Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          66yk8xoiPAeno4WJZUP2KoIkvY0ogk5QMbf+k382nJg=
Subject key identifier:   09:0F:8D:6C:AE:8C:6F:5C:21:CC:83:DF:05:54:EA:BE:B6:3B:04:95
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       0198D4E096AAC8A597834F3C0A1092839129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          06E9
Signing time:             Sat 23 Aug 2025 03:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:25 +0000
Files and hashes:         1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=)
                          2: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=)
                          3: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=)
                          4: ormFqBbSNZ9STHM9altDZ_d23vQ.roa (hash: J6zKFE4hCTyzQ+z5ZObdUSvjFEcPbgT7zIhL9WAYj1Y=)
                          5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: p0fSmUeznIhPG0Lu8EbENnaIhcaHxMaXNamIXVCmC38=)
                          6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=)
                          7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:96:aa:c8:a5:97:83:4f:3c:0a:10:92:83:91:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Aug 23 03:02:25 2025 GMT
            Not After : Aug 24 03:02:25 2025 GMT
        Subject: CN=090f8d6cae8c6f5c21cc83df0554eabeb63b0495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:89:6f:64:2c:63:cb:f9:f9:7a:c3:32:c5:
                    c8:cd:b7:b2:6c:4c:d9:8d:ca:eb:60:77:a1:06:68:
                    73:5a:25:62:70:90:b4:1f:4c:7a:c9:d9:20:05:f6:
                    e4:76:90:e5:54:53:a8:25:22:0e:5e:b9:a1:b6:3d:
                    71:a7:d4:49:9e:40:c1:1c:3e:cb:e7:5d:56:a8:4b:
                    54:2f:a3:0d:35:17:e4:ce:b7:dc:2c:cd:35:d8:23:
                    9f:19:16:51:28:5d:4e:49:90:8d:0c:6b:14:8f:4e:
                    bd:7a:3e:77:61:29:f3:e3:c7:ba:fe:5d:f0:49:fe:
                    b4:1f:21:85:3a:dd:aa:7a:43:f9:cd:cc:ec:fb:e2:
                    67:f1:75:10:60:d0:50:a4:1e:a2:eb:8c:ad:78:0a:
                    53:1c:bb:82:66:2a:70:be:40:5e:93:e4:9a:9f:35:
                    ff:0e:2c:48:9e:e9:3e:02:7a:dd:6c:28:f5:76:61:
                    01:ae:43:97:f0:38:99:38:9e:af:c1:f8:91:b6:33:
                    d4:b2:57:ac:82:3f:37:e0:02:8e:78:f7:b6:53:30:
                    b3:a7:f4:58:94:7f:70:e4:b9:25:a2:41:15:76:cf:
                    80:af:39:e0:40:dc:3c:05:14:cb:e5:17:86:13:2e:
                    77:31:28:ef:b7:e3:29:b3:39:ed:16:ba:4c:52:aa:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:8D:6C:AE:8C:6F:5C:21:CC:83:DF:05:54:EA:BE:B6:3B:04:95
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:25:48:e7:7b:29:e8:39:37:d6:67:98:2c:cf:5a:5b:88:
         ec:af:f9:ab:a8:a1:07:d0:ac:72:f1:82:68:e4:f7:bb:90:3a:
         46:74:89:d1:b3:f7:af:39:69:43:39:2b:f6:16:ab:10:d5:36:
         a9:d1:96:b5:91:d0:3c:bd:82:17:0c:62:5f:30:06:d1:30:16:
         ba:74:bc:bd:cc:c8:88:28:11:a8:5d:cc:4d:ad:2e:f0:e4:d7:
         8d:82:14:98:de:bd:31:28:2d:d9:33:70:40:c1:8d:29:22:8f:
         a9:85:9d:c9:b1:d5:53:71:b7:97:17:fb:56:75:ea:85:bc:d8:
         d2:1b:e9:c9:ec:71:06:6f:51:5b:78:4d:45:04:4b:26:ef:84:
         70:d8:79:61:23:b9:54:79:2c:97:f9:58:f8:5d:53:9e:34:fb:
         13:d1:18:46:cf:40:76:26:79:dc:df:63:17:39:ab:0c:89:f0:
         a3:52:7d:7c:58:06:0c:49:e3:99:13:7d:8c:1f:9d:c4:0f:e2:
         da:a7:54:8a:7a:aa:95:a1:17:ab:a9:7a:1a:8a:7a:76:57:ee:
         a8:d7:4e:45:4e:95:87:09:42:4f:38:08:05:78:10:33:b1:bc:
         8f:1a:a3:5b:0a:0d:ff:a2:fc:a9:02:06:5d:d4:f6:f7:6e:ca:
         0b:41:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client