Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          I7hgiAWTddbFiTW7YDh4TqVhwi9ADDwf4jk9wYXzqaw=
Subject key identifier:   07:82:DA:CE:7D:3D:6E:69:6D:A4:90:A9:4C:D1:3B:C2:51:61:FE:20
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       0199375D78B816911F731D4BA1D024D77D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          1683
Signing time:             Thu 11 Sep 2025 06:01:36 +0000
Manifest this update:     Thu 11 Sep 2025 06:01:36 +0000
Manifest next update:     Fri 12 Sep 2025 06:01:36 +0000
Files and hashes:         1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
                          2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
                          3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: Vy+YbnXU718xUdjUCvuCK/j/yazS5p2R/SIZeuzu4fM=)
                          4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
                          5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
                          6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
                          7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
                          8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
                          9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5d:78:b8:16:91:1f:73:1d:4b:a1:d0:24:d7:7d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Sep 11 06:01:36 2025 GMT
            Not After : Sep 12 06:01:36 2025 GMT
        Subject: CN=0782dace7d3d6e696da490a94cd13bc25161fe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:61:9c:0f:0e:11:e3:21:32:af:9e:66:87:
                    b4:ed:b8:86:64:ee:98:c5:3f:af:3f:37:8a:f1:9d:
                    71:1a:4b:45:fd:da:94:80:93:e4:d2:94:c5:73:c1:
                    b4:93:bc:24:68:20:5a:d5:1d:85:2d:4a:ff:0d:1b:
                    9b:17:e7:b5:d7:c4:8e:c4:d1:c5:2f:1f:eb:0c:e3:
                    e8:96:ee:01:b3:66:66:45:48:41:f0:26:98:ca:ed:
                    3a:c3:48:07:31:2e:32:36:c3:13:0b:50:63:98:41:
                    9e:42:12:c6:d4:04:8b:7d:d4:72:dc:be:fc:4e:39:
                    af:f6:9d:14:dd:e9:35:ac:77:d3:67:bd:0c:b6:08:
                    dc:d1:58:b7:98:c9:d0:9a:4a:e6:38:9a:14:f7:ad:
                    ba:b9:9a:c5:fa:11:2c:2a:e1:c2:f2:14:c6:c5:c5:
                    45:cb:2a:eb:d4:00:a7:98:2e:0b:f5:c0:18:9e:0d:
                    ef:eb:36:94:77:fe:22:ce:3f:31:5b:33:00:45:02:
                    3f:b5:c0:49:76:75:11:c7:be:dc:60:07:d7:00:40:
                    b9:69:99:37:0f:07:fd:26:0a:88:36:84:2c:9c:84:
                    fb:80:0c:85:20:fc:30:17:b1:32:2b:4c:32:52:fa:
                    05:22:15:de:d7:e5:66:ec:af:47:e8:6f:08:2b:68:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:82:DA:CE:7D:3D:6E:69:6D:A4:90:A9:4C:D1:3B:C2:51:61:FE:20
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3b:b7:fa:8d:9f:47:7c:1e:02:8c:dd:eb:0b:7a:d0:31:53:
         1f:31:79:6e:d6:da:aa:67:a9:df:de:53:b1:c0:f8:45:40:7f:
         9a:db:f9:c2:59:8f:ae:eb:42:75:34:a8:26:b0:2e:84:20:34:
         e1:43:67:4f:80:4b:53:44:a6:5c:97:dd:c6:56:d4:5b:d3:db:
         d1:c5:b1:e7:45:ad:56:c9:c5:3c:f2:af:b3:dc:bb:0b:e5:2e:
         43:e6:41:77:23:69:e4:18:d5:ee:98:b1:38:93:f7:78:ee:9f:
         3f:14:f1:f9:b9:80:0c:8f:88:6d:f6:90:70:67:a1:38:55:41:
         1d:9f:2f:e2:1c:45:dd:4a:86:8b:e1:01:18:92:a5:11:5c:31:
         5d:78:12:e1:f6:fa:19:e9:51:52:3d:d3:51:e8:78:dc:d8:c5:
         c4:a5:19:1f:8c:24:79:de:ae:4c:af:58:d0:2b:c8:70:aa:78:
         48:ff:4b:df:07:c2:50:65:2e:e9:71:a4:ec:de:fb:3b:50:66:
         f4:0c:db:5c:96:37:b1:ec:5e:38:be:e0:7e:24:0e:e7:a5:64:
         d0:ff:cf:3a:50:3e:1b:99:1e:26:65:3f:33:95:d2:aa:71:ed:
         c7:36:aa:f7:c5:45:10:9b:94:55:ba:d5:68:14:98:fa:98:1b:
         2f:5b:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:22:58 2025 by rpki-client