Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File:                     b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier:          L1JPPbJPQfsNc+qx3p2xLnAk8qBhy6k8KW0r2tTqx6E=
Subject key identifier:   33:05:E9:83:F0:1A:57:D9:15:AE:5A:09:05:C5:2F:FE:54:09:0F:52
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer:       /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial:       01993123568CE2C6301BED9CA08BAC288F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number:          039E
Signing time:             Wed 10 Sep 2025 01:00:23 +0000
Manifest this update:     Wed 10 Sep 2025 01:00:23 +0000
Manifest next update:     Thu 11 Sep 2025 01:00:23 +0000
Files and hashes:         1: E8-O6qTkHvseSI_wtIvJ6wYXX3k.roa (hash: uXi+MjDyT65g7z2V+dZfdFCKu9m94/6YNXPqF3nP/fc=)
                          2: TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa (hash: 2zLKJ3umZ3JW8k4DM0pjot15c8VbxAJ5HTL+V7YT3A0=)
                          3: ZZey-0HBZJz6tu5Dx957VQ_cJpY.roa (hash: Um1c8KK7ILiypS8xrGfkuz2RoJKwXtwUfcSgYkFetK4=)
                          4: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: gJnGmfOTiL+oQuKXkOvei/ru7SId0DjZ0izK3F/ymqM=)
                          5: uejJGeBDuzCDQxudVuMI70V-pGs.roa (hash: BSepZGrADNb3VYStxDeZMexjvdT9hfJ7uidNLEEdkHE=)
                          6: yxe7My0NcRZq-SpiFdXNNwBJYL4.roa (hash: 0k/Fz33zsau4ewiit92jbfHfEKu+7iJrH4IQAHIlxUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:23:56:8c:e2:c6:30:1b:ed:9c:a0:8b:ac:28:8f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
        Validity
            Not Before: Sep 10 01:00:23 2025 GMT
            Not After : Sep 11 01:00:23 2025 GMT
        Subject: CN=3305e983f01a57d915ae5a0905c52ffe54090f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:b4:c5:47:31:2a:6d:09:99:37:f4:43:04:
                    5b:e5:05:23:8c:fd:ad:bd:02:29:37:11:69:3a:30:
                    e6:28:88:62:a4:88:63:c3:ea:1a:1c:12:c2:f1:d3:
                    48:61:96:71:86:d5:63:ca:40:83:d1:96:08:a5:0a:
                    06:dd:ac:61:2f:11:ef:64:bb:5b:fd:4b:c2:a2:4c:
                    8c:13:cc:70:d6:6f:99:8c:8a:47:45:62:f9:94:23:
                    35:07:f0:95:01:a8:32:2e:b1:ad:67:cf:7d:9b:bf:
                    38:ba:28:39:3d:eb:bc:8e:33:72:8f:7e:31:fb:aa:
                    b9:4f:6b:68:0e:7b:62:a1:09:b0:15:a7:5f:1d:42:
                    7e:15:27:85:88:ce:67:e8:85:7a:c8:92:70:97:35:
                    98:23:e1:0a:71:a1:23:a0:76:92:61:06:4b:e9:d0:
                    94:4d:37:4c:46:6a:07:7c:55:4b:6c:8a:de:6a:c1:
                    c4:f5:c7:8e:1d:b2:f7:32:00:94:c7:b9:e7:2a:89:
                    13:21:ab:f1:f8:4f:78:13:7f:c5:ef:dd:83:ba:c4:
                    11:6d:ab:ce:f7:90:97:7f:8b:18:12:75:71:9b:52:
                    20:cd:a8:40:bf:52:b2:81:fe:eb:73:80:8b:12:b6:
                    73:20:20:5f:9a:d9:c5:08:af:e8:5c:f0:ac:56:d1:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:E9:83:F0:1A:57:D9:15:AE:5A:09:05:C5:2F:FE:54:09:0F:52
            X509v3 Authority Key Identifier:
                keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:7e:62:2b:fd:41:25:00:2c:a3:a3:64:6f:29:28:3d:2d:
         a4:f3:39:d6:69:5c:f4:7c:20:ce:08:58:bb:89:be:5c:50:65:
         bd:32:67:05:ee:70:da:09:4e:fa:77:b5:5a:d5:df:e7:36:a8:
         12:7d:5c:8b:6b:8b:67:d9:cb:34:be:79:5a:d2:82:fb:d8:29:
         b8:72:8a:86:42:4c:bc:42:4e:0d:e4:ca:b4:8a:29:02:5e:ef:
         66:76:b8:50:85:a5:91:73:fd:88:05:bb:aa:3a:93:bd:d0:d1:
         45:22:a2:4c:a1:60:cc:a3:f7:f0:b7:13:d3:1c:2b:31:0e:02:
         f4:2d:21:8c:cf:e2:60:c7:bb:27:23:37:77:19:84:21:60:c9:
         6c:d7:fc:da:8c:e3:31:d8:85:4a:c6:4d:07:35:6b:d4:dc:6e:
         f3:26:da:54:06:d0:75:0f:12:f5:48:36:cf:e8:96:1d:45:fb:
         47:cb:82:96:6a:4a:c4:d4:97:1c:8f:ff:60:a6:18:47:31:67:
         fb:0f:0a:e4:55:11:93:30:32:93:c3:0c:da:50:28:af:49:5f:
         b1:e9:69:3c:d2:4a:18:64:57:bf:0d:90:8e:f7:27:15:64:ab:
         a9:89:f3:9a:ab:ae:e9:dc:29:10:66:5d:68:ed:8f:0d:70:6d:
         05:0a:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 02:38:33 2025 by rpki-client