Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          pxKkZTWqMkEKXs7sZ/ZoXKCTAlu4hutQI3rPSDpwoqA=
Subject key identifier:   72:94:BC:A6:06:AE:E6:C5:7E:5A:9E:D0:D1:52:23:D7:95:AE:F8:9E
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019A5564B2400766F5C43D37C99C466540E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1719
Signing time:             Wed 05 Nov 2025 19:00:53 +0000
Manifest this update:     Wed 05 Nov 2025 19:00:53 +0000
Manifest next update:     Thu 06 Nov 2025 19:00:53 +0000
Files and hashes:         1: 16-jUNfPaeEDFi2CG2Dls7NK5lg.roa (hash: 9zFXZ8EDGdJp6On1sZ8dp628uiNp48YN4eESkdpnuOk=)
                          2: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
                          3: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: Pd3lFANpoC25+IorWXg81orsBn5JTtRsc87++jf3kao=)
                          4: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:64:b2:40:07:66:f5:c4:3d:37:c9:9c:46:65:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Nov  5 19:00:53 2025 GMT
            Not After : Nov  6 19:00:53 2025 GMT
        Subject: CN=7294bca606aee6c57e5a9ed0d15223d795aef89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:d1:2d:60:4e:d5:63:7f:63:6f:c2:dc:76:
                    b1:fb:a1:e0:21:59:22:82:34:5b:0d:94:92:8a:b2:
                    59:7e:89:dd:08:ad:8f:77:4f:df:85:c6:7c:ae:15:
                    e8:44:ab:c3:b4:59:b7:3a:6e:0a:e6:a5:29:8d:98:
                    05:04:8a:12:47:a6:e5:21:6a:76:b3:90:88:67:47:
                    32:c3:9f:f4:fe:68:03:da:8b:3a:b2:e3:da:1e:6e:
                    ce:15:15:ca:dc:59:20:51:7a:61:2b:39:5b:7f:30:
                    7d:95:32:8b:98:37:95:eb:a5:27:23:85:6b:06:12:
                    e2:41:59:bc:3c:7a:1a:76:3f:d5:b7:0a:16:2e:3b:
                    04:f9:4f:3b:17:69:0b:c8:81:02:51:36:07:25:e4:
                    99:35:a3:5c:70:5e:d3:53:fd:5e:26:69:4f:af:2a:
                    73:4e:09:a8:b4:5d:fa:6b:ca:34:64:a1:0d:7d:71:
                    27:c9:b6:60:50:b3:c8:81:85:90:94:a4:ac:b3:3f:
                    83:b7:aa:2b:ec:65:20:39:cc:5e:7f:c1:41:b6:04:
                    e0:80:7b:d5:68:73:b6:4e:81:ff:17:06:a4:46:c5:
                    bb:9c:53:aa:c6:c3:9a:5a:fe:4a:b7:9d:45:b8:a8:
                    cd:8d:16:20:86:60:d8:ac:65:a5:e9:bb:12:41:9b:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:BC:A6:06:AE:E6:C5:7E:5A:9E:D0:D1:52:23:D7:95:AE:F8:9E
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:ee:34:a0:7e:ed:93:75:95:96:d1:fc:18:3f:0c:53:22:
         91:02:78:3f:9c:4e:9d:01:9b:c9:42:c4:72:5d:f3:51:f3:7c:
         23:f9:00:dd:10:6c:ec:ad:a4:e1:82:05:cf:28:64:cc:b0:53:
         d5:4b:73:4a:da:74:72:3d:e5:86:b1:4e:5d:3e:52:78:05:04:
         04:3d:74:f8:e1:1a:ae:5e:03:d0:3f:4b:d4:ed:4b:3e:c2:8d:
         1b:dc:d5:59:26:8d:1f:ef:ad:e5:84:ca:2c:48:49:c4:f1:12:
         b5:6c:f5:48:9f:c2:da:4a:8b:dd:4b:79:9e:f2:4b:53:2d:23:
         06:ad:d1:c6:2f:a3:9c:ad:75:4c:82:c4:69:2a:36:f6:bb:2d:
         07:3d:93:55:f2:5e:8c:26:a0:cd:95:06:1d:a9:8a:33:20:f8:
         b6:26:b6:19:25:a3:26:55:64:06:b4:c9:42:92:b6:c3:f5:b9:
         a2:92:33:8a:fc:22:9d:fd:34:2a:f3:16:84:3c:1b:ce:ea:93:
         4f:9b:2f:f0:8e:31:f7:4f:c8:bb:c3:9a:87:84:a8:62:18:2c:
         67:d6:7e:42:fc:d6:34:80:ac:53:84:4c:09:12:08:91:49:3f:
         fe:cb:68:01:8f:9d:c4:6c:b1:25:67:ba:45:24:3d:dc:c2:8a:
         8c:32:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:40 2025 by rpki-client