Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          cOhdtMPmcR8hV+vjyCW4/OvoXkoGq5hLJiP6u0RkXTI=
Subject key identifier:   8D:3D:ED:CA:F0:A5:28:5F:C3:9E:43:B6:71:A7:DB:D5:DF:EA:84:FD
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019A0C6344AFA761C535C68B61B06E15C229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          09E0
Signing time:             Wed 22 Oct 2025 14:47:03 +0000
Manifest this update:     Wed 22 Oct 2025 14:47:03 +0000
Manifest next update:     Thu 23 Oct 2025 14:47:03 +0000
Files and hashes:         1: 1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa (hash: RzW5Sxa8Ig7ortwok8le/uC8SZCAaYDS0oxlRymBz0Y=)
                          2: 1RgkxaT3trlcWJ_d2Id80-hh7mo.roa (hash: u4inV2GcSC1By83cUxCpIznGqV2yO4zF13YuBN76JRg=)
                          3: 22xPnkQrMRVtQAjJFBfwBXt-g80.roa (hash: AXYvz8bFpW9uTpIheiV0QW7dDbpVv2KWmj64d94yYuU=)
                          4: 3sf5oEr3DlOTew2qu4MNcy3qxZU.roa (hash: ouMQZBbsW6mz86Nimkj2chmQSM3lel6uX4kq3MHuBXo=)
                          5: 3uRkplLO7hdNTmsonRByvLPg9us.roa (hash: /Fhlo0mC/kjn6DqlEuYWxKB1RCedCiV3fwGGd/9C9cA=)
                          6: 7x3gWCXocoFo7Hg7TWha5wGvZTk.roa (hash: K180bZTq9p+t4Sz1GKZQlTGmGWQ/kcLvo4HYhpD25+8=)
                          7: 9iqSmqOmwYolvlUQPEw-4yG9OL0.roa (hash: jVGrDYNyV7dR3JA465skWvos0ET7GjG7Xa+KRRTUxe4=)
                          8: ELu3LuUF_RIVec7Qob2dIFhYU0M.roa (hash: wSf0qPOqXT4taNDWLndlbS/Ta5lAjuq2peZYJn7IxJY=)
                          9: FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa (hash: lMssHyOmtMoqB3eYJsMyXFwkDXBST8uWHzVNWSQIBeI=)
                          10: KpE2iahav8cAforHiyJhcZBcDeQ.roa (hash: bm2F2rOtPCGG/UzA4svmEtDgCm0rSPmxuVbVp4tIlNA=)
                          11: QwPIZkgi91jhIoC0UdvB7lJFUM8.roa (hash: 66sJoNUtErZUXhwK5vicyliqHQ8AkSDZ/+TepnI9oPg=)
                          12: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: 2ftj92lFqXT8JR+XBhzpi/8ty++vIDe0ejnuaJ92HEU=)
                          13: Vg1Fwygnu1-Kr8YZhORogfRj0JA.roa (hash: YRNIzo07CRZag59lc/6XkpQk7Z3ZDMo3JfgoSAb+W7c=)
                          14: VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa (hash: eAmrBVrQfiVr9deEdEnjqxiLaOIBgGtZOc+6CJVvJtU=)
                          15: W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa (hash: /LAVeVuCQImOpPPb3FVNZO/gfTtSkF44Ck+t3G10yts=)
                          16: We2ZtgzVV-o2FaqtR72itzqRcIc.roa (hash: kO199FyJ7RgUqt9rreCO91K7dqx63YjPzKMufwWpwb8=)
                          17: Z7ynKEZFT49c2h-A3q8vc82-UO4.roa (hash: UIJcB+S37Xy5NXQzOgDBFDzdisqdcIk/+8k/cz1TCXw=)
                          18: _7TYsPKESqg9ZhdLg9H_vT2Bl18.roa (hash: KjzGt9xR6o8j3waREEWwOJ/yJVVkFd0w7Czm3/D5T2s=)
                          19: _VAdRV_VkXsQ_PWfO73sjnRDIgE.roa (hash: ddtoBXvOFiOlKSDPEAPrId8rwkKIvGiiLctDa5TjMf8=)
                          20: gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa (hash: IOPNa6okOh4KE7VsgGqa6WpCfccJssx+kmLIQ+RGorQ=)
                          21: hfTD3RSdVTwJiDU5IW35Y9GcrR8.roa (hash: 5cNB1VxqtY5x74aWagSm/UmUf1T+t+fFw2+gts0tYOY=)
                          22: lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa (hash: dffK8bAdzimKqM78J5WELOoe3Fs3GVSJCzE2DHH3tkw=)
                          23: n_VaOJr7vRySqZQrlhdcO-3-IeU.roa (hash: GTRXpVgBnyeDGEBaZDZ4AxGx/mBSplpZZWKxLbR7Txc=)
                          24: oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa (hash: HNqkGeGmxCcQK39sTwTcN/DUzfSDSYIs3Ek5YRR36ps=)
                          25: pKJzHpKYsFNmV-pQARI9PPnQ15U.roa (hash: yxnfHnJ8DZMjj/L2CYE9hx9Vl3UpbA4b5cr24ovpjLw=)
                          26: rnTo30gsWuwO_dLuWbTrVdIJXbI.roa (hash: O1AUE4D5gDEKUTAOAFWoLQ4wie/BT4867JZodngFFPY=)
                          27: wDpbmBRWJ1UCIL7XKUDWLgNLdTI.roa (hash: MHCgrz112ammLc0W+Kdx+/NR7ldtHurOuX/nJhBDXPg=)
                          28: wHcAQi8uIPoSNIZEDrB6lp9A4iU.roa (hash: WTw2CPdpDYr7UwLDEjPSvLdXO5lHAaBKc6BFHrkeRHQ=)
                          29: yERAtlQMUNGN4I-K4fblFCD_VQA.roa (hash: WXwLLTulOV3MesWFUlCzyUDyHWdA7LpMqPRdjdqiAik=)
                          30: yXmBLTIEYAILWdo56f_HGk3cTrw.roa (hash: oNx7rrDa3VbMZqs96FQLdjk0oWiSoo47F2rgHZBnWyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:63:44:af:a7:61:c5:35:c6:8b:61:b0:6e:15:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Oct 22 14:47:03 2025 GMT
            Not After : Oct 23 14:47:03 2025 GMT
        Subject: CN=8d3dedcaf0a5285fc39e43b671a7dbd5dfea84fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:46:a9:64:92:bd:34:6d:52:1c:8a:ca:2a:
                    e1:cf:0a:a6:0b:a2:55:ea:9a:31:64:56:51:77:11:
                    ff:b6:38:b5:e7:ac:1d:4e:5e:87:e1:7b:5e:21:bf:
                    b6:53:9f:7a:29:37:ce:a2:38:9e:58:02:1c:66:89:
                    ae:91:00:25:3d:c6:32:fb:80:39:f4:cc:41:37:1b:
                    6f:a5:54:e0:ea:eb:2b:9e:45:68:26:e0:6e:7a:5b:
                    54:de:c2:a7:d2:00:fd:2b:07:93:9b:ca:ad:7a:69:
                    c2:88:0b:5b:9a:f7:f5:cd:7a:20:71:23:7f:57:2f:
                    52:fd:16:8f:3d:d4:95:ee:2b:b3:b5:8e:b8:f3:24:
                    7a:ef:fe:dc:7a:2d:ce:17:78:4b:aa:ad:fa:4a:f2:
                    8a:16:7d:b6:0f:ee:a3:47:1a:a9:0d:9d:37:21:23:
                    3c:59:03:46:36:20:b7:f8:87:67:cd:3c:f2:eb:b8:
                    76:28:7a:63:26:63:06:f4:78:45:a9:c8:80:95:c2:
                    ea:48:1e:8d:b8:64:2a:5d:1b:fb:f3:a2:b5:a5:b4:
                    0f:99:3e:68:3f:73:e1:6e:18:65:f3:94:7d:06:de:
                    39:da:ad:d6:ac:a6:2c:9f:da:53:ed:09:0d:a5:54:
                    ef:c5:84:f6:a0:f6:b9:d5:0f:72:c8:93:e2:2c:37:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:ED:CA:F0:A5:28:5F:C3:9E:43:B6:71:A7:DB:D5:DF:EA:84:FD
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:c5:38:d9:1c:9b:67:b2:7b:52:e4:38:f0:b8:20:40:e6:
         81:82:c0:eb:b0:99:fb:4b:c8:8a:cd:c0:40:ad:92:d0:d3:42:
         aa:5a:ce:5c:ae:28:dc:bd:4f:7f:2f:0e:36:b8:44:0d:50:3c:
         e8:38:a2:c5:d8:8e:e0:62:61:ac:93:94:e4:4f:47:54:fa:ec:
         dd:71:e7:e7:da:f2:cf:ed:05:d9:57:80:d0:1c:bc:4f:05:b2:
         b9:8a:66:8a:42:15:ca:f3:3c:c2:c4:91:df:ca:40:b6:89:e7:
         14:36:51:a4:17:5c:c9:ad:64:46:85:d8:dd:45:c8:1a:ec:37:
         a9:95:ea:e1:7e:26:0f:b4:3b:f4:16:3f:75:4d:93:87:a4:90:
         3e:16:5d:27:74:95:41:f7:23:fc:2d:d5:90:6c:f2:e1:3c:ef:
         20:8b:74:2a:ee:7b:b9:5b:09:93:90:be:4b:dd:e0:20:95:37:
         08:d6:14:bf:e7:90:d0:82:4a:1b:02:72:c7:c2:7e:d9:cc:65:
         d3:63:79:0b:b1:dc:64:59:dc:fb:28:5c:77:c8:c9:a4:65:3b:
         06:36:6d:d8:8e:27:78:77:10:8c:53:5b:bc:ae:ff:b0:69:7f:
         f2:4b:d1:5a:4e:d8:a1:7c:7a:95:f7:65:24:d9:a2:e4:90:f6:
         11:2e:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:54:49 2025 by rpki-client