Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          /pHd2aYtzm2UQmXNn9iCYIHQ86lmQzaGWJhgvUpwxcU=
Subject key identifier:   61:74:0C:46:0C:3D:FF:F5:B9:E4:10:6C:13:CC:C3:37:61:54:A8:B4
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       01994EF74285099FEA668A9B2CD2B2445CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          04C9
Signing time:             Mon 15 Sep 2025 20:00:51 +0000
Manifest this update:     Mon 15 Sep 2025 20:00:51 +0000
Manifest next update:     Tue 16 Sep 2025 20:00:51 +0000
Files and hashes:         1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
                          2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
                          3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: zJmMguywQTBBwjDnqmN6Xo57OPUIYlUsh5M4fRfwXDQ=)
                          4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
                          5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 17:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4e:f7:42:85:09:9f:ea:66:8a:9b:2c:d2:b2:44:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Sep 15 20:00:51 2025 GMT
            Not After : Sep 16 20:00:51 2025 GMT
        Subject: CN=61740c460c3dfff5b9e4106c13ccc3376154a8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:7f:60:e5:a0:c8:d7:26:e2:cd:1e:13:af:
                    b8:c2:f6:1c:a2:d8:60:48:13:c3:ef:ba:53:41:1b:
                    e7:2e:ca:5c:7f:42:3d:29:56:5e:47:a4:6b:57:ae:
                    1c:88:04:72:c2:7d:58:7f:52:cb:82:70:a2:2f:f9:
                    15:c4:f7:dc:c1:fa:21:30:a3:61:4e:41:b4:86:ce:
                    3e:45:c6:f9:22:b5:2c:a5:de:d8:06:8f:e8:32:80:
                    c3:be:ac:36:c7:a1:fc:17:a4:90:90:4d:82:bf:3e:
                    54:ef:53:5d:e6:8b:e6:f5:01:ad:b3:a2:fd:d2:7f:
                    20:69:ea:0c:45:a5:78:2a:9a:9c:3a:94:8a:20:20:
                    1c:32:b9:08:dc:47:8f:88:f5:81:50:9e:a9:46:4b:
                    97:d7:16:79:e7:0b:fc:d1:f6:67:b5:d1:4e:fc:93:
                    a8:3f:3a:53:c1:a5:9d:b9:9a:d4:38:48:ea:ec:8b:
                    76:b0:63:3f:ec:34:bf:19:a1:3f:4d:92:1d:f9:ad:
                    ba:c3:51:dd:f8:f6:d9:ad:b3:d3:98:02:58:e5:2b:
                    4d:a1:8f:ae:e0:06:28:2f:00:70:00:3e:aa:cd:a6:
                    7e:1e:62:08:66:35:f3:ef:fc:51:d5:b9:6c:e6:8a:
                    03:52:ec:ee:c5:5a:c0:b5:b3:25:2c:f2:31:ed:88:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:0C:46:0C:3D:FF:F5:B9:E4:10:6C:13:CC:C3:37:61:54:A8:B4
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:1e:a1:97:4b:ff:29:4f:6c:9a:e5:02:56:ec:1c:7c:05:
         6a:c1:f0:30:a8:2b:1b:86:e0:3a:81:13:2f:5d:af:20:6d:bf:
         19:93:f4:d2:a6:b2:bc:3c:84:fe:20:7d:b5:e0:cd:8f:bc:68:
         2a:28:6f:58:93:5b:60:39:a6:d5:08:e8:b9:80:42:b6:c7:1c:
         49:ef:76:bb:96:f7:4b:29:3b:88:02:aa:fe:0b:58:1e:87:11:
         b7:fb:63:d1:6b:49:49:a7:3d:60:7d:43:c4:d4:85:8a:a4:ad:
         71:e5:12:72:39:12:21:7c:96:ca:6f:4e:07:b6:58:54:b8:48:
         75:52:4f:5d:da:a4:05:14:8e:b6:0d:d9:e0:15:35:ad:ad:ca:
         8b:98:d6:57:a4:84:bb:df:cf:91:16:92:a3:a5:3b:b7:86:5f:
         3d:d5:4a:00:cb:d3:10:63:d5:f7:c9:5e:56:6f:f5:41:ab:12:
         56:0d:b2:b1:ac:8a:d7:8a:ec:f3:fd:6a:35:14:40:f1:12:d6:
         ff:20:4e:61:a0:03:60:8a:cd:e8:28:74:52:db:82:c1:ec:42:
         84:fc:4a:91:5b:b2:80:ff:45:b8:3a:cf:99:88:c2:fb:a1:43:
         10:4b:86:50:65:12:df:ca:ba:92:52:a0:73:7c:bc:0e:e5:65:
         61:3b:00:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlO90KFCZ/qZoqbLNKyRFzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0
ZDA2NjIwHhcNMjUwOTE1MjAwMDUxWhcNMjUwOTE2MjAwMDUxWjAzMTEwLwYDVQQD
Eyg2MTc0MGM0NjBjM2RmZmY1YjllNDEwNmMxM2NjYzMzNzYxNTRhOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQx/YOWgyNcm4s0eE6+4wvYcothg
SBPD77pTQRvnLspcf0I9KVZeR6RrV64ciARywn1Yf1LLgnCiL/kVxPfcwfohMKNh
TkG0hs4+Rcb5IrUspd7YBo/oMoDDvqw2x6H8F6SQkE2Cvz5U71Nd5ovm9QGts6L9
0n8gaeoMRaV4KpqcOpSKICAcMrkI3EePiPWBUJ6pRkuX1xZ55wv80fZntdFO/JOo
PzpTwaWduZrUOEjq7It2sGM/7DS/GaE/TZId+a26w1Hd+PbZrbPTmAJY5StNoY+u
4AYoLwBwAD6qzaZ+HmIIZjXz7/xR1bls5ooDUuzuxVrAtbMlLPIx7Yg1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF0DEYMPf/1ueQQbBPMwzdhVKi0MB8GA1UdIwQY
MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt
YTQ4YWMzMWRiYmYwLzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw
LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQokeoZdL
/ylPbJrlAlbsHHwFasHwMKgrG4bgOoETL12vIG2/GZP00qayvDyE/iB9teDNj7xo
KihvWJNbYDmm1QjouYBCtsccSe92u5b3Syk7iAKq/gtYHocRt/tj0WtJSac9YH1D
xNSFiqStceUScjkSIXyWym9OB7ZYVLhIdVJPXdqkBRSOtg3Z4BU1ra3Ki5jWV6SE
u9/PkRaSo6U7t4ZfPdVKAMvTEGPV98leVm/1QasSVg2ysayK14rs8/1qNRRA8RLW
/yBOYaADYIrN6Ch0UtuCwexChPxKkVuygP9FuDrPmYjC+6FDEEuGUGUS38q6klKg
c3y8DuVlYTsA6w==
-----END CERTIFICATE-----
Generated at Tue Sep 16 01:38:55 2025 by rpki-client