Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File:                     TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier:          UBFLCYJGbUkH7SfY8fmDcfXzs8sidFfZXuWBSrLrm2U=
Subject key identifier:   B6:F4:8D:D3:A8:88:54:A8:18:31:CA:DB:3F:61:0E:2D:75:55:7A:86
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer:       /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial:       019916F698FC3E17445758538372A1591B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number:          1681
Signing time:             Thu 04 Sep 2025 23:01:23 +0000
Manifest this update:     Thu 04 Sep 2025 23:01:23 +0000
Manifest next update:     Fri 05 Sep 2025 23:01:23 +0000
Files and hashes:         1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
                          2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
                          3: K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa (hash: MPnb9N7UkomJ9P+V+pIw5n5BQ/plMrrPkuECb2IegXo=)
                          4: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: d9hsxF8eoaZ4kxOkv9lP7L9Bj23BCaK7hokUr0zKCFQ=)
                          5: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
                          6: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
                          7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:98:fc:3e:17:44:57:58:53:83:72:a1:59:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
        Validity
            Not Before: Sep  4 23:01:23 2025 GMT
            Not After : Sep  5 23:01:23 2025 GMT
        Subject: CN=b6f48dd3a88854a81831cadb3f610e2d75557a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:8d:c0:d3:dd:b9:2f:e8:00:f9:9c:e8:95:
                    3b:c3:fd:b0:09:a5:b7:cf:81:59:31:6b:d0:2e:28:
                    a5:39:15:03:d8:55:67:de:19:f2:ff:ce:43:6b:ef:
                    bb:c7:7b:aa:56:15:1e:6d:0d:ad:f6:f0:46:38:b1:
                    46:50:8d:7a:dc:ef:a2:15:23:74:0a:a6:09:65:18:
                    57:10:85:e1:4a:61:45:83:da:cb:5f:a6:02:67:be:
                    13:db:2c:59:2d:b1:1d:dd:fa:d2:5d:3b:7c:cf:7b:
                    dd:47:9c:4f:3d:6f:96:9a:e5:d9:1d:b6:f6:a8:d8:
                    30:b9:b8:9f:95:de:55:83:28:9a:bc:77:13:94:2c:
                    c3:a8:18:80:c0:2f:49:0d:e6:8a:91:a7:f7:e1:8d:
                    4a:8c:70:57:be:63:96:6a:60:05:76:b1:26:56:16:
                    86:27:a1:be:5c:2f:7e:8b:0f:c7:89:2d:47:05:82:
                    ef:52:5d:8c:ad:11:a3:c4:9f:59:b2:cf:2b:5f:5f:
                    33:ff:59:c5:85:64:20:41:90:97:2e:fa:b0:4f:29:
                    2e:6b:57:7f:d0:e2:4a:21:34:e1:17:fb:34:27:79:
                    72:f5:5d:5c:ea:bb:72:a8:cc:f2:c8:49:f9:3e:e4:
                    02:ec:8c:b7:db:eb:8b:e9:5a:e2:9e:a7:0a:ee:e1:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:8D:D3:A8:88:54:A8:18:31:CA:DB:3F:61:0E:2D:75:55:7A:86
            X509v3 Authority Key Identifier:
                keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:9a:26:fb:c6:71:7c:3f:89:b5:81:e5:53:c3:04:f4:53:
         1a:68:4e:2b:20:f0:64:ba:65:19:28:01:c2:3b:23:7c:af:f1:
         3b:6c:e1:a9:bb:df:ce:d9:75:de:eb:6a:ea:e4:20:9a:7e:49:
         7a:68:05:97:3d:1a:c1:c4:6e:19:50:16:61:0a:1f:81:7a:67:
         cf:95:0f:76:9a:41:06:39:ad:cb:ff:5f:93:dd:ba:41:f7:49:
         a4:55:c0:2a:e8:62:86:2a:e9:af:50:89:4d:80:ca:7a:1e:54:
         61:19:4a:96:ca:a7:ac:c7:90:64:2f:9b:9d:ce:28:6f:4e:12:
         ca:30:e1:07:a7:51:7a:62:cc:46:9a:97:10:cb:1c:2b:b0:d4:
         86:99:4c:ee:50:f1:ce:1c:96:70:ce:14:19:26:ce:8c:3b:69:
         87:ff:da:99:48:3e:09:39:c0:ab:0f:00:34:ca:e0:b4:5e:36:
         81:40:bf:9b:8a:cf:79:c1:7b:d2:f7:cc:45:3c:7f:36:ad:43:
         64:52:8b:90:63:d5:98:a6:3b:1d:aa:79:c9:74:95:63:22:f3:
         2b:30:6e:da:d4:05:cb:3a:5c:e3:91:72:7f:9f:21:4c:0c:fb:
         8c:b5:58:55:e9:ea:24:7e:b4:f6:67:2c:04:d2:0a:87:aa:1b:
         24:b8:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:28:00 2025 by rpki-client