Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File:                     ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier:          afZWdX1kizSB4LJxO4FxVNpwMOk2iAAOFqiBIXFMjPY=
Subject key identifier:   69:52:DF:24:22:7F:C8:CC:23:3C:23:38:89:47:0D:1D:3B:26:5F:9C
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer:       /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial:       019D39AE77775DAC9C0173C41A32BA03EE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number:          12B2
Signing time:             Sun 29 Mar 2026 13:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:28 +0000
Files and hashes:         1: 0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa (hash: 6QAThh9Df6kXu7nNhqJfERiUtZ4umexbpptr0sQdbu8=)
                          2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: HN9lLnUu6lZbt27z3OsiJmxmhvzcGPFgD20SHPhhMY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:77:77:5d:ac:9c:01:73:c4:1a:32:ba:03:ee:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
        Validity
            Not Before: Mar 29 13:00:28 2026 GMT
            Not After : Mar 30 13:00:28 2026 GMT
        Subject: CN=6952df24227fc8cc233c233889470d1d3b265f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:25:16:aa:a6:d3:2e:60:07:b2:d0:1d:78:
                    00:65:33:bc:d2:27:dd:d8:ea:60:38:38:cb:ed:cb:
                    a2:f4:5f:0b:2d:21:f3:29:70:4a:53:8d:d3:66:e1:
                    97:79:39:d6:51:07:0e:ea:ec:3b:f3:5a:89:72:e9:
                    00:f3:a8:af:70:95:7c:67:a3:ab:c8:50:bf:7b:09:
                    3a:c0:9a:1d:ad:fd:d0:5b:f3:58:65:db:53:62:46:
                    f0:a5:b5:2c:71:71:fd:28:05:f7:7b:96:82:85:2c:
                    85:62:0a:cc:de:d9:d3:ca:60:a2:42:56:8a:eb:9f:
                    cd:e1:5f:0a:49:82:73:75:b7:0f:1e:6f:85:e6:f8:
                    5e:70:e8:5a:f4:a2:f6:1c:25:2b:02:18:63:18:63:
                    34:a6:6a:36:c4:ba:59:62:01:2e:87:4b:90:f7:43:
                    2c:03:77:2a:72:00:bd:34:b1:4d:73:24:21:e4:d9:
                    3e:9b:dc:80:0f:6f:2f:f4:3d:81:86:46:60:6e:18:
                    84:52:06:07:28:2b:80:71:51:d1:6a:a1:bb:da:1d:
                    bc:81:da:c7:b0:8c:6d:bd:43:14:31:6e:05:e5:83:
                    2e:e3:c4:f3:d3:ba:0d:e5:90:8d:60:52:37:32:f6:
                    71:89:6c:85:5e:7c:c1:e1:07:d1:7f:b2:6a:ec:1b:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:DF:24:22:7F:C8:CC:23:3C:23:38:89:47:0D:1D:3B:26:5F:9C
            X509v3 Authority Key Identifier:
                keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:ed:70:24:9a:7e:4d:5d:d3:05:51:d4:be:eb:31:a9:f2:
         97:7f:81:24:71:68:93:5e:14:d0:fe:c9:b1:62:a6:9b:b3:ef:
         e8:6a:0b:7a:ff:c4:b5:01:a1:e3:00:df:b7:3b:13:3d:43:0a:
         ce:5b:19:02:7b:d8:77:ab:a8:2e:f4:20:38:10:eb:9e:ce:b8:
         00:54:bc:c9:61:71:b6:9e:75:ac:97:08:c9:ef:14:86:38:b2:
         43:b3:c9:3d:96:68:eb:6e:f0:6c:23:22:b5:89:61:c6:1f:9b:
         7d:80:c4:c0:58:3a:4b:8e:2a:21:4f:3d:2e:0a:1a:fb:ef:a8:
         60:a2:7a:fe:dd:d5:98:4b:36:54:d3:2a:cc:87:d0:e9:0d:26:
         93:88:9b:d0:02:60:2a:33:f9:19:a3:e7:6c:e4:83:c2:71:e2:
         1b:e3:12:43:8c:e5:6b:5c:b8:0f:6f:0f:e5:64:83:71:b1:ba:
         6b:33:25:ac:17:56:22:62:6c:bd:eb:08:ba:d0:43:00:30:50:
         d4:90:9d:f5:c5:f9:c9:3c:8e:d8:12:b1:05:96:7c:a7:06:6a:
         f3:0b:19:77:ef:97:51:68:57:0e:34:d6:06:91:fd:d5:3a:a7:
         27:ce:b3:92:f4:13:99:2c:2b:f6:fb:a2:2d:71:3d:96:d3:3c:
         24:92:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:59 2026 by rpki-client