Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File:                     tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier:          jEi8T1ngJBam1lNAnmEePNZtFjY2IxN0+i0MwSUYLxg=
Subject key identifier:   2C:35:8D:F1:B4:B4:11:8D:DE:CB:03:0F:23:9F:73:5E:F3:B1:9A:AA
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer:       /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial:       019752A2698F2CE9D8402EEB1A6B6598E835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number:          026A
Signing time:             Mon 09 Jun 2025 03:01:04 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:04 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:04 +0000
Files and hashes:         1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
                          2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: 3WR+lGXzBkvcvK306bA6fgXL2xPjItCX/9PNKQ2KDMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:69:8f:2c:e9:d8:40:2e:eb:1a:6b:65:98:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
        Validity
            Not Before: Jun  9 03:01:04 2025 GMT
            Not After : Jun 10 03:01:04 2025 GMT
        Subject: CN=2c358df1b4b4118ddecb030f239f735ef3b19aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:4e:ce:65:11:5e:77:b5:38:75:1e:2c:5f:
                    2c:79:a7:86:2c:cd:68:77:cd:52:d4:b4:8f:05:ff:
                    0e:f9:89:1f:85:d4:a7:bf:8e:bb:b4:00:77:ed:82:
                    a7:de:24:46:53:d6:19:95:54:82:b2:75:19:8f:34:
                    d5:23:9f:4b:0f:da:12:da:1c:0f:ff:43:de:c6:ef:
                    d7:2f:f3:8e:c4:f5:0f:52:f0:b3:a9:3e:3e:2e:61:
                    89:16:f1:39:0d:6a:10:02:af:e1:4d:fa:08:54:b1:
                    32:ab:c2:83:56:0b:f9:12:3c:37:5e:91:ad:4c:68:
                    16:42:ab:bd:c4:82:34:1e:74:6c:4c:9e:69:33:0b:
                    42:0e:9a:50:bc:f9:1b:95:77:36:94:73:4c:8a:00:
                    0c:ae:7f:1d:54:4b:33:ed:b0:31:04:eb:14:ee:1b:
                    2c:53:5e:ae:e0:00:b9:12:77:ef:9a:54:68:d2:63:
                    92:25:91:8f:de:0e:2f:1c:1b:ee:91:b1:57:63:4c:
                    74:d0:7e:e8:d2:45:71:3a:04:13:a0:9c:e7:b4:18:
                    59:0a:d8:1d:ec:d4:65:3f:78:af:72:d8:73:f8:9e:
                    ca:19:6a:45:13:ca:fc:05:f1:f7:aa:5c:82:1b:ef:
                    20:03:b1:f7:e5:77:d2:8e:0e:5d:92:d2:db:1c:c1:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:8D:F1:B4:B4:11:8D:DE:CB:03:0F:23:9F:73:5E:F3:B1:9A:AA
            X509v3 Authority Key Identifier:
                keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:ae:00:0d:47:12:5e:8b:49:54:f4:97:e6:67:67:d8:f8:
         ae:1b:73:1c:4f:c1:f7:08:e7:5a:bc:ee:0e:b4:9c:f4:76:4c:
         00:34:62:7e:f5:4c:85:d1:96:94:73:3d:69:62:a1:33:0e:95:
         81:0e:06:92:34:1c:4a:ac:83:fd:6c:46:60:f6:81:25:17:8b:
         01:b6:1d:e8:ca:91:9f:19:f9:c2:d8:15:d3:e1:c7:bd:6c:dd:
         33:db:c1:85:a0:a9:c9:5d:d8:ae:85:03:e8:5b:fb:15:b4:ab:
         85:da:f2:df:5b:0e:c5:03:a3:f5:86:d9:18:5d:98:0d:a7:21:
         91:0c:48:9e:9d:dc:d3:cd:8e:a7:83:ad:43:bd:6a:96:0f:00:
         82:e5:8e:1e:25:e6:df:42:ca:4f:b3:01:30:79:43:4f:69:39:
         45:4c:ea:58:cd:74:6f:51:7d:3f:41:85:ec:a4:de:ab:8d:0b:
         c1:25:d4:6a:4d:9d:4a:ce:b3:6f:a0:0c:f2:97:c6:5c:7b:4e:
         fc:28:f8:c0:f3:ab:e4:1c:74:94:38:cb:03:75:80:f6:d9:3c:
         35:53:ee:af:c5:35:64:a8:8d:07:86:0b:f3:db:f2:bf:0b:e7:
         53:6a:bd:d3:0c:8a:7f:64:e0:69:4a:e9:f4:36:9a:b2:b1:ee:
         6f:11:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:28 2025 by rpki-client