Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          fu1Xx98QatEEEt8b1xZq5XO9vN/ga5htJN1OoZjRVvI=
Subject key identifier:   23:5B:39:51:7F:3D:3D:B0:FB:34:57:0A:4B:37:00:96:03:A7:DE:82
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       019954C1FD7EB205DD83C11BAA6C0A33CBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          04BE
Signing time:             Tue 16 Sep 2025 23:00:23 +0000
Manifest this update:     Tue 16 Sep 2025 23:00:23 +0000
Manifest next update:     Wed 17 Sep 2025 23:00:23 +0000
Files and hashes:         1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
                          2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
                          3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
                          4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
                          5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
                          6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: 4y5j4ApIzUxI//5pi/3H5EEsRVSFOQNzqUreG2o8ja0=)
                          7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:54:c1:fd:7e:b2:05:dd:83:c1:1b:aa:6c:0a:33:cb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Sep 16 23:00:23 2025 GMT
            Not After : Sep 17 23:00:23 2025 GMT
        Subject: CN=235b39517f3d3db0fb34570a4b37009603a7de82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:a3:78:d1:b1:09:d2:9c:f9:f6:0d:12:2f:
                    bd:70:3a:68:37:22:83:c6:50:d1:d9:e7:f4:f5:38:
                    99:70:bc:19:c7:8d:a4:c0:22:1a:4f:07:77:df:4c:
                    00:dd:67:83:fb:58:46:5f:93:33:32:c9:e7:92:34:
                    49:d5:81:fe:14:29:93:00:92:0d:66:cf:89:5e:9f:
                    0d:16:cc:a2:1a:9a:92:86:0c:c0:2f:22:3c:e8:6e:
                    28:7b:39:8a:7d:68:80:53:57:8a:73:19:f0:92:3b:
                    65:ad:6a:62:2e:64:36:bd:f4:9e:1b:03:28:61:9d:
                    10:07:68:26:23:df:72:bb:44:e8:00:b4:83:08:bf:
                    f6:35:86:67:d9:75:13:5f:32:10:9c:43:e5:86:36:
                    b8:42:d7:7a:22:2e:e8:1a:e0:55:14:88:a0:41:45:
                    3d:37:4d:8d:3c:d8:48:50:2c:47:ab:00:d9:90:9c:
                    03:15:53:c9:17:3b:fc:32:f0:c9:61:dc:d2:15:50:
                    9d:da:57:36:b1:f8:b9:e4:a3:a8:ed:08:a9:2d:71:
                    09:cf:4d:2b:32:f3:23:15:a7:a1:e2:3b:ab:53:ed:
                    20:d7:c3:b6:b0:a6:65:7c:6f:7c:c6:5a:06:67:13:
                    c9:0e:69:c1:dd:a4:50:7c:8b:e0:2d:1e:9e:cf:63:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:39:51:7F:3D:3D:B0:FB:34:57:0A:4B:37:00:96:03:A7:DE:82
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:be:9e:52:84:b6:af:14:33:e5:d7:67:9b:bc:ad:5b:30:6e:
         89:6a:52:25:42:10:fc:ca:68:87:e4:0b:10:88:43:54:b4:56:
         55:7f:8e:c3:19:3b:76:4d:28:21:6c:e2:51:b5:b1:2f:35:79:
         78:18:b8:0a:9b:c7:85:d2:dd:35:1a:94:b3:d0:fa:4d:38:bc:
         fb:f9:93:20:02:2e:c0:e5:69:86:5f:f9:ab:b3:2a:6b:0d:95:
         6b:89:ae:fc:14:03:1c:6c:ea:e8:f9:75:d6:fe:f6:5a:21:27:
         00:83:6b:a9:90:f2:6d:17:d5:32:e9:f8:a6:5a:ad:8e:42:59:
         a3:37:8d:bb:dd:c5:bd:30:2d:d6:51:8c:43:d7:60:d5:63:2c:
         a1:c0:1a:40:a4:5d:60:b4:0a:8a:12:f4:74:e2:6c:d6:1f:da:
         1d:6d:36:71:f8:80:69:d5:d0:cf:d8:f3:b3:ae:35:40:92:8d:
         37:27:c7:1d:c1:ed:a5:ae:be:d2:5c:ba:fc:58:94:c3:0b:23:
         e4:c6:4a:0c:b7:fb:31:2d:22:2f:7c:05:a1:b8:e9:cf:17:f8:
         2c:e6:28:ae:86:ef:39:7c:e2:52:89:d4:2f:09:7f:ae:b3:2d:
         5d:58:b1:0f:09:4e:9f:dd:a4:19:9e:ef:a1:b9:05:86:18:db:
         5e:92:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:55:57 2025 by rpki-client