Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          hn3rZVjujUIu9A5VYQhIx6sV3lX4o/IcS366gBgKmSA=
Subject key identifier:   7A:1E:46:7A:3B:8C:91:6B:DD:A5:3F:44:65:B2:50:8F:F1:17:0F:68
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       0198D47488245EA95603BC4E6017C2002F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 01:04:23 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:23 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:23 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: zIhLoolYX3jnuK5uCtGBRjH0pPXCN1hBaW2rHXsi1yE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:88:24:5e:a9:56:03:bc:4e:60:17:c2:00:2f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Aug 23 01:04:23 2025 GMT
            Not After : Aug 24 01:04:23 2025 GMT
        Subject: CN=7a1e467a3b8c916bdda53f4465b2508ff1170f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:74:16:6a:b6:70:d8:89:74:18:0f:e1:d4:
                    7e:9f:e6:70:54:c3:58:05:fd:6e:c0:e5:d8:33:1a:
                    e2:ab:7f:8d:a9:b9:c1:83:4d:31:a5:ee:de:3c:a8:
                    c3:b3:b3:12:04:4e:44:e5:7f:c4:89:da:2f:45:a2:
                    16:b3:f2:6f:ef:58:e1:2f:ee:a7:a1:b7:03:11:9b:
                    ff:12:f6:1a:9c:45:02:f7:f6:d1:77:85:0a:7f:80:
                    1f:94:22:aa:f4:3d:46:4a:05:03:5b:ef:f1:5c:fa:
                    0a:6a:97:c0:1d:dc:29:de:fc:08:29:e6:b7:41:70:
                    3b:ca:87:65:89:ee:f2:83:63:83:18:52:df:24:bb:
                    7a:04:9d:75:1e:bd:26:85:2f:35:90:7f:b5:b9:bb:
                    ca:6a:53:ae:9f:e9:0e:29:f2:ca:80:98:6c:5d:69:
                    6f:ce:9f:94:3d:05:63:47:9e:8b:e3:fd:a1:29:9e:
                    c3:6a:fa:7a:72:09:1f:a4:fd:e2:6c:31:61:5e:02:
                    d3:7c:ad:3e:62:86:7d:cc:33:3b:ef:a0:96:3a:17:
                    a4:6f:bf:10:4c:ac:f8:e7:e3:a0:e8:78:ae:90:f5:
                    f6:a3:98:aa:12:45:b4:22:7b:80:ee:7e:96:72:0f:
                    34:bf:ed:02:2a:a7:1c:83:1a:70:9a:1b:19:06:cb:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1E:46:7A:3B:8C:91:6B:DD:A5:3F:44:65:B2:50:8F:F1:17:0F:68
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:99:93:e4:93:f7:01:82:31:db:ea:6c:d4:e3:45:6f:f0:49:
         3c:65:ee:65:a2:10:c1:49:85:d9:2b:b4:c4:eb:e5:d8:eb:d3:
         8f:e9:41:9a:07:ab:57:b6:3e:4c:cf:a8:5f:51:80:73:4b:87:
         a2:26:98:db:80:2c:18:50:1c:66:b0:a7:1c:28:b0:92:f0:4a:
         94:af:2b:0a:58:c2:30:9b:8e:e3:b3:5e:39:55:6c:e1:01:25:
         e5:7e:a2:41:52:b0:75:36:8f:38:a5:92:70:19:38:ad:82:49:
         8f:b2:62:c2:13:bf:5f:3d:c7:93:c2:71:ca:67:f3:34:46:76:
         61:f9:ba:00:bb:c9:ff:c9:05:7b:15:8f:28:e8:7a:93:a1:cb:
         ac:39:48:6f:56:0b:58:e0:c3:ea:a1:7f:06:68:fe:05:77:b9:
         d7:5b:af:e2:66:ac:74:71:a2:62:6e:4e:51:e4:f1:04:8f:b6:
         7c:6b:95:2d:73:75:85:07:25:07:9f:bd:06:83:55:0f:a7:61:
         cd:1c:d1:78:69:c1:06:78:c6:55:fc:35:99:96:e7:bb:96:65:
         b2:57:de:65:f5:b8:d0:93:c0:ef:2a:8e:18:50:1f:4b:b2:b7:
         f1:91:6c:58:7e:87:f0:a3:a9:2c:90:41:d9:3c:5c:89:49:b1:
         22:27:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:52 2025 by rpki-client