Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          rAL8n4BmBYXA51QQ9HebbiaGI26rfRZRSqCz7p6DFdI=
Subject key identifier:   6F:BF:E3:20:7A:F4:89:BE:0F:E7:08:D4:DD:A4:39:17:2D:DB:4B:08
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       019A21AE15610D00A462A6E78F9ABB8D5D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          084E
Signing time:             Sun 26 Oct 2025 18:00:47 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:47 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:47 +0000
Files and hashes:         1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
                          2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: yym6DK20zu3tLP04RX8x0i1wdOecu2NNzfaj0owVTcY=)
                          3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
                          4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
                          5: fnBkrIGhazl4u19mtv8qgvxymog.roa (hash: K+4n5TOvIimoLjl9pQIARfKh0OC3efu1YiLeyARuuyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:15:61:0d:00:a4:62:a6:e7:8f:9a:bb:8d:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: Oct 26 18:00:47 2025 GMT
            Not After : Oct 27 18:00:47 2025 GMT
        Subject: CN=6fbfe3207af489be0fe708d4dda439172ddb4b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:24:8b:86:9f:d7:b0:28:10:d2:31:f5:e9:
                    f9:05:3a:a6:43:9e:92:30:1f:d2:50:7e:b5:21:b0:
                    dc:0a:45:ff:40:31:ac:21:00:bf:40:f6:d0:d2:47:
                    f3:58:a9:45:a2:2e:9e:13:91:6e:bd:5b:2f:20:20:
                    6a:fa:1a:44:a1:dd:a9:4e:49:26:49:05:98:40:5e:
                    49:df:c6:01:77:0a:d2:ff:5c:ff:17:7b:7c:02:e2:
                    b7:b1:8e:77:03:18:40:7a:eb:5c:5e:06:00:e0:b0:
                    ca:0f:e6:bd:5c:98:cf:6c:12:d6:00:bb:74:22:af:
                    38:e4:40:a8:b9:c2:f8:e3:de:c8:45:b8:12:cf:d7:
                    73:fc:3f:b9:31:77:c3:42:2f:0a:45:e3:ca:9a:bf:
                    cf:54:d6:5f:79:a8:23:5a:0e:95:35:86:cf:8a:7c:
                    cc:7b:9d:59:40:c8:c7:8f:31:fa:3c:ff:0a:ad:11:
                    67:e3:67:46:4f:a9:d8:30:c8:33:44:6c:0d:d0:ba:
                    bb:81:a6:c1:f6:d0:37:77:17:04:fc:09:9c:1a:01:
                    e3:69:ec:65:b9:85:8a:db:dd:78:b8:60:bd:ea:98:
                    97:80:80:0a:ce:72:ab:67:ff:f5:29:04:5c:0a:4c:
                    4a:ea:e5:18:6a:ea:6a:e5:28:42:df:78:ca:ed:12:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:E3:20:7A:F4:89:BE:0F:E7:08:D4:DD:A4:39:17:2D:DB:4B:08
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:f1:35:c4:32:a0:d8:aa:aa:6d:55:15:eb:7c:d7:86:25:
         fb:b4:cc:d6:85:32:66:fa:ec:15:21:af:4a:df:e1:38:18:91:
         de:c7:19:d7:e2:56:f8:ef:d1:2a:6c:b0:0c:6b:f0:a9:da:e1:
         23:56:c6:45:86:6e:47:fc:65:e0:55:6b:5f:2e:2c:4a:5a:58:
         77:55:82:f9:f6:65:b4:96:8f:a3:c4:95:a7:ea:8a:7a:70:1b:
         36:b0:01:72:b5:05:de:be:0b:ec:f8:de:8e:81:59:d7:50:9d:
         4a:9d:cf:4b:3a:0d:84:4f:0c:be:7e:f9:38:23:62:81:5b:80:
         37:84:b2:05:77:b4:23:bd:67:18:1f:99:01:46:6f:f4:d6:62:
         8b:5c:c3:b2:94:5c:02:10:d6:e9:9f:01:05:f3:4f:a5:3a:d8:
         87:84:e1:d8:1b:3d:61:88:14:42:1d:1a:5e:a2:99:17:1b:9c:
         c6:dd:0d:8b:ed:12:1d:0a:b2:8e:74:5f:67:8f:16:36:a5:78:
         47:4e:99:b1:f8:e8:81:e7:f5:19:14:4c:5b:06:f4:80:33:e3:
         79:d5:d3:3c:a8:96:4e:67:1b:52:be:47:00:cc:dc:bb:18:43:
         fc:8f:96:23:23:a7:10:9e:81:d9:72:a5:11:46:9d:4b:35:72:
         47:c5:02:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrhVhDQCkYqbnj5q7jV1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDczZmZjM2YzN2M0ZmVjNGJkMzVhZDFjNTk1Y2QwNTZi
YWVjZmQwHhcNMjUxMDI2MTgwMDQ3WhcNMjUxMDI3MTgwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZmJmZTMyMDdhZjQ4OWJlMGZlNzA4ZDRkZGE0MzkxNzJkZGI0YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph0ki4af17AoENIx9en5BTqmQ56S
MB/SUH61IbDcCkX/QDGsIQC/QPbQ0kfzWKlFoi6eE5FuvVsvICBq+hpEod2pTkkm
SQWYQF5J38YBdwrS/1z/F3t8AuK3sY53AxhAeutcXgYA4LDKD+a9XJjPbBLWALt0
Iq845ECoucL4497IRbgSz9dz/D+5MXfDQi8KRePKmr/PVNZfeagjWg6VNYbPinzM
e51ZQMjHjzH6PP8KrRFn42dGT6nYMMgzRGwN0Lq7gabB9tA3dxcE/AmcGgHjaexl
uYWK2914uGC96piXgIAKznKrZ//1KQRcCkxK6uUYaupq5ShC33jK7RK1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+/4yB69Im+D+cI1N2kORct20sIMB8GA1UdIwQY
MBaAFOLXP/w/N8T+xL01rRxZXNBWuuz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUt
YWEwYzRkYzAzMjIyLzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUtYWEwYzRkYzAzMjIy
LzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7nxNcQy
oNiqqm1VFet814Yl+7TM1oUyZvrsFSGvSt/hOBiR3scZ1+JW+O/RKmywDGvwqdrh
I1bGRYZuR/xl4FVrXy4sSlpYd1WC+fZltJaPo8SVp+qKenAbNrABcrUF3r4L7Pje
joFZ11CdSp3PSzoNhE8Mvn75OCNigVuAN4SyBXe0I71nGB+ZAUZv9NZii1zDspRc
AhDW6Z8BBfNPpTrYh4Th2Bs9YYgUQh0aXqKZFxucxt0Ni+0SHQqyjnRfZ48WNqV4
R06Zsfjogef1GRRMWwb0gDPjedXTPKiWTmcbUr5HAMzcuxhD/I+WIyOnEJ6B2XKl
EUadSzVyR8UCgA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:33 2025 by rpki-client