Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File:                     TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier:          3WRfHc33NAdU9qG4qa32Um95tYJLUBbD1hXWhLc3Qig=
Subject key identifier:   DD:5D:1E:82:33:7D:D8:15:80:E6:32:30:A5:EE:5F:73:7D:0B:0C:7C
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       019A51F584F131A615CD7D4F09EBED151E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number:          0F0E
Signing time:             Wed 05 Nov 2025 03:00:36 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:36 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:36 +0000
Files and hashes:         1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
                          2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
                          3: JbzhdefJbSbcMWzYg2HKOZi42yQ.roa (hash: Lr8qqBdkJKxtoR5S2Pga1jAiow0N/LgTqH30jZ9Ys0M=)
                          4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: L2oCfMxtYjRFTqTdbAAO2ruNCc+FePpKu+B7Hx1AuFs=)
                          5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
                          6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
                          7: hDkefyVIo6CtSmC9usLxfbXSHJo.roa (hash: 2L43qW8nvv7ZuypirwxJV5b95hzLgxd1pp/3t2CraNw=)
                          8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:84:f1:31:a6:15:cd:7d:4f:09:eb:ed:15:1e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: Nov  5 03:00:36 2025 GMT
            Not After : Nov  6 03:00:36 2025 GMT
        Subject: CN=dd5d1e82337dd81580e63230a5ee5f737d0b0c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:54:12:59:1c:6e:c4:c4:4e:b0:1a:e3:aa:
                    48:e8:ff:15:5d:a1:ff:26:a9:a0:b1:69:ab:77:c1:
                    e2:f7:93:7c:b0:2a:7c:e6:b5:e9:d7:16:1c:2b:50:
                    35:f6:2d:20:db:4e:a0:34:3e:8a:f9:8b:0d:7c:d0:
                    e5:fa:82:f8:b8:cc:5b:06:34:e7:dd:ec:38:75:6c:
                    6c:d0:0d:cb:44:0c:ab:c5:cc:d7:5e:db:d6:79:85:
                    06:0c:a0:5b:a7:90:e7:8b:a7:98:8c:c3:b2:2f:b2:
                    51:18:49:7f:2c:fd:b1:d9:88:b5:17:2c:50:1c:7e:
                    6e:07:af:4b:7c:c3:c2:19:ff:56:11:d0:f0:c6:a8:
                    68:09:32:b0:77:4f:13:62:5c:42:10:0b:a6:96:ea:
                    6d:a8:d2:8a:93:21:4f:b3:da:09:c9:40:39:12:b2:
                    ba:ce:2b:f1:58:58:8a:5d:7f:7d:da:53:e6:3d:cc:
                    a7:7d:8c:3a:38:0b:6f:96:09:f6:ec:eb:50:a7:51:
                    9a:db:4f:df:53:af:36:2a:ea:6d:43:ef:77:d4:df:
                    e1:9a:d4:c7:5c:a0:a8:64:51:ab:63:48:11:d8:b5:
                    67:c3:27:76:c4:73:0a:83:ac:42:39:d1:d3:05:d8:
                    9c:64:ae:d0:c6:e8:8a:a9:63:93:8d:68:e2:58:4a:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:1E:82:33:7D:D8:15:80:E6:32:30:A5:EE:5F:73:7D:0B:0C:7C
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:8c:a8:cf:d8:9b:17:a5:28:ee:41:f9:f1:91:fe:d6:67:
         27:ef:10:5d:a4:60:e5:91:16:a6:40:fc:01:2f:96:29:ab:13:
         0e:f3:81:cf:36:a2:73:64:1b:48:7e:37:d5:d5:47:59:2a:12:
         ac:00:55:c4:47:fa:cb:88:0a:a5:a4:33:e5:ae:5a:e2:77:9e:
         0c:c4:e0:46:80:82:e7:5c:a6:8f:a6:03:bf:c2:00:22:4c:08:
         d8:1c:f0:37:45:b9:0d:69:04:33:d4:78:5e:c4:d7:21:cb:49:
         99:f7:32:33:3f:b2:76:b8:8e:f8:d0:7c:39:c9:ac:8e:88:a4:
         e6:87:16:1c:19:53:08:4c:34:3f:00:e4:53:56:04:69:33:74:
         2a:05:62:f2:e8:75:ba:eb:16:1d:a8:68:c3:f3:67:74:6a:6e:
         8e:c1:3e:d2:ae:88:36:b2:86:94:bd:02:6e:cf:8f:3f:a1:af:
         8c:bb:b7:6f:4c:82:72:25:b0:ae:f0:84:36:b9:66:c2:00:8d:
         af:24:c5:07:26:e4:ab:9b:a5:af:da:f6:e2:6e:d8:a3:38:38:
         4f:7e:a6:d5:de:ce:2a:69:21:b4:51:b6:aa:75:2f:01:9a:37:
         ea:e0:c1:17:a4:2d:a6:b7:21:fd:b2:7e:3d:67:eb:ee:bc:23:
         08:70:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:36 2025 by rpki-client