Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          0TH80c5wyYl6+VVnqj72PJ5+9zmiL2bqOHJa8zi9DG0=
Subject key identifier:   35:D8:C3:C8:3F:D8:7A:AA:7E:55:DC:2D:D9:4C:D0:57:F8:A2:86:1D
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       019A1F1AE1C5CFBAFB7D3B2EBB58E45B58BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          171D
Signing time:             Sun 26 Oct 2025 06:00:46 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:46 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:46 +0000
Files and hashes:         1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=)
                          2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=)
                          3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=)
                          4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=)
                          5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=)
                          6: BtYymVysztiqPvFalU2qw0BxdUI.roa (hash: fnna/fe+7wvOm7SoakeRGOUh4jW8Mh/j9bKBLG7yuY8=)
                          7: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=)
                          8: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=)
                          9: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=)
                          10: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=)
                          11: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: JWT0ryyECzNcIrbUn75kH72/2w9qAat5V8Km+YWl4K0=)
                          12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=)
                          13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=)
                          14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=)
                          15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=)
                          16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=)
                          17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=)
                          18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=)
                          19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=)
                          20: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=)
                          21: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=)
                          22: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=)
                          23: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:e1:c5:cf:ba:fb:7d:3b:2e:bb:58:e4:5b:58:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Oct 26 06:00:46 2025 GMT
            Not After : Oct 27 06:00:46 2025 GMT
        Subject: CN=35d8c3c83fd87aaa7e55dc2dd94cd057f8a2861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:4d:6b:16:a1:85:eb:31:78:d8:d5:40:71:
                    bd:a5:27:ff:83:53:af:09:57:a2:19:35:d3:3e:13:
                    6f:b0:14:7f:fd:85:6e:51:96:6c:95:3a:82:76:bd:
                    60:7a:5b:83:59:e2:18:33:bb:13:c7:05:43:19:d6:
                    84:92:fd:1d:5d:b1:76:d0:f3:e6:98:ce:62:ab:c6:
                    0d:49:06:81:0e:54:d5:e8:89:ab:02:ab:a0:4a:f0:
                    28:09:76:19:a6:25:16:1d:c9:6e:7e:8e:ab:d6:97:
                    d4:16:7f:0c:3a:45:e1:b0:48:6a:c4:7d:83:08:1a:
                    3a:6c:38:a9:05:d6:8e:51:2e:61:36:00:2a:54:89:
                    1f:2c:cf:64:47:04:74:15:9c:3f:87:fb:ed:5a:85:
                    38:c3:23:ca:e0:07:47:00:ad:30:20:ba:76:fa:66:
                    f7:c7:d4:9a:63:02:34:e6:d0:7a:c2:21:23:29:21:
                    a1:12:c3:06:2d:4c:6a:87:27:e5:fb:c4:9f:34:7d:
                    b7:8b:f2:09:8a:ea:e8:71:c1:51:79:6a:bb:14:44:
                    fc:c0:9e:61:bd:ab:1c:15:15:c3:2e:6b:5f:d5:dd:
                    74:02:9e:e8:75:c1:63:03:8b:a7:11:13:10:90:24:
                    22:ba:ca:b0:61:8f:0b:8e:a9:38:1c:02:13:e3:3b:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:C3:C8:3F:D8:7A:AA:7E:55:DC:2D:D9:4C:D0:57:F8:A2:86:1D
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:21:f6:76:fd:b9:aa:fa:10:0d:7d:ec:0b:18:7b:2e:f3:
         71:5a:08:5f:00:b5:02:10:73:55:b5:e4:8e:4f:25:f6:74:ef:
         69:d1:13:e9:e5:45:f9:ab:3e:54:e6:56:0d:dd:33:07:da:bc:
         41:ca:a2:c6:44:df:b1:95:45:12:f4:79:ae:0a:30:fc:1e:0e:
         ea:2e:e4:7a:11:65:71:03:8a:a7:2d:75:55:48:93:08:11:9b:
         33:1c:53:88:51:4c:53:32:2d:9b:73:99:cf:9e:08:5d:7a:54:
         f6:49:27:ba:6a:9d:6e:33:df:8c:97:9f:0c:d1:97:4c:3c:17:
         52:dc:ac:40:aa:8b:a5:fb:1c:d9:11:fc:65:28:df:c5:6b:12:
         76:fb:1c:89:90:29:69:ca:cd:70:7b:a1:1a:22:71:8c:a3:bc:
         1f:97:b9:3a:14:3c:b7:66:35:a3:ce:85:9c:1f:e0:66:a3:f5:
         4b:11:53:48:4d:77:e2:b7:3e:da:04:a6:8d:e7:19:70:1f:eb:
         df:30:14:ca:00:d7:ab:e3:c7:0e:d6:8f:3c:7e:b4:d8:42:ff:
         74:b4:68:b9:25:67:71:ae:44:27:b5:4b:f8:ff:51:ea:ba:7e:
         0e:21:2a:92:e3:29:b4:96:59:8f:53:9d:8c:d2:44:93:32:73:
         52:7d:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:50:36 2025 by rpki-client