Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File:                     Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier:          C1iPuelVhZIBDAVSP/AFj45F8l73R2fmLs0kPKv7Xts=
Subject key identifier:   D5:22:B4:63:D4:D6:14:A6:3A:1A:F9:56:D9:D6:43:86:A6:D8:1D:86
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer:       /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial:       0198470908A303FDBF8F40B1C3F9FF6E4FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number:          02BB
Signing time:             Sat 26 Jul 2025 14:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:30 +0000
Files and hashes:         1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
                          2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: wViGHl+fOBUauJfch5BZDySbeEnC8lgGQkHpckYIp4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:09:08:a3:03:fd:bf:8f:40:b1:c3:f9:ff:6e:4f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
        Validity
            Not Before: Jul 26 14:00:30 2025 GMT
            Not After : Jul 27 14:00:30 2025 GMT
        Subject: CN=d522b463d4d614a63a1af956d9d64386a6d81d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:34:3f:7c:18:d3:74:3e:88:56:32:92:1f:
                    88:fe:5a:b1:92:c0:97:76:7e:e5:ca:79:aa:91:73:
                    2c:1f:ba:64:bd:09:89:f5:66:f0:59:b6:52:63:88:
                    bd:af:e7:b8:83:81:68:9a:07:f9:d7:bc:ac:30:f7:
                    5c:20:62:6d:78:5f:90:4b:fb:cc:5f:40:94:4a:49:
                    a0:c5:9b:ff:a5:b6:fc:1e:0e:a3:15:e1:97:42:c3:
                    5e:06:1c:55:33:b6:27:c2:5f:f3:04:91:8e:c9:3c:
                    4c:ec:7d:1b:81:5b:80:ce:82:f0:ed:d8:30:91:b2:
                    4b:1a:8f:e8:8c:06:fa:0b:41:05:97:97:c5:f5:45:
                    b9:27:43:fa:69:e0:a6:d1:59:4f:bd:4f:73:e5:72:
                    6a:c9:c0:f6:99:af:60:21:82:da:7a:4f:45:58:a8:
                    76:7f:92:44:a5:b9:fb:3a:90:52:3e:f2:1f:f9:55:
                    93:e1:bb:c8:48:f0:e9:50:1d:ad:5b:32:da:a7:ec:
                    35:65:14:6a:7f:d6:b4:69:0f:32:1e:fb:f8:c0:bc:
                    4a:11:f4:55:2a:e0:6e:80:f3:c3:8e:4a:96:cb:18:
                    8f:60:02:f5:43:c2:e1:46:97:6d:65:c8:ab:86:76:
                    fb:bb:a9:dc:09:b9:e1:ab:d0:cd:a4:c6:90:0d:48:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:B4:63:D4:D6:14:A6:3A:1A:F9:56:D9:D6:43:86:A6:D8:1D:86
            X509v3 Authority Key Identifier:
                keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:21:c4:70:01:c1:bc:f5:51:91:7b:3b:29:cc:d4:eb:2e:53:
         28:ba:8e:43:ca:21:81:14:04:05:e6:cc:e5:a2:f2:32:2f:0e:
         71:8a:77:b4:02:94:34:d9:30:4e:bb:6e:1f:bd:fb:75:56:74:
         d0:56:36:7a:7d:42:b0:b0:e7:37:93:ae:b8:85:8f:df:26:e1:
         22:8c:8d:6d:09:19:08:37:5d:2b:cc:ec:08:6e:6c:35:e5:42:
         99:cf:15:d4:97:46:de:4c:3e:da:f1:39:d2:6f:a4:1b:78:e7:
         02:dd:ef:14:36:7f:a3:f6:5b:17:2d:cb:58:26:da:7b:da:cb:
         22:90:e0:53:d5:a1:fc:8a:aa:bf:ae:a3:da:20:a8:02:86:0f:
         f1:cc:f1:82:cb:9b:ac:cd:86:0a:e1:11:c2:b4:e6:36:a1:23:
         3c:51:32:2b:bb:69:2b:98:39:24:1f:76:37:84:59:7b:ad:0d:
         c0:0e:26:4a:3a:a4:9a:b1:b5:aa:26:90:d1:a4:9f:1d:49:17:
         bb:a1:24:ea:4e:c8:84:78:c6:ba:40:71:66:27:73:55:b3:19:
         53:ee:8a:dd:4c:3b:d1:3f:0e:92:37:2e:71:c0:67:ee:ad:4f:
         47:b8:6c:7e:0e:e3:b4:63:79:bb:f4:72:ff:1b:06:b7:58:14:
         81:52:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:59:09 2025 by rpki-client