Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File:                     iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier:          w09POEXbVby8PNOsdrSBsg/Y5GkZcjYpiwQmUWDtO4k=
Subject key identifier:   2D:FE:F4:74:28:31:35:27:12:80:F3:2F:20:18:3B:7F:A7:9C:95:45
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer:       /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial:       01984663FE1E1D1B4AC9C1C4FC38C4106F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number:          06EC
Signing time:             Sat 26 Jul 2025 11:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:14 +0000
Files and hashes:         1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
                          2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: np4vEFpBGzVeGdgSPWU5w7UiTMjAG2Kcni3jOyIIDuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:63:fe:1e:1d:1b:4a:c9:c1:c4:fc:38:c4:10:6f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
        Validity
            Not Before: Jul 26 11:00:14 2025 GMT
            Not After : Jul 27 11:00:14 2025 GMT
        Subject: CN=2dfef474283135271280f32f20183b7fa79c9545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:70:97:57:45:c3:b7:02:5b:c9:68:c0:47:
                    74:95:11:2f:d3:dd:30:b4:23:c4:78:8b:91:74:7c:
                    42:fd:3d:a3:e0:f1:f4:cd:d6:e7:76:d7:b1:2f:18:
                    43:f4:fb:99:09:27:20:52:b0:93:ff:22:af:e5:5a:
                    6e:2f:e7:52:60:dc:84:ae:57:5f:ea:40:dc:b1:84:
                    85:8d:e4:5f:ce:15:c0:5e:1d:be:52:c0:1c:4d:fc:
                    f4:86:e8:ae:0b:22:e5:88:03:cb:dd:47:a4:92:74:
                    60:b5:a9:14:44:27:d3:25:e8:bb:b0:4e:b0:a0:f3:
                    9e:5f:7d:ca:a5:ac:9b:db:84:d2:1c:df:1f:a0:4a:
                    b2:90:8e:9e:5b:4c:7b:ce:60:6a:be:d3:10:d8:e0:
                    fa:fa:a0:a8:c9:39:db:ea:84:b4:0d:48:da:ee:63:
                    d4:be:e5:c2:58:dc:e3:60:d4:12:e9:07:6d:9c:5a:
                    64:93:b0:99:55:46:14:c3:b3:c3:9f:0f:02:91:2a:
                    d2:90:8e:74:26:ad:24:6b:4a:72:a0:01:6f:c6:3d:
                    66:1b:65:d8:93:35:27:7c:3d:84:17:e3:ac:9d:e2:
                    b0:2b:cf:55:25:e7:1e:9f:66:58:c1:03:ea:ef:89:
                    62:dd:87:3f:5c:ac:72:7a:c5:97:dd:f4:3a:17:60:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FE:F4:74:28:31:35:27:12:80:F3:2F:20:18:3B:7F:A7:9C:95:45
            X509v3 Authority Key Identifier:
                keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:e5:7e:25:c6:43:6f:54:68:24:22:de:3d:11:88:65:17:
         97:ba:97:c5:2b:9c:88:d0:85:4a:62:9e:ef:ad:68:cc:02:76:
         e5:17:6f:c1:1f:bf:30:e3:2f:d1:2d:f2:6f:64:4d:04:c5:99:
         17:70:59:eb:23:07:a9:92:f8:ab:16:d9:7c:91:79:aa:89:fe:
         a6:4c:34:2f:da:58:1b:9e:85:4a:eb:b8:c9:2c:fd:fd:61:f4:
         ba:d1:c7:88:5c:7a:89:b5:5b:96:55:4b:6b:33:7f:e7:e2:b3:
         7e:8f:32:78:1c:5a:ba:b8:52:12:df:0e:69:f7:0c:63:0d:33:
         11:ac:e7:c7:9b:2d:6c:ef:db:8f:1c:a2:c7:76:51:e4:dd:1e:
         95:80:3a:c0:e1:55:40:30:ea:e2:fb:89:0e:3b:7e:00:bc:74:
         21:83:44:66:94:33:9a:c7:26:27:c7:09:16:f3:92:33:37:54:
         7c:01:3a:af:8b:58:67:eb:8c:e1:5a:8a:4a:9d:fb:a6:22:1a:
         f6:c7:dd:61:e3:10:57:9c:61:a5:dc:fc:22:4a:1e:b2:bc:e9:
         ef:4c:f2:11:ca:f9:1a:bb:4c:d3:0b:89:df:5a:64:6d:bd:17:
         d1:66:45:f0:4d:33:df:32:f2:39:e7:2c:92:88:aa:c7:a3:99:
         28:68:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:33:51 2025 by rpki-client