Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
File:                     4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json)
Hash identifier:          V1ZUJtsyTL/2RCtcrgJWCLOFPUoOOpwKJHbfgwlkSIE=
Subject key identifier:   97:37:60:25:03:1B:B9:7F:EA:59:28:AF:C8:B5:B2:B4:14:9A:7C:68
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Certificate issuer:       /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial:       01995CEA0AA8B2310BB6FBB93E8E4D667A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
Manifest number:          27
Signing time:             Thu 18 Sep 2025 13:01:05 +0000
Manifest this update:     Thu 18 Sep 2025 13:01:05 +0000
Manifest next update:     Fri 19 Sep 2025 13:01:05 +0000
Files and hashes:         1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: f1926CE9QqPD6j8PZ9O0kvcAh0ZvzUIhlOMYE0w6bag=)
                          2: 73mAifFbbkq89y_6L8I3tNV-FFU.roa (hash: NX+SZCE/iRZZ/qn+fphnC6ahtdeAZSBcTHMFH46HmuE=)
                          3: x-ZoxCE3dUHDoEInx3KHfEs04No.roa (hash: PP3ssbmv8MfAGIHN4N1jOdg4vgiSdSRg+O85vMICYao=)
                          4: xjXrY-VAjEXl4AAAJVLLeMGfATA.roa (hash: 4ceK2GE5dyzV4qQFHetdVESaIRknf36gz2mazUprQdk=)
                          5: ylzVDNqLg-U7e19yN1XUnVv4-mM.roa (hash: xAtySOG4/LBLHBr0GZndFnBbQp0zDTEtHkUbGSqzQLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5c:ea:0a:a8:b2:31:0b:b6:fb:b9:3e:8e:4d:66:7a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
        Validity
            Not Before: Sep 18 13:01:05 2025 GMT
            Not After : Sep 19 13:01:05 2025 GMT
        Subject: CN=97376025031bb97fea5928afc8b5b2b4149a7c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:d2:47:ff:e7:6e:69:7b:db:d5:9b:76:75:
                    b3:56:45:74:7f:4d:c7:74:d5:60:f7:c4:97:47:b7:
                    6d:51:c9:f6:f9:3f:78:6d:b1:f4:ec:61:f9:89:43:
                    58:14:ff:8a:87:45:1d:06:de:82:c2:57:9a:c4:0c:
                    10:55:27:47:31:a7:4f:17:e8:ec:bf:d5:e9:45:1e:
                    1a:79:6c:ad:6d:de:5a:82:6e:9b:88:be:af:3a:fd:
                    fb:5b:32:ce:b0:18:a9:6d:fb:10:e5:cc:25:97:50:
                    86:e3:8d:e6:c4:69:4a:be:42:f3:52:1b:10:87:3d:
                    ff:34:5d:fb:3c:6a:51:df:a3:f1:ba:c0:4e:64:a1:
                    1e:d2:4a:c6:cd:0b:f6:7c:17:93:65:28:29:72:ee:
                    b2:64:05:93:f7:1d:ed:33:c5:5b:de:dc:c5:c6:6c:
                    8d:61:04:ca:10:ab:46:a3:d7:8c:3e:43:5f:47:25:
                    aa:22:f9:6a:81:ca:3d:62:70:50:81:84:1e:3a:96:
                    07:de:54:2e:41:8e:0e:20:31:7f:e2:7c:4f:89:6b:
                    fc:f7:92:90:71:67:87:1c:d7:8e:ad:86:83:04:6c:
                    bf:ed:41:ef:7f:f4:02:04:e6:ff:94:b7:92:6a:60:
                    68:c3:30:0a:59:d7:4e:5c:f8:31:c2:2d:fe:b7:41:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:60:25:03:1B:B9:7F:EA:59:28:AF:C8:B5:B2:B4:14:9A:7C:68
            X509v3 Authority Key Identifier:
                keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:01:ea:38:96:65:db:ae:25:8f:db:a8:03:72:6d:75:0f:42:
         5e:87:44:eb:bb:7c:23:bc:de:0c:42:92:75:14:55:4e:21:cb:
         95:8d:31:ac:a6:6c:11:72:34:3b:7a:38:38:1c:eb:5b:a0:f0:
         13:8f:1a:37:da:98:a1:3a:8f:75:d4:73:f0:a3:8a:d9:86:af:
         c1:22:e9:15:fb:1f:6a:b7:dd:df:06:c8:6d:f6:87:40:ff:86:
         60:97:28:e4:84:29:21:17:5a:f0:11:f2:e7:3a:8e:dd:d0:8d:
         bb:d3:c3:26:39:ce:42:b7:d4:80:d0:4b:ad:5d:98:33:0f:67:
         3f:8e:46:70:dd:2c:4c:dc:88:89:8c:af:cf:19:f7:71:e0:9f:
         df:4e:7c:d9:e9:f4:29:dd:1e:d7:44:3a:67:fe:f3:9a:2a:d6:
         36:66:d9:08:63:7d:51:91:d9:ae:52:55:a9:af:4f:bb:26:5b:
         75:87:68:57:ef:a4:50:36:eb:87:b1:8d:a6:cb:ed:f5:9b:b7:
         8e:89:fc:60:5b:ad:47:48:d5:42:52:c7:b1:68:b1:bc:6c:22:
         3b:68:a7:68:41:12:43:e1:54:bd:13:a4:89:cc:47:7c:ac:21:
         cf:7d:15:44:ae:16:50:4a:f0:1b:7f:3d:02:a4:45:0d:e9:9c:
         4d:cd:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:32:03 2025 by rpki-client