Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File:                     Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier:          Q73pTbzLZtlOeDaZdYS2LpWdmF+6vFvdEGVVSbC9qKk=
Subject key identifier:   27:AC:F6:BD:32:E2:E4:5E:E9:F5:09:E7:AB:8B:14:00:05:A0:5A:ED
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       01993424E3B7C05BC80825BD9778E57549F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number:          1698
Signing time:             Wed 10 Sep 2025 15:00:56 +0000
Manifest this update:     Wed 10 Sep 2025 15:00:56 +0000
Manifest next update:     Thu 11 Sep 2025 15:00:56 +0000
Files and hashes:         1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=)
                          2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=)
                          3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=)
                          4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: l+XHqjbhFTH01hkt0z9FvSWg3+aIMVt3aq8UpXIRtzk=)
                          5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=)
                          6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=)
                          7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=)
                          8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=)
                          9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=)
                          10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:24:e3:b7:c0:5b:c8:08:25:bd:97:78:e5:75:49:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Sep 10 15:00:56 2025 GMT
            Not After : Sep 11 15:00:56 2025 GMT
        Subject: CN=27acf6bd32e2e45ee9f509e7ab8b140005a05aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:aa:e2:99:27:91:24:3a:89:9c:7f:58:ef:
                    be:8d:77:81:37:e3:ca:05:cc:8f:d5:c7:db:d6:2b:
                    da:fb:02:ec:16:5f:6f:66:a6:48:98:ad:d8:d7:7d:
                    ba:f5:be:6b:e6:e7:ed:50:71:df:35:59:28:c8:53:
                    b1:91:c9:0b:af:08:a4:87:eb:16:cc:bf:09:55:7a:
                    73:46:6e:09:c3:2a:6d:9c:f1:73:7c:7b:90:83:f2:
                    54:02:db:d9:7e:d9:51:19:32:5c:ed:c4:a3:d9:be:
                    70:2a:ee:84:f5:e4:91:81:61:71:e1:83:c9:85:f5:
                    e2:bc:45:bd:e3:c0:5f:68:59:64:73:01:0a:bb:52:
                    81:92:d8:ac:29:97:48:2f:8a:3e:4b:42:e9:7b:ef:
                    fa:67:03:cf:67:ef:79:38:bd:90:93:66:d5:7b:8f:
                    19:85:67:d6:56:5e:78:8f:20:bb:c4:1c:84:ff:22:
                    a1:7f:5d:75:dc:9e:4a:fc:2b:d8:6d:b5:f1:9b:12:
                    b4:3a:e7:cf:6d:3a:2d:70:60:6c:99:0c:56:bd:64:
                    61:06:40:bc:fa:84:e0:65:10:da:8f:68:53:eb:ec:
                    d0:d5:32:60:be:0c:a6:ba:9c:9c:c6:48:2a:65:56:
                    36:1a:b2:f0:3a:c4:4b:8f:d1:3d:f9:37:c8:86:90:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:F6:BD:32:E2:E4:5E:E9:F5:09:E7:AB:8B:14:00:05:A0:5A:ED
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:b3:51:8d:95:5a:4d:e3:09:5e:72:2a:2e:2c:f8:0e:f1:
         35:57:35:c4:3b:cb:4f:9e:65:09:91:6a:53:35:13:e7:89:b3:
         b8:c8:a0:cb:66:51:7b:a5:b1:0d:ed:6d:d3:81:d2:30:29:23:
         c3:cc:d3:a6:7b:b3:33:86:13:e8:fc:5e:f9:50:e9:61:ee:c4:
         f0:b7:0e:18:6e:fa:03:69:79:fa:d9:34:56:38:d5:13:0c:60:
         33:e7:1d:20:15:4a:10:50:0c:c5:ea:36:ec:0b:79:00:da:21:
         11:7c:24:1d:e3:c0:3f:32:7c:5d:fd:7b:b5:35:44:51:c6:de:
         ca:71:58:ac:ed:b0:e3:71:7d:58:29:5e:0b:44:f8:86:23:af:
         ff:76:80:6e:1b:5a:5c:70:c7:e6:0b:c1:b8:b5:44:10:72:e4:
         f2:df:17:9c:3d:b4:8c:71:ee:cb:2a:32:79:88:f2:38:43:a9:
         e9:e8:2c:4b:87:36:ec:b6:85:44:9a:b8:79:16:16:05:29:43:
         f4:c4:65:49:9a:2d:0a:8a:f9:d1:87:f3:0b:8c:60:60:22:43:
         4b:b0:00:41:71:25:db:b9:aa:30:76:5a:46:1a:45:fc:8b:d5:
         ed:f3:46:ea:5c:fc:d0:b6:70:a8:d1:d5:59:31:9a:29:e0:7b:
         bc:4a:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:18:00 2025 by rpki-client