Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          Fhv2vMw0BwOrpqwKIgHBrqr65DowKNqT6sZt88MsB9Q=
Subject key identifier:   58:FC:4C:C8:D3:9C:97:C4:98:59:9A:59:71:59:12:50:D8:A9:FD:D3
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       01992367CF9D3834BF128D6B350A7B69E599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          026A
Signing time:             Sun 07 Sep 2025 09:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:29 +0000
Files and hashes:         1: AF5LwWg1dao3w02VHECRUerpukU.roa (hash: Ncs14Dy32ScG4H2HyXyIY4G9gDsZB0rdLa7JZ2atlmg=)
                          2: GNg5qyh_Im4ovVZo43PZo0cIDgk.roa (hash: JsYstEOr/RnKzA1W+dKnW/zW5VDgHcUDQlKG6Iu9Xvk=)
                          3: Gzw1ArufvsV7lun_0Q-rUPOXBGM.roa (hash: t/o+neptKVKiKxJpFxuQvJ/wrQhsyyO3eWWynGJs2d0=)
                          4: H6KJXCzsVKBCex8bdjdpcPzKj4k.roa (hash: ayVcJHTWFx5ebEEYZQnqngJlO1dTOXNsn34hSHck390=)
                          5: VsI_AW9EylW2fiJ1YDcH0sZTdk4.roa (hash: 66hyyMtNTHFirc0cG1RdPc+2uiQi7LyhRHEQCng1VvU=)
                          6: WhSTApE7RFBAMmW_xVnPdgMAiWQ.roa (hash: Bd3C/960PK8QK60Tck52Vy8z1GDbIMwLZtVlP2UrssE=)
                          7: moO5Ks17ZAWVDkWAO-sZOL7jYGk.roa (hash: vNDGafiza1LZ3cM48PDM+kPW+0J6IrOV2MqoIZsseo4=)
                          8: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: p3yNT66bXenwTb+vyZKUYoORFVEWTXslGNo02mmndfM=)
                          9: tAUwOh7-bFAje0ge2CsLFBhij_I.roa (hash: wxXEKUHCbWw2dnlts0k+6en+iFwSRN99/5HuuqUJ79U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:cf:9d:38:34:bf:12:8d:6b:35:0a:7b:69:e5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Sep  7 09:00:29 2025 GMT
            Not After : Sep  8 09:00:29 2025 GMT
        Subject: CN=58fc4cc8d39c97c498599a5971591250d8a9fdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:5a:6c:8f:5e:3f:4b:05:09:96:e0:38:75:
                    0e:3b:69:8f:5d:79:4d:28:d5:f9:65:6b:04:cb:97:
                    27:c4:ed:dd:26:bb:bd:6b:a1:ba:fb:45:ce:19:89:
                    ea:08:a7:f3:4c:bf:10:85:d6:70:5e:0e:50:43:8d:
                    e1:f2:1e:e4:6e:0c:7c:91:2b:4e:93:b0:d2:6b:e3:
                    35:ea:3a:bb:b6:a4:83:3b:cf:8d:62:0d:3e:a9:ea:
                    3f:97:38:19:17:e3:8f:f2:46:04:b4:f5:38:10:94:
                    bd:13:79:cc:33:14:22:94:39:32:6f:b5:27:57:d8:
                    14:87:e8:28:9c:9f:6f:57:d9:42:8d:3a:d4:3d:03:
                    04:7b:b1:e3:9c:1c:19:4e:f3:74:48:70:df:f6:34:
                    a6:c6:e4:08:12:3d:28:4b:a0:09:34:55:46:c1:ad:
                    9f:1c:84:83:ab:53:cf:ca:53:8f:81:b0:f9:05:65:
                    6c:f8:a1:86:81:b7:ca:27:9a:a2:e1:e9:41:c6:af:
                    30:de:20:17:4b:26:53:50:01:b6:a1:11:a2:b2:4f:
                    61:de:48:2b:e1:d8:24:62:fa:49:7e:f5:d1:5e:56:
                    b8:c3:78:c9:5b:c9:55:70:9d:37:87:51:a4:5d:c1:
                    4b:f4:35:1d:aa:d0:7f:03:d8:8f:f3:1f:1e:b0:e8:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FC:4C:C8:D3:9C:97:C4:98:59:9A:59:71:59:12:50:D8:A9:FD:D3
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ad:27:cd:e2:e8:0c:20:11:f2:4e:8e:16:24:24:fa:21:bb:
         fd:8c:df:cf:c8:0a:48:16:4b:5a:40:5b:0e:d0:86:69:cf:55:
         2f:4f:40:b4:b6:60:d3:39:a1:6e:2a:45:df:62:ba:2c:9a:b8:
         69:2d:86:bb:55:c4:41:60:61:81:76:ed:0a:43:11:d9:cb:cc:
         78:26:fb:d4:74:a8:f2:44:b3:93:a7:be:40:7b:27:42:ad:0f:
         d4:12:5a:93:57:4e:2f:f0:4f:ba:c2:fe:b9:76:a8:c5:0b:e1:
         18:56:41:78:2b:d7:0d:be:ef:93:a8:7c:69:eb:68:7d:12:88:
         dc:ab:39:9d:1d:91:71:db:ee:a9:0b:2d:bd:a4:36:ea:bd:e9:
         a8:4f:e3:34:c2:3e:79:db:49:e6:50:89:b1:4d:7b:a9:1a:b5:
         cb:d8:24:74:3d:3d:d9:5b:7b:53:50:2c:80:09:4a:d4:24:2c:
         a2:a6:b8:02:6b:8a:0d:5a:47:30:ac:dc:34:11:50:ad:07:a0:
         a0:ed:0e:57:24:ec:ab:f4:18:46:ea:3a:1f:00:da:06:9c:d7:
         6c:82:e1:75:dd:22:cc:ba:39:e1:3c:c9:9e:39:16:47:19:fb:
         d9:f3:35:51:80:21:ea:3c:5c:c7:06:44:bd:81:36:21:a0:fe:
         fb:92:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:14 2025 by rpki-client