Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          faFFBwReRM0Fo+odf959VBcJaAENNcw9EtcRWn2ViCw=
Subject key identifier:   02:FE:6E:7A:D5:63:00:F2:FD:9B:D0:4C:55:C1:F6:2A:74:CD:49:DD
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019926A001EAB93D18FCB5118A6761203236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          168D
Signing time:             Mon 08 Sep 2025 00:00:44 +0000
Manifest this update:     Mon 08 Sep 2025 00:00:44 +0000
Manifest next update:     Tue 09 Sep 2025 00:00:44 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: 5cLYCattWzETvXsZjRvd09csIypvcPAty6tCZvFmrZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:a0:01:ea:b9:3d:18:fc:b5:11:8a:67:61:20:32:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Sep  8 00:00:44 2025 GMT
            Not After : Sep  9 00:00:44 2025 GMT
        Subject: CN=02fe6e7ad56300f2fd9bd04c55c1f62a74cd49dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:b0:9c:8b:04:25:39:33:72:e6:a1:5f:04:
                    ef:60:ec:69:8c:1a:32:7a:f1:7a:eb:f0:c2:a0:d8:
                    31:b7:e9:32:86:f1:50:3f:2f:57:58:15:f3:70:84:
                    28:0d:01:c2:d6:52:0f:72:04:0b:38:73:fd:1b:10:
                    f5:27:e8:52:46:c7:a9:56:85:e2:ad:b4:ed:e1:73:
                    68:64:52:9f:a9:93:95:25:0c:8b:32:ce:16:f6:1f:
                    c2:db:46:1e:cb:c6:62:06:1d:05:92:b9:5e:8f:da:
                    4a:d5:6e:c1:ef:06:7d:56:ef:86:d4:06:31:96:82:
                    73:12:42:13:46:a2:a3:0b:a5:18:fb:ce:33:e1:e0:
                    36:93:26:bd:50:a2:79:94:dc:1b:46:b9:90:2f:f6:
                    3c:75:57:f6:a0:36:7f:60:87:32:79:23:bc:af:cf:
                    f9:4f:d8:91:7b:b1:45:17:18:ec:da:d5:46:3d:8d:
                    04:40:49:21:02:59:73:03:4f:8b:49:d4:b9:c6:ab:
                    04:7f:1f:bb:2e:fd:9c:ef:9f:58:b3:47:a6:81:6e:
                    1a:b9:ba:ed:e3:34:cc:2d:70:13:1e:97:d7:f3:79:
                    f2:1b:4c:2d:f7:8c:ff:18:83:ef:bb:20:4a:8c:f1:
                    13:48:f4:60:48:23:9d:f7:08:cd:c1:41:95:71:3d:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:6E:7A:D5:63:00:F2:FD:9B:D0:4C:55:C1:F6:2A:74:CD:49:DD
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:46:aa:30:e1:69:17:98:7b:19:e1:27:ae:c7:af:5c:b9:
         6c:a7:0b:23:65:9b:da:c6:e1:24:49:72:42:c4:54:09:c6:3d:
         1d:9c:82:51:a3:7c:f4:2a:5e:58:b6:c9:12:e8:f3:bd:4e:9e:
         c3:80:8b:e7:ba:cb:5c:e4:c4:87:1f:3f:20:e9:ec:1e:94:9b:
         d8:27:fd:61:9e:bb:0e:63:5f:94:07:f4:1d:88:34:33:c5:e2:
         9a:ab:f5:be:aa:93:8f:2a:b8:c1:cd:5d:27:74:7b:62:c2:41:
         26:fa:bb:b1:82:33:0f:49:47:d7:2e:c7:a0:ea:a5:68:09:8b:
         f9:1b:c3:81:ef:e5:ea:b8:0b:0d:d4:d0:e8:cc:0f:6d:4b:62:
         a6:b4:d6:a8:4d:5f:52:bb:69:63:f9:a1:5f:0e:88:04:e5:a1:
         90:1c:5e:32:1c:db:19:16:84:05:21:8a:50:2f:54:3f:b7:82:
         bc:bc:6b:2a:7e:5a:c8:a1:5b:4d:47:1e:7b:14:f3:3d:1a:d5:
         94:b5:f0:ac:8b:5c:67:5a:f4:3f:06:b3:49:b8:68:64:1a:56:
         3e:6d:f9:ad:e7:64:2d:ec:5c:75:e4:2e:e8:30:56:ac:f2:17:
         30:df:64:77:22:8b:10:c9:26:3e:c8:97:aa:08:2e:61:77:13:
         5a:b8:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:29:24 2025 by rpki-client