Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          BQzRh8+M1ME17/iHMBsLzH1uMDSSO2Wykk5LJQMzYXY=
Subject key identifier:   B0:79:A1:96:79:6A:6E:67:15:BB:AA:0A:86:8C:E2:DE:F5:9F:12:02
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       01996058AD466AB9237CDBA5757C7202B980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1693
Signing time:             Fri 19 Sep 2025 05:00:48 +0000
Manifest this update:     Fri 19 Sep 2025 05:00:48 +0000
Manifest next update:     Sat 20 Sep 2025 05:00:48 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: JLIEY9a+pPjfCHuYpzfYtFl1hantJQFFKDspGPwMgM8=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:60:58:ad:46:6a:b9:23:7c:db:a5:75:7c:72:02:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Sep 19 05:00:48 2025 GMT
            Not After : Sep 20 05:00:48 2025 GMT
        Subject: CN=b079a196796a6e6715bbaa0a868ce2def59f1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:82:4b:53:1f:66:58:6e:ff:28:a2:43:f5:
                    8e:a6:c4:f2:5b:98:50:31:a4:62:a6:31:8f:54:0d:
                    37:ed:87:98:16:e6:b6:ae:5d:89:3c:65:2a:09:b9:
                    5b:b1:66:ee:e5:07:af:6c:62:7a:46:49:4a:b9:b1:
                    12:fc:fa:96:b5:0b:cf:00:bb:0a:68:da:25:3b:d7:
                    3c:22:b3:f2:83:f6:a3:cc:8a:37:14:b5:72:9e:4f:
                    3f:4e:60:4e:bf:37:9f:0e:44:47:42:cc:2a:c0:d1:
                    f0:ff:0a:a6:64:20:d5:cd:e1:3e:54:29:78:e0:63:
                    37:a0:98:2f:d7:51:d0:f7:90:9a:f8:a8:f2:84:de:
                    30:ab:de:16:e7:04:0f:c1:52:05:be:21:15:ba:28:
                    77:54:a9:39:58:d9:e5:eb:65:e5:60:28:f5:3c:4d:
                    a7:dd:8f:bb:08:39:e0:d9:44:d7:d3:b9:3b:46:60:
                    06:84:da:35:e5:cc:c9:22:4f:06:e1:0b:1c:0f:e9:
                    89:b2:62:69:5a:af:6c:10:b5:62:c0:a5:7a:7c:95:
                    85:d1:3d:6f:0d:79:3e:14:9c:e8:06:73:82:aa:be:
                    ba:90:e9:d5:3f:72:ce:e5:6a:97:86:17:49:9e:80:
                    de:4f:f4:7e:51:83:65:64:67:2d:63:8d:a5:74:91:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:A1:96:79:6A:6E:67:15:BB:AA:0A:86:8C:E2:DE:F5:9F:12:02
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:44:43:ce:69:92:ee:29:2e:44:bc:6a:03:f0:9a:ad:33:
         b6:e2:80:22:d1:4f:67:be:a9:f6:e9:da:f0:3b:8e:4a:f3:9d:
         28:3e:85:76:c6:ff:5d:ad:e3:54:b0:15:33:53:53:e4:26:be:
         ea:58:11:a2:c8:4a:a7:6a:59:0b:c7:1c:cd:2c:5d:1f:a2:11:
         3c:f6:40:1b:01:f7:c4:98:99:b7:4f:87:cd:51:39:fc:d2:c6:
         ed:9d:d4:5a:b6:ba:0b:ec:ed:07:21:36:61:75:db:b1:0e:5b:
         96:fe:3a:a0:7c:c7:02:ac:1d:8b:ac:d4:8f:98:33:d4:be:2c:
         ff:c7:d0:60:8a:6a:d7:6d:38:55:72:66:b9:5e:b7:27:98:4f:
         de:6e:1f:f1:77:6a:85:c2:26:96:15:02:32:70:9f:ef:fc:a9:
         ab:d2:59:b5:b6:fa:47:e3:e4:05:31:6f:30:0f:21:36:a1:57:
         5c:db:50:9c:4a:fe:f0:c9:ea:2e:91:c8:ca:66:db:fb:da:1d:
         12:3a:6e:a6:e0:01:98:61:0a:85:9a:29:ab:5e:c0:d4:0c:f1:
         44:8c:48:a5:4b:7e:60:0a:a5:ad:18:25:64:db:95:b8:a3:56:
         30:ff:b2:77:22:fd:6b:a0:ce:bb:55:ac:ee:c4:92:8e:b4:34:
         7e:0b:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:21:25 2025 by rpki-client