Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          +R+spdr7+MORGGM+T9tMtJ0RgtEAMQnnEfbFl1mqZRE=
Subject key identifier:   0B:C0:0F:28:FE:A1:1D:11:3A:C0:A3:4E:30:8D:63:92:E6:BF:EF:AE
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019A1F516244B257C1E3D3F4131197A1ADFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          16FD
Signing time:             Sun 26 Oct 2025 07:00:18 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:18 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:18 +0000
Files and hashes:         1: 16-jUNfPaeEDFi2CG2Dls7NK5lg.roa (hash: 9zFXZ8EDGdJp6On1sZ8dp628uiNp48YN4eESkdpnuOk=)
                          2: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
                          3: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: mvXo5VLvviLOFORUiCyg9RAdNmWkA+BIu9wRXHk/BFU=)
                          4: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:62:44:b2:57:c1:e3:d3:f4:13:11:97:a1:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct 26 07:00:18 2025 GMT
            Not After : Oct 27 07:00:18 2025 GMT
        Subject: CN=0bc00f28fea11d113ac0a34e308d6392e6bfefae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:0d:43:05:68:bd:52:53:04:00:d9:51:a2:
                    04:f5:df:99:02:0a:b8:cd:21:5b:af:f4:0f:7e:97:
                    c0:24:46:5c:c3:77:d2:6d:6c:71:87:c8:03:a4:5b:
                    f8:9d:09:02:1b:dc:c2:58:7b:4e:2b:19:aa:f4:b6:
                    91:29:cc:36:74:d8:95:9b:0c:fa:7a:b9:bc:69:16:
                    3e:85:38:be:f5:a2:ef:16:33:68:a8:f4:50:6b:77:
                    0e:ce:f6:56:67:03:08:d0:0d:38:dc:a7:b2:f4:51:
                    63:2e:3e:a8:8b:76:78:a2:4b:33:eb:6d:ed:21:cc:
                    37:a6:12:0f:da:40:3b:20:eb:c8:f5:fb:38:82:f1:
                    6a:85:08:7d:94:99:24:44:5b:81:df:a4:bf:f9:37:
                    74:cf:5c:fb:1d:d4:d7:38:a5:19:00:ea:d0:56:47:
                    58:9f:9a:ce:db:e5:b8:dd:3d:1a:06:20:57:cb:47:
                    ce:f9:9f:1f:f0:22:09:92:2e:ab:92:aa:9f:6f:30:
                    a1:03:f1:1f:71:f4:5a:3e:66:77:ac:22:b5:ab:5d:
                    e0:18:07:61:14:35:0e:20:ba:bf:cb:bc:b0:a3:f6:
                    d1:a2:42:af:ee:a1:fe:09:f5:ef:27:a4:96:bf:ac:
                    3f:43:f2:e6:ff:40:e8:14:fa:10:ef:43:7c:e6:cd:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:0F:28:FE:A1:1D:11:3A:C0:A3:4E:30:8D:63:92:E6:BF:EF:AE
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a6:1c:f2:99:ca:6a:a0:0a:4f:9e:50:88:86:80:1c:62:77:
         93:9d:32:a1:64:15:39:63:e9:21:97:cd:a9:96:10:d1:5a:e3:
         ae:ac:97:36:d7:ad:08:de:b5:03:9c:79:e1:8f:de:31:e6:e3:
         45:a0:9c:26:f1:9e:8f:c5:c4:d8:33:05:22:08:98:5e:cd:4f:
         db:7e:08:34:74:0b:f5:f9:66:2e:6d:99:c0:0a:e0:0a:67:0c:
         42:3a:a0:5b:f9:9d:22:db:a7:ea:4d:15:70:10:1f:ae:6a:b3:
         ad:59:a7:f4:85:b7:db:2c:6e:ae:72:d1:87:79:2c:bf:27:74:
         a1:45:25:39:cf:4e:db:41:39:51:5c:ef:1d:e8:20:4e:34:1b:
         cb:1a:c1:32:44:e1:27:20:16:cd:fc:8d:4d:51:aa:9f:7c:c7:
         9e:39:28:64:f8:65:9a:c1:dc:3b:72:2e:d3:8b:0a:c3:af:ba:
         82:65:de:31:00:be:19:6a:2a:38:d2:d6:72:74:96:b5:d1:74:
         4c:e2:8b:75:c8:da:df:be:ad:9c:2e:ac:31:ef:16:7c:c6:13:
         c6:a9:dd:0f:e1:2b:f9:5b:d9:09:ed:14:be:73:d9:d4:39:fd:
         ef:bc:45:64:3e:6c:64:b9:a6:3d:a4:92:d2:35:70:90:b2:51:
         33:6c:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:31:10 2025 by rpki-client