Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          H4GdjwvyVovKXYn0Lcvhw5Dejk69z4OQsFk0gA9SAP0=
Subject key identifier:   48:69:34:AC:79:21:68:9F:24:9C:40:87:BE:52:AD:0B:1F:75:A3:73
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019A1AD0530DDE47598E75F78C40645E735F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          07B2
Signing time:             Sat 25 Oct 2025 10:00:51 +0000
Manifest this update:     Sat 25 Oct 2025 10:00:51 +0000
Manifest next update:     Sun 26 Oct 2025 10:00:51 +0000
Files and hashes:         1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=)
                          2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=)
                          3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=)
                          4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: F4Ft7uqtxGe/YTzZx27j37s2pvFb7+aUf+NVeREUR2U=)
                          5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=)
                          6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=)
                          7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:d0:53:0d:de:47:59:8e:75:f7:8c:40:64:5e:73:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Oct 25 10:00:51 2025 GMT
            Not After : Oct 26 10:00:51 2025 GMT
        Subject: CN=486934ac7921689f249c4087be52ad0b1f75a373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:56:53:cc:e7:02:b0:ac:e4:af:ef:ad:a7:
                    b2:83:02:66:b7:3e:13:bd:46:e7:20:73:8a:d3:4f:
                    22:66:84:87:96:f8:7c:de:f8:65:25:e0:63:23:25:
                    81:9c:99:e8:43:82:3a:55:79:4d:b9:9d:39:51:d9:
                    f8:25:92:ee:ed:31:cf:48:12:28:fe:8e:d0:92:7c:
                    fa:bf:5e:84:a2:25:e5:0b:b9:e2:e8:ca:fc:72:af:
                    0a:f3:27:74:19:91:79:95:dc:f4:b7:72:0c:17:1c:
                    4a:60:45:42:05:13:66:d2:c4:82:cd:bb:8a:88:21:
                    48:47:4d:d1:4f:38:0b:be:8b:48:2b:a3:5a:2b:fa:
                    41:4e:ec:5b:47:0e:83:c5:32:8d:30:44:9f:a8:dc:
                    d7:85:ae:c8:ee:aa:58:f8:4e:ae:6f:1f:5c:a3:4f:
                    9e:28:26:42:86:f4:e4:cd:09:1a:89:b9:4d:8c:27:
                    9b:6d:f9:54:c9:b1:e7:6c:bc:44:a6:52:df:fe:ec:
                    7f:53:96:4a:01:60:bb:cb:25:20:ae:73:58:5f:91:
                    2b:ec:3e:6e:33:2f:d8:66:54:a7:d9:23:bc:5c:c9:
                    60:97:cc:82:61:c7:51:f8:7e:68:be:c5:12:bb:45:
                    1a:95:5c:16:33:8c:50:c6:17:b6:83:52:62:72:62:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:34:AC:79:21:68:9F:24:9C:40:87:BE:52:AD:0B:1F:75:A3:73
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:bb:c1:57:65:f0:1c:17:24:a4:f4:b4:48:e1:3e:54:e7:
         1f:24:c5:6b:04:e8:cf:31:b9:69:13:5c:29:6b:2b:7d:54:07:
         3c:55:03:12:9e:20:8a:9f:c8:37:0b:a8:14:e2:2b:4a:0c:c0:
         73:d0:e7:f4:f2:17:f3:75:65:74:26:96:38:44:56:97:56:9e:
         b0:5b:b6:14:21:71:1c:4b:8c:e5:90:21:e6:71:5e:b3:7d:12:
         13:83:14:83:60:91:53:b3:4b:7d:cb:9b:50:e8:b2:eb:cb:2c:
         d0:dd:ed:3e:8c:e2:40:ff:a9:8c:d8:36:a7:56:b0:33:61:ba:
         5f:ac:e1:67:27:c9:9f:f3:65:8d:12:c8:10:b3:52:7f:d6:d9:
         0b:49:ba:b3:67:67:d1:93:6e:10:de:14:73:87:92:4e:91:eb:
         8f:26:85:ad:e0:85:64:20:a5:4a:b3:79:65:4c:2a:0c:70:9b:
         3e:f5:e3:45:3e:48:d0:a7:78:b1:f7:3e:a1:a2:4d:12:9f:ef:
         a0:85:22:50:5c:9a:1d:68:42:db:c1:81:fd:e1:a8:4a:52:4a:
         6a:7d:48:63:28:1d:59:a6:10:56:34:fb:30:19:6a:8c:a2:7b:
         02:6f:ab:4d:b1:ec:99:dc:e1:6b:eb:c7:15:c0:58:a0:d2:47:
         e9:54:0e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0FMN3kdZjnX3jEBkXnNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjUxMDI1MTAwMDUxWhcNMjUxMDI2MTAwMDUxWjAzMTEwLwYDVQQD
Eyg0ODY5MzRhYzc5MjE2ODlmMjQ5YzQwODdiZTUyYWQwYjFmNzVhMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQpWU8znArCs5K/vraeygwJmtz4T
vUbnIHOK008iZoSHlvh83vhlJeBjIyWBnJnoQ4I6VXlNuZ05Udn4JZLu7THPSBIo
/o7Qknz6v16EoiXlC7ni6Mr8cq8K8yd0GZF5ldz0t3IMFxxKYEVCBRNm0sSCzbuK
iCFIR03RTzgLvotIK6NaK/pBTuxbRw6DxTKNMESfqNzXha7I7qpY+E6ubx9co0+e
KCZChvTkzQkaiblNjCebbflUybHnbLxEplLf/ux/U5ZKAWC7yyUgrnNYX5Er7D5u
My/YZlSn2SO8XMlgl8yCYcdR+H5ovsUSu0UalVwWM4xQxhe2g1JicmKTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhpNKx5IWifJJxAh75SrQsfdaNzMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguS7wVdl
8BwXJKT0tEjhPlTnHyTFawTozzG5aRNcKWsrfVQHPFUDEp4gip/INwuoFOIrSgzA
c9Dn9PIX83VldCaWOERWl1aesFu2FCFxHEuM5ZAh5nFes30SE4MUg2CRU7NLfcub
UOiy68ss0N3tPoziQP+pjNg2p1awM2G6X6zhZyfJn/NljRLIELNSf9bZC0m6s2dn
0ZNuEN4Uc4eSTpHrjyaFreCFZCClSrN5ZUwqDHCbPvXjRT5I0Kd4sfc+oaJNEp/v
oIUiUFyaHWhC28GB/eGoSlJKan1IYygdWaYQVjT7MBlqjKJ7Am+rTbHsmdzha+vH
FcBYoNJH6VQOdA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:13:17 2025 by rpki-client