wKL2U=)
                          7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:1a:e8:62:8e:ce:19:ac:43:80:b3:95:37:69:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Nov  5 13:00:40 2025 GMT
            Not After : Nov  6 13:00:40 2025 GMT
        Subject: CN=30f513d45e01fcb2d0f1a0a91216ebc18d0eee61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:25:be:f6:70:6b:10:3a:69:a6:f9:ed:3d:
                    fb:38:ab:10:8b:8a:f6:f4:91:28:a7:45:0f:6b:45:
                    fe:1e:72:81:fa:4f:35:7a:3a:68:00:8b:1a:29:4f:
                    43:b9:92:dc:84:c0:2a:2f:76:05:a8:db:65:3e:bd:
                    4b:e9:ad:64:61:30:3b:64:dd:27:79:5e:74:ef:a5:
                    8d:52:e6:6c:8e:34:f3:d8:0f:79:29:81:59:3a:b7:
                    9f:23:6c:24:26:41:eb:35:f4:e2:45:a3:0a:a0:d7:
                    4a:9c:1e:dc:6b:ce:27:e1:ad:f3:29:09:36:78:85:
                    22:aa:32:5a:63:69:f1:10:7a:e9:01:37:5b:57:6a:
                    9a:f7:88:1e:e8:f2:66:1e:ff:d5:99:33:77:da:45:
                    97:75:93:0a:e8:66:79:5d:07:34:fe:91:87:58:85:
                    4a:0f:bf:e2:18:e2:f4:6c:09:e7:6d:62:c6:e2:73:
                    6a:0f:b5:58:fd:22:0c:71:a8:8b:6e:5f:e1:ac:3f:
                    05:dd:46:ff:52:c6:74:cd:72:76:0b:17:37:32:4d:
                    93:96:34:cd:b2:bf:4f:ee:be:93:c2:8c:e2:e0:5a:
                    04:58:07:b2:bc:86:90:81:48:63:24:e5:66:0a:1e:
                    f8:3c:4f:09:05:d6:ef:07:59:5a:24:bd:07:6d:1a:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F5:13:D4:5E:01:FC:B2:D0:F1:A0:A9:12:16:EB:C1:8D:0E:EE:61
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:e1:99:28:a0:22:dd:a6:6b:f9:31:99:d2:de:16:80:e6:
         b1:7d:89:a1:76:39:29:6b:a3:4f:00:ff:47:00:ca:e1:e8:a1:
         41:bc:52:0f:bb:d6:b8:9c:66:f9:19:eb:6f:9e:0d:c8:0d:0e:
         e1:93:9c:7f:c9:55:23:05:a2:2b:cf:0c:21:71:af:38:b5:19:
         7f:4a:3f:1f:45:07:08:31:b7:b3:72:68:d8:8f:5c:5e:fa:98:
         3b:ec:c2:38:f2:b5:9f:b8:1f:3d:5e:92:ec:70:a5:9a:eb:b0:
         c4:ee:22:25:0c:54:f7:cd:06:37:6b:56:01:43:5c:6e:c0:7f:
         63:4f:ff:22:44:89:9d:d9:c7:60:6f:c8:ca:b3:67:5e:b0:ad:
         97:f1:d9:1d:9f:66:38:48:a9:14:7e:be:7f:5e:01:1b:c8:cb:
         d2:f6:36:27:16:f0:94:90:5a:d3:28:7f:b2:63:e9:06:b9:34:
         4a:01:65:ac:34:a6:0e:5a:9d:5b:b3:3a:7c:c9:8e:f0:9e:49:
         4c:81:b7:ea:a3:8f:73:ed:05:74:88:b1:eb:7e:74:d2:2a:11:
         1b:74:e2:bf:e9:b7:54:73:19:60:af:f9:94:8c:05:bf:d3:56:
         85:a1:7c:c0:22:0e:f9:4c:df:29:c6:00:0a:08:98:99:3f:e3:
         4c:5e:f6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:59:18 2025 by rpki-client