Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          Tt0rNSQaeUGSbSyPgh5v0sdxcA/UbByNmO8B+BZ5A6s=
Subject key identifier:   11:67:3E:47:7E:37:3A:70:88:0F:34:0B:E1:84:B3:29:17:8C:77:C2
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       01983DCF06BC039782AF65959E2E36C9640D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          160E
Signing time:             Thu 24 Jul 2025 19:00:34 +0000
Manifest this update:     Thu 24 Jul 2025 19:00:34 +0000
Manifest next update:     Fri 25 Jul 2025 19:00:34 +0000
Files and hashes:         1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: wzC3Y4Ktk5AINqhWwexjBEmBbxUlHOIspmlddG6zvqE=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:cf:06:bc:03:97:82:af:65:95:9e:2e:36:c9:64:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jul 24 19:00:34 2025 GMT
            Not After : Jul 25 19:00:34 2025 GMT
        Subject: CN=11673e477e373a70880f340be184b329178c77c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:21:30:ca:9f:78:e3:3d:0b:35:37:da:34:
                    38:01:f2:5c:ac:8d:36:46:e5:15:fa:8c:74:66:a1:
                    9d:50:4c:33:ff:84:4c:db:a8:c9:05:b5:62:5f:7e:
                    67:67:55:71:8c:00:fb:e2:a6:28:e3:d6:fe:a5:45:
                    c2:8d:b1:73:61:58:09:0f:2e:19:13:df:4b:76:42:
                    64:61:1c:90:20:cd:f5:4d:3f:ce:b0:75:df:c5:c5:
                    00:f2:f2:fd:66:46:5d:b1:38:fb:02:16:0f:38:6d:
                    42:4e:e3:88:ce:7f:7e:93:9f:c2:8b:d4:44:46:13:
                    1a:38:06:40:b2:4a:25:41:46:11:9f:21:b9:21:4f:
                    71:4b:d3:73:1a:93:b7:2a:d6:6b:9d:39:7c:86:7f:
                    c8:9a:66:03:96:d3:1b:12:d9:2c:71:3f:e3:d6:e0:
                    fe:72:9f:19:78:d4:4e:04:0b:af:83:eb:0f:63:74:
                    81:6b:e7:ae:03:6d:a5:7b:3c:3e:a1:a6:ea:2a:fc:
                    04:16:bc:6f:d5:ea:03:62:2e:25:e9:ad:bd:64:45:
                    01:cc:ee:9d:ed:d7:5e:67:82:95:a5:31:0c:31:ad:
                    09:e3:58:67:3f:45:10:f9:7b:4e:fd:05:e2:f4:85:
                    a4:81:c3:a1:b4:a3:13:55:02:06:99:64:fa:d7:28:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:3E:47:7E:37:3A:70:88:0F:34:0B:E1:84:B3:29:17:8C:77:C2
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:38:28:90:5a:b0:fd:80:d9:d8:7b:60:ba:a5:38:3d:33:60:
         a0:00:9f:59:f8:8d:14:e1:b1:61:f1:1c:bd:1f:76:86:d1:e4:
         7b:1d:55:19:97:62:4d:cb:65:b2:73:35:22:63:f5:4d:23:57:
         85:ed:65:25:e6:8b:50:be:f6:be:3b:d6:f6:be:07:c7:d7:f3:
         43:bd:cf:7e:8c:66:78:27:5d:6c:48:d2:3b:c9:c7:c7:51:35:
         ed:60:5a:90:b8:19:85:76:4e:2b:0b:9e:41:ef:85:6d:91:4d:
         f1:64:6a:8c:54:48:c0:8d:ed:c8:13:a1:f1:d3:de:d9:42:7e:
         ea:ab:b3:18:29:b1:af:1c:12:24:bd:94:cb:0b:b6:1a:64:3f:
         06:12:0c:34:4d:a2:27:4a:c2:55:25:37:c7:7b:61:45:f5:7f:
         47:06:93:1d:f0:e8:5f:a2:b6:9a:19:31:f5:96:25:59:ad:e1:
         63:a3:0c:a9:a7:2f:3c:d3:c2:b1:20:c5:fb:5a:11:39:0b:09:
         b5:65:1d:5f:bd:d0:03:6c:2a:fb:a0:51:26:1c:e1:42:f6:b9:
         15:b5:b7:5a:1c:db:61:d9:12:79:31:9e:0f:4e:dd:5f:75:a2:
         e2:38:05:77:c1:d3:d7:f8:fc:f4:5a:f5:45:6c:d8:2c:c7:cb:
         6b:98:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:44 2025 by rpki-client