Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File:                     Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier:          9kKcWKXNl/w1xJ52EYOX/Oz4+v9oPfLAWNqwxpdOZx8=
Subject key identifier:   73:25:8E:BB:AE:31:3F:F4:70:8E:56:FD:90:FC:7D:1E:A8:55:5B:CD
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer:       /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial:       019A7113701F952CE34593D0C58D7B4AD3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number:          1463
Signing time:             Tue 11 Nov 2025 04:01:30 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:30 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:30 +0000
Files and hashes:         1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
                          2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: zTkqkW4E5cFj/kX5J9Y8sZ7VrE4yI4oxm/aZTtnSvrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:70:1f:95:2c:e3:45:93:d0:c5:8d:7b:4a:d3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
        Validity
            Not Before: Nov 11 04:01:30 2025 GMT
            Not After : Nov 12 04:01:30 2025 GMT
        Subject: CN=73258ebbae313ff4708e56fd90fc7d1ea8555bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:77:84:e6:3d:9f:71:1e:6f:58:92:bd:2b:
                    38:6c:70:64:8b:a0:55:49:c9:90:17:11:db:0e:a1:
                    db:50:18:f0:da:ba:13:d0:de:f6:c6:8a:5f:3e:70:
                    2a:43:c2:35:f2:1a:e6:8b:ce:dd:5b:bb:1b:83:3b:
                    49:14:33:f7:c9:8b:5a:e3:b5:1b:db:9a:47:1f:86:
                    32:01:c4:54:26:22:44:0c:74:b6:e7:61:c3:26:f6:
                    0d:89:a2:85:60:22:50:5c:ac:bc:a2:91:45:d7:a0:
                    87:71:d0:01:7a:8b:60:cb:6f:27:08:f8:44:49:11:
                    89:d2:79:b6:d8:95:a7:5e:44:67:94:05:e5:f9:9b:
                    84:7a:0e:c2:5f:ce:80:76:0e:8a:cb:d6:22:f5:36:
                    1e:52:77:c2:ac:af:71:1c:ef:20:bd:c1:51:60:73:
                    91:0c:25:97:ca:66:de:18:29:4d:70:92:eb:6f:97:
                    0a:2f:14:72:e0:45:3b:68:53:95:e9:d9:6f:56:43:
                    22:52:d9:4b:57:1e:c0:42:25:cd:52:50:1c:1f:35:
                    df:19:2f:ae:c3:05:8f:b0:ce:55:0d:f7:18:71:56:
                    52:41:8f:08:54:ca:35:15:9a:a1:f9:af:03:a2:41:
                    fb:8a:dd:e4:3b:8a:0d:e0:98:37:6a:08:b4:f9:f3:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:8E:BB:AE:31:3F:F4:70:8E:56:FD:90:FC:7D:1E:A8:55:5B:CD
            X509v3 Authority Key Identifier:
                keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:73:30:03:69:37:34:5b:8d:00:4a:d0:7a:4f:d9:fa:56:b0:
         c1:b6:34:60:a6:9d:c1:de:d9:51:32:50:fb:e0:d7:43:63:4f:
         4b:d5:ad:4e:25:58:db:11:eb:da:cc:21:e9:78:35:a5:7c:dc:
         08:9e:28:08:7d:ab:33:a1:51:a7:ee:9c:cd:e7:13:4d:3e:dd:
         cb:c6:e6:d5:43:ab:c6:b0:6a:8c:84:96:05:a3:02:0b:91:d3:
         86:cf:54:e2:5c:be:c4:e8:ed:09:f7:be:10:0f:20:cf:5d:da:
         ce:26:29:4f:b7:96:f6:90:0d:14:cb:6d:3a:ff:07:3b:75:4a:
         e2:04:6f:d0:73:7c:c5:3d:de:fe:5d:d6:b8:1a:a3:8f:05:ed:
         db:ce:bf:bb:cc:b3:70:55:ce:2b:8c:a4:7e:23:62:ad:83:f7:
         66:4f:2b:06:4f:66:5f:af:3d:97:6b:38:5e:de:f5:07:cd:ac:
         7b:e5:ad:b0:49:9f:21:0a:89:99:a0:df:2e:be:f6:e2:28:78:
         80:22:19:e4:00:90:68:6c:fb:6f:43:80:4b:70:e5:93:05:f1:
         71:f1:97:71:1d:2b:7d:f3:44:35:2e:15:a2:5e:f2:32:52:e5:
         a9:5f:ef:23:29:57:ac:9d:bd:e2:4f:eb:7d:e1:77:a4:91:6d:
         d8:d5:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:29 2025 by rpki-client