Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          em6ITkGron0RT2dCRliF442E20ITztflD+WgL48QeDg=
Subject key identifier:   3E:4D:F0:CB:E3:4F:B7:98:78:C5:F8:22:9C:2C:ED:C6:1B:DA:D8:5C
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       019927B30791A2672DCAF9C651166B6818BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          1680
Signing time:             Mon 08 Sep 2025 05:01:07 +0000
Manifest this update:     Mon 08 Sep 2025 05:01:07 +0000
Manifest next update:     Tue 09 Sep 2025 05:01:07 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: /s0RJ25/NMk5V6gvuy/se3l6y1uKFtyPrwHcIAGhzuE=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:b3:07:91:a2:67:2d:ca:f9:c6:51:16:6b:68:18:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Sep  8 05:01:07 2025 GMT
            Not After : Sep  9 05:01:07 2025 GMT
        Subject: CN=3e4df0cbe34fb79878c5f8229c2cedc61bdad85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:db:85:ee:5c:d5:8e:76:1c:7e:08:e3:86:
                    0c:18:a8:05:58:39:9d:99:90:6b:0a:9e:55:ff:78:
                    63:e7:ae:94:b2:f1:93:97:88:8c:3c:60:37:3f:2e:
                    11:fd:1a:45:c8:b6:8f:f0:b9:0a:21:fa:40:9b:74:
                    d8:93:76:6b:77:4a:9a:db:86:62:78:a6:c2:03:04:
                    33:4c:ea:3e:8c:e4:ca:de:be:09:40:4b:b9:73:ea:
                    a7:89:47:51:43:3a:f8:8a:ef:38:6b:d4:f3:da:a4:
                    9f:fe:7e:dc:fc:9e:b1:cf:bc:5b:81:68:04:98:97:
                    23:a7:1c:16:23:83:02:ab:37:27:27:5f:1b:09:7b:
                    ca:5c:fc:22:cc:28:25:22:c0:15:ca:0e:32:ee:19:
                    0a:df:86:96:25:c3:d1:55:51:3c:53:57:f9:06:22:
                    a7:eb:49:2a:c5:ee:6a:c9:88:b6:cb:b8:56:6c:01:
                    15:b9:30:cc:57:6e:8b:be:53:18:0c:7f:23:c8:5f:
                    26:23:86:5c:c8:49:01:81:4a:f3:41:c4:2f:97:e9:
                    58:dd:2d:10:d4:c8:0d:50:32:0b:c6:5e:89:e8:8e:
                    fc:5f:a7:28:a8:aa:cb:57:39:63:6e:e1:bb:3e:dc:
                    ad:b1:18:eb:c9:1f:30:30:69:e0:63:14:c7:b0:81:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:F0:CB:E3:4F:B7:98:78:C5:F8:22:9C:2C:ED:C6:1B:DA:D8:5C
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:7e:a8:88:8b:56:7f:63:2a:1f:6f:ea:88:9c:68:60:ff:
         d8:b5:ee:b0:52:b9:fa:63:31:fc:25:24:bf:0b:e0:16:51:ab:
         e3:08:28:26:9a:17:87:6e:b4:aa:d0:9b:80:9e:b9:6e:a8:a5:
         5e:2d:63:ab:dc:46:c6:86:85:59:f2:3a:d7:5d:b3:9b:db:a2:
         9c:76:fb:c6:95:93:3f:d9:04:a5:dc:fe:09:d6:b6:6f:dd:f2:
         e2:93:11:c0:e0:a8:44:2f:99:98:ef:c0:9d:a5:85:7d:5c:a5:
         eb:c2:c3:bb:05:9d:1a:71:5a:1d:74:b7:c2:79:6c:cf:6d:82:
         5f:03:21:18:81:3f:0d:14:40:c7:8a:32:43:92:11:a6:40:84:
         b5:ab:7d:9e:fb:92:40:06:ec:18:99:2f:8c:f3:16:b6:6e:a2:
         2b:95:ba:d7:90:65:02:1f:be:35:5b:39:a6:61:e0:a0:4f:b4:
         ac:46:74:4c:d2:6f:8c:89:18:c1:64:98:0d:1a:da:35:83:91:
         bc:23:fa:05:7c:54:bd:c8:70:a3:02:a7:c4:c2:11:aa:ba:2e:
         ae:e3:d5:80:bb:4c:87:46:8c:ae:60:ed:0e:b9:6d:c8:63:cd:
         0c:c8:e7:99:de:b6:17:a6:b8:a1:dd:3d:33:8a:26:45:3e:50:
         da:90:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:18:20 2025 by rpki-client