Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          5gMXpV73qpoMhnoTKaNaUCuez6EE+hHS4Z7v6+ZUrTk=
Subject key identifier:   91:C6:4D:10:FD:55:80:7D:9B:CD:B3:FF:18:85:BF:ED:77:64:AE:75
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       01992F353D6C61E750325ECB1C821684526F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          168B
Signing time:             Tue 09 Sep 2025 16:00:42 +0000
Manifest this update:     Tue 09 Sep 2025 16:00:42 +0000
Manifest next update:     Wed 10 Sep 2025 16:00:42 +0000
Files and hashes:         1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: d2kE+fdGwxxudtvr09DpJf3Y2Ekuyvrmxc4iM/F+fBI=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:35:3d:6c:61:e7:50:32:5e:cb:1c:82:16:84:52:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Sep  9 16:00:42 2025 GMT
            Not After : Sep 10 16:00:42 2025 GMT
        Subject: CN=91c64d10fd55807d9bcdb3ff1885bfed7764ae75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:26:27:ed:5a:f8:97:44:9f:2f:23:b6:6b:
                    cb:1b:aa:92:00:c2:55:1c:2b:bc:9a:e4:18:67:44:
                    70:39:fc:c3:4b:75:2c:d9:fc:d1:76:cc:a4:9c:0d:
                    77:1c:84:06:84:0a:13:dc:ca:ad:94:c6:45:03:ab:
                    5b:52:d1:fa:53:38:2b:ca:b6:61:2c:e4:d8:09:49:
                    d4:91:5d:a7:f5:21:b6:42:6e:1a:70:ce:61:57:c7:
                    12:0c:02:e7:ae:32:5a:02:65:3b:b7:12:b2:25:86:
                    3d:fd:10:c0:89:40:31:13:b5:f0:e9:44:65:79:98:
                    38:1b:10:a4:d3:14:68:bd:d7:5b:34:5c:da:1f:7f:
                    78:6f:d7:a3:64:44:e1:be:8f:77:18:5c:6d:a2:80:
                    68:11:ff:c8:73:05:80:67:54:7b:6e:be:bc:1b:5e:
                    d0:c7:d3:be:ef:63:85:13:49:80:b5:22:56:d9:b0:
                    27:eb:46:4d:7d:a2:66:12:89:db:b1:64:63:bd:46:
                    0c:6a:d6:2e:ee:a4:bd:c9:d1:ed:b2:1e:69:74:98:
                    35:3e:0e:bb:81:d0:f6:a3:7f:9f:1d:94:76:b4:82:
                    03:c7:49:3b:21:00:d8:75:14:d8:40:8b:45:23:bf:
                    57:7c:08:29:5f:06:6a:5b:51:b4:39:6b:9a:89:12:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:4D:10:FD:55:80:7D:9B:CD:B3:FF:18:85:BF:ED:77:64:AE:75
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:fc:ea:fd:b3:c1:c2:ab:a9:9c:73:a0:8f:65:21:41:e9:
         22:9b:e5:5d:fa:ba:82:d3:25:a1:3e:28:03:41:95:8a:87:c2:
         47:aa:db:6f:0c:01:e0:9c:8c:5b:b7:18:9c:b7:c9:fc:57:2e:
         b2:b5:ed:94:4f:80:50:9e:40:b4:ad:2d:76:29:8a:50:8e:3e:
         15:b4:ab:65:d9:42:48:e8:25:8e:7f:51:9e:f3:a5:9d:85:0d:
         46:fe:01:b4:e1:2d:49:2d:f6:65:46:08:12:8b:c0:54:72:b4:
         12:04:14:34:a5:b0:33:e4:ee:a3:98:4a:fb:62:3c:57:6f:48:
         39:13:f2:f8:95:bd:b8:00:e8:23:17:23:32:2d:c1:20:1a:ec:
         3d:ff:05:28:ab:38:b2:cd:b7:39:eb:dd:ba:b8:ca:d7:6e:83:
         17:79:f2:89:06:8d:ef:34:ff:b1:aa:27:4a:21:7c:9c:2c:5e:
         93:1e:e1:99:a8:7e:a9:6e:64:12:7e:d7:25:f2:69:15:e8:f8:
         d2:94:27:41:06:d7:aa:42:98:e6:e5:d5:d8:37:28:65:85:3f:
         c8:d4:da:46:30:c0:69:7f:d4:4c:88:14:9e:d5:ba:f4:8b:ed:
         a0:2e:0c:7d:c9:a1:17:f8:90:63:45:5d:8d:db:dc:1c:88:fa:
         f2:74:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:48:33 2025 by rpki-client