Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          MbMpFf3wRCztG/6RYff8JoUzFCGGEUe8cTrFts0N6lo=
Subject key identifier:   44:51:F4:4B:6A:98:FE:50:35:61:83:7F:D3:22:E2:8D:7F:CA:8D:CF
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       019A20D1FE5C1B7D65AD6FA1F2712C186209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          1701
Signing time:             Sun 26 Oct 2025 14:00:24 +0000
Manifest this update:     Sun 26 Oct 2025 14:00:24 +0000
Manifest next update:     Mon 27 Oct 2025 14:00:24 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: pnVpMIvWgzTGFTgWNbjTCKBTN9HFfCw4ATXSylBl0Us=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:d1:fe:5c:1b:7d:65:ad:6f:a1:f2:71:2c:18:62:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Oct 26 14:00:24 2025 GMT
            Not After : Oct 27 14:00:24 2025 GMT
        Subject: CN=4451f44b6a98fe503561837fd322e28d7fca8dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:6c:25:ac:0d:6d:c4:98:1b:48:b5:2a:37:
                    b2:5b:5e:8b:4a:2d:7e:3d:b6:0e:be:a1:da:d6:41:
                    60:82:76:6f:a0:b9:ca:f4:46:78:06:68:31:3e:43:
                    69:c8:35:40:1a:c5:a3:25:b6:e6:0e:ec:7a:f7:2f:
                    f6:46:fe:44:be:ef:0e:51:ad:0c:b9:42:d3:c9:cb:
                    19:58:e1:ae:97:83:76:4e:dd:b4:06:87:36:8c:9d:
                    8f:ce:3c:e1:00:61:a3:cf:7d:94:68:14:d3:a3:6e:
                    c3:d2:9a:17:9d:62:b3:2c:d3:18:e2:e5:10:36:e0:
                    c4:dd:ba:b4:7d:a6:01:6c:b5:12:ff:c2:78:d0:ab:
                    74:ac:98:45:cd:55:08:8a:16:75:99:01:b9:d8:a5:
                    39:5e:76:f6:86:bd:05:31:6b:e0:15:00:54:c1:6d:
                    00:af:fa:da:d4:ed:f4:7e:b7:b5:99:f6:49:d9:16:
                    15:67:01:3b:f3:93:78:d7:5b:c2:3d:8b:b6:66:58:
                    11:31:a5:8c:a4:48:c2:ac:9d:cf:99:d8:b9:d8:62:
                    c0:1e:52:82:38:5c:0e:a4:c0:d4:f1:3e:3d:7d:68:
                    f8:4c:14:26:f6:4c:83:b7:bc:5a:a8:e7:d5:ca:ed:
                    3b:67:35:d9:1a:1c:dd:aa:fc:f9:59:91:f1:05:86:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:F4:4B:6A:98:FE:50:35:61:83:7F:D3:22:E2:8D:7F:CA:8D:CF
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:a3:ba:c6:bd:b0:7b:48:9c:aa:f6:00:21:a0:4c:85:9d:
         c9:f2:83:4b:5b:07:c6:99:40:dc:c9:44:3b:75:f6:47:34:56:
         ec:97:62:15:c7:35:ac:20:2b:11:db:42:b5:88:a3:2d:67:9f:
         c8:18:29:59:7b:60:1f:44:ac:83:df:32:dc:56:5e:1b:92:dc:
         25:a6:22:ce:ec:90:e4:a1:52:f6:97:dc:fd:b9:2f:f7:24:f6:
         60:3c:05:d2:02:8e:c0:05:4c:a1:91:24:e2:4a:f7:dc:ff:77:
         8e:44:9b:00:e7:f4:86:75:2f:37:20:64:1d:d9:6a:28:6a:e2:
         9a:90:c7:e2:0e:d4:c5:df:c8:d0:0f:d8:b2:90:f2:22:d5:61:
         46:9d:42:f6:6b:7f:4d:bd:0f:3a:37:d4:a4:29:66:14:75:2d:
         a7:c6:2f:7e:b4:e4:82:df:5d:ba:48:0a:8f:d7:c6:65:0e:15:
         4f:f0:d3:88:a0:48:02:f0:98:c2:71:8d:65:ca:59:08:91:31:
         68:f4:d5:ee:58:cc:ee:39:78:60:60:7c:af:51:a7:43:a6:15:
         f4:d1:9e:57:9d:f3:5c:87:4a:02:21:b3:be:10:72:30:8f:63:
         75:c9:08:c7:d3:42:0b:6b:4a:dc:db:58:8a:96:73:3e:84:63:
         88:5b:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:33 2025 by rpki-client