Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          h3x9/9cT1w9pkfcB2OBVp8+8FuOSTSmc2elAPbtq79A=
Subject key identifier:   16:3D:4E:FC:DC:15:BF:09:38:59:62:81:87:ED:FF:96:F6:77:24:6D
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019A52D27DEC30BEE5C2837623C416ECACBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          07CF
Signing time:             Wed 05 Nov 2025 07:01:57 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:57 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:57 +0000
Files and hashes:         1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=)
                          2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=)
                          3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=)
                          4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: nYw3mpVPjj66YhFxB3i2zIq1UCBvuMNImgr73V53u9M=)
                          5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=)
                          6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=)
                          7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d2:7d:ec:30:be:e5:c2:83:76:23:c4:16:ec:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Nov  5 07:01:57 2025 GMT
            Not After : Nov  6 07:01:57 2025 GMT
        Subject: CN=163d4efcdc15bf093859628187edff96f677246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:de:23:1b:3d:47:26:9b:65:f5:99:08:6c:
                    04:5f:f3:21:57:49:dd:1e:9d:b6:a1:35:81:58:66:
                    b0:2e:96:0b:4f:75:77:02:c7:17:8c:38:84:75:d6:
                    ce:f1:3a:fb:ce:99:eb:91:da:d5:4c:a5:bd:4d:9e:
                    4a:c7:e4:0c:9f:c1:39:3c:95:22:f6:6b:57:58:80:
                    c3:9d:b4:c9:bd:ab:dc:ad:ed:d9:53:19:45:13:bc:
                    41:14:02:e0:0a:de:ee:cb:a8:1f:1c:3c:e7:4b:d1:
                    80:08:67:67:c2:ca:93:3b:2b:d0:12:a7:92:b1:41:
                    1f:de:c8:49:81:5e:42:be:ff:db:ee:94:49:d2:35:
                    a8:18:41:8e:46:04:7a:fb:82:7d:2e:88:06:0c:e8:
                    91:6a:96:33:a2:62:62:a8:19:c4:f9:c4:a4:b3:1b:
                    0c:d1:b2:cd:8c:67:3f:54:f0:19:8f:b1:24:dc:15:
                    0e:ef:92:fb:23:40:d1:a5:95:e4:4f:23:c9:71:37:
                    ec:66:41:54:16:9b:cb:37:3a:3e:bb:4f:28:79:6b:
                    00:35:43:77:76:f3:8a:3d:db:ae:34:42:f3:4d:39:
                    c6:0e:a2:f0:bb:c6:b2:98:0a:55:0a:3c:45:6e:b7:
                    c3:17:3e:ac:82:b3:87:d5:94:5a:45:22:e2:92:86:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:4E:FC:DC:15:BF:09:38:59:62:81:87:ED:FF:96:F6:77:24:6D
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:09:68:7d:37:f8:d7:94:55:c0:5e:af:63:bd:1c:98:70:
         6a:4f:87:d9:12:48:00:13:eb:4c:89:1d:63:ca:a3:3b:ce:b6:
         e5:4e:f7:cf:9f:41:93:1e:86:c8:aa:0a:fd:c3:3e:af:fe:a7:
         80:66:31:42:82:a9:b4:35:cb:fe:cd:fc:5c:06:8a:d4:c7:ed:
         3f:05:64:03:3b:51:4f:28:3c:da:69:c3:ca:bc:2c:10:d3:5d:
         6c:88:ac:e7:8b:4d:c4:fa:2e:05:a6:d2:d0:b3:7f:19:b3:b3:
         07:8a:50:4e:f3:3a:74:f7:0f:3d:35:ee:9f:0b:c0:7e:08:2e:
         94:78:ae:39:b5:e7:fe:f2:2c:ea:5c:ce:13:ba:02:36:cb:76:
         3b:8b:bf:7c:d2:55:17:99:61:95:91:35:d0:7c:99:d7:fa:ee:
         a5:1f:eb:d7:a1:58:6b:88:3c:13:a0:09:18:cd:ad:1d:a3:35:
         f9:0d:70:8e:59:31:1c:2f:5a:de:8c:65:02:e3:ea:98:e6:ea:
         8a:74:6b:81:38:d2:a9:b0:93:23:78:11:cd:b3:0e:18:03:97:
         9f:4e:ec:1e:b2:7e:29:af:2d:77:88:f0:02:15:d9:15:13:9c:
         bf:4a:e9:9f:17:4b:b1:fd:d3:af:b9:ba:f0:72:aa:ab:b3:50:
         5b:03:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:02 2025 by rpki-client