Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          y7ZVhNEP2Pwm/0XqqCWxAOV21hIhEOEBWHmVdqMDr2I=
Subject key identifier:   F2:F4:E0:9D:4F:EC:79:5A:09:A7:30:37:57:E0:CD:A1:1C:EB:B5:71
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01993501FCC4E587CD58F0362596A4B30FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          1680
Signing time:             Wed 10 Sep 2025 19:02:26 +0000
Manifest this update:     Wed 10 Sep 2025 19:02:26 +0000
Manifest next update:     Thu 11 Sep 2025 19:02:26 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: evdjbTN13hvWS5BGQ+jyvEMb8Zz0Mcrh+n/klkppP3M=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:fc:c4:e5:87:cd:58:f0:36:25:96:a4:b3:0f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Sep 10 19:02:26 2025 GMT
            Not After : Sep 11 19:02:26 2025 GMT
        Subject: CN=f2f4e09d4fec795a09a7303757e0cda11cebb571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b7:c1:d5:f5:9d:f9:56:6e:8b:26:42:cd:45:
                    7d:08:27:1b:23:42:4c:77:db:ac:8b:41:c6:1c:46:
                    b6:eb:14:63:78:0d:6e:62:21:50:f8:57:8d:1e:37:
                    9d:d1:ed:04:56:29:a6:b7:d6:31:0f:30:9b:dc:ca:
                    27:b6:9f:b9:51:3a:6a:70:ae:47:71:7d:d4:49:de:
                    71:92:69:40:82:d4:06:12:1f:80:39:f2:52:7f:92:
                    6c:48:81:dd:d2:b2:90:26:21:1d:b6:e9:4b:77:f7:
                    26:f9:7f:7f:7f:d9:8b:b4:ac:8d:66:30:72:c1:09:
                    61:fb:ca:e7:a0:ef:2d:a4:2a:46:93:1a:66:a4:53:
                    41:c6:6b:8b:58:f2:31:11:28:d6:9d:54:58:25:ed:
                    e7:c9:c4:a8:3d:0e:7a:81:2b:88:30:f4:e3:0b:ad:
                    fa:2a:45:46:cc:58:bb:fe:ed:f8:27:17:e2:2d:cc:
                    47:c2:94:20:70:ec:98:bd:82:f9:86:e8:ca:65:bf:
                    3f:92:3c:9d:2e:61:e6:f3:29:e7:18:a5:d5:85:f9:
                    e7:a7:7c:90:dd:9d:fa:5d:42:b3:cf:59:10:4a:a9:
                    ce:0e:41:4d:07:81:68:67:ee:8f:f2:39:65:d4:77:
                    2d:8a:72:c4:b2:5a:9e:6e:80:d3:52:04:9f:25:3f:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F4:E0:9D:4F:EC:79:5A:09:A7:30:37:57:E0:CD:A1:1C:EB:B5:71
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:50:e7:03:59:6f:db:a8:ec:77:75:25:08:d7:39:e3:e6:29:
         5e:7d:c1:e8:0d:a2:2f:01:19:39:33:a9:a2:1d:85:b3:45:cd:
         0f:7e:26:d8:d8:61:cc:07:96:94:32:19:4d:b2:ae:38:85:26:
         79:52:32:af:15:54:57:3c:ea:27:ea:4e:7d:01:db:ec:55:15:
         70:b5:cc:fc:0a:9c:df:0d:4c:55:49:45:c3:ae:5a:63:72:6d:
         e9:35:d4:03:9f:14:c4:f9:72:69:74:35:23:f4:12:20:12:db:
         39:e2:ff:09:b6:73:8a:89:e6:03:78:24:7a:ec:e7:a3:e1:f7:
         5a:36:90:32:ec:a8:a1:51:5e:54:a8:2a:6c:cd:44:6a:b1:02:
         65:a7:2d:65:5d:21:dc:2a:62:d7:02:e2:b9:21:42:cf:0e:a3:
         c0:cd:c8:58:37:11:0a:f5:35:12:50:f5:6e:e1:01:80:01:7d:
         af:07:5d:0b:47:fc:41:cf:85:27:1c:e8:0a:03:78:13:87:f1:
         c2:28:3d:77:9d:cb:d3:16:2f:2d:9f:39:b5:0a:64:9e:68:c4:
         d1:f3:ad:ef:e7:a1:1a:47:0a:cc:56:29:99:97:38:f2:cc:73:
         ef:24:a0:c1:e3:76:51:2a:3b:8f:ed:f3:d5:c0:a2:ef:03:41:
         35:6a:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:21:48 2025 by rpki-client