Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          8O4Zr7EnYWwtNizqAIgvDkarneTfB51nTacUIVtRffg=
Subject key identifier:   DA:DA:3B:F2:D5:17:AA:9A:BE:52:91:44:8A:FA:AB:87:FA:C2:6D:57
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019A14971EC9032D2F1CC1E98D4BE0CFD26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          1424
Signing time:             Fri 24 Oct 2025 05:00:39 +0000
Manifest this update:     Fri 24 Oct 2025 05:00:39 +0000
Manifest next update:     Sat 25 Oct 2025 05:00:39 +0000
Files and hashes:         1: TfyeRFd3VCbgM2FKibZFqgYPaDw.roa (hash: /rru2Z/Tk7Ps+KGw08oWifW+xfVigUyNIXVBHMyf3JY=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: gvPQ1buZOOV3g-KOPTV-IGXyfZQ.roa (hash: ky4dJJO59R27oJhhtVDGC/53OumEgsx5hY4cQRzqpnY=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: CXx6gQc74QsRsFM4ui9AHmTIsqe3E7WBCYvE+JsRvCc=)
                          5: rRATSuRPn1k0xdr0Pcevps3F_6c.roa (hash: uKtUTtOlOhfr3aV46xVMoqePsq5iGO7zwI0BAcwR7cw=)
                          6: tTK29H8qvp4tkJzIaGJhuBe1bIU.roa (hash: Tx3i8lMN9fW8zjFWTFnN1j1gzmJPtjiPz2Le6ewXcA0=)
                          7: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:14:97:1e:c9:03:2d:2f:1c:c1:e9:8d:4b:e0:cf:d2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Oct 24 05:00:39 2025 GMT
            Not After : Oct 25 05:00:39 2025 GMT
        Subject: CN=dada3bf2d517aa9abe5291448afaab87fac26d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:f2:2a:1f:4c:38:5a:00:e3:f0:23:3a:ed:
                    cf:45:36:4a:87:35:46:4d:27:fa:33:72:43:6c:25:
                    4c:55:50:f6:93:85:05:a4:fe:43:81:df:4d:cc:69:
                    73:bb:26:b3:57:c6:13:6d:2f:3d:ab:e5:33:e1:c6:
                    3c:68:e0:d4:01:de:17:2c:71:ff:37:cf:6c:7b:d6:
                    99:13:4a:3a:b9:bf:90:f4:fd:d3:15:1d:d4:2e:3b:
                    bd:4b:4a:45:bc:ab:de:ec:81:ea:52:7e:99:2d:33:
                    c1:c4:52:87:be:0a:4d:85:61:7d:9a:d0:9d:1d:44:
                    0d:e8:60:c2:48:9c:18:f7:36:bb:5d:9d:79:ee:43:
                    0e:f3:34:66:44:d7:80:ab:a2:36:4f:12:55:bc:59:
                    aa:63:7b:25:ba:89:36:e4:b9:99:d6:e8:4d:df:b7:
                    fd:41:90:49:7b:61:f7:ef:04:17:b7:52:79:f6:7a:
                    17:73:e8:c8:1f:d8:7b:77:a1:f8:7e:c0:79:8d:d1:
                    c8:77:98:ac:d8:4e:d0:6e:f1:65:59:1f:48:f8:74:
                    b8:e4:40:4d:20:26:dc:45:c6:1c:3e:10:4f:40:6b:
                    25:c4:cd:26:9c:cc:c3:7e:cb:13:cd:f3:e6:5e:a4:
                    13:75:1e:24:e7:e8:ec:c6:73:43:48:f6:3f:6b:7d:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:3B:F2:D5:17:AA:9A:BE:52:91:44:8A:FA:AB:87:FA:C2:6D:57
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:db:a6:03:38:70:54:f6:ea:e4:45:3d:94:3e:a3:ac:bc:14:
         64:eb:ad:e3:fe:37:48:4f:da:3e:0f:56:04:3d:1f:5e:21:a5:
         db:32:a1:97:c4:69:73:ad:4d:bb:e1:48:0c:53:17:b0:3b:a9:
         70:05:cc:5c:43:78:39:10:ef:6e:22:ba:c7:3d:66:d7:ce:36:
         5e:e5:8f:90:12:1d:5a:34:95:35:10:b8:a6:b8:ce:45:e1:9c:
         77:67:22:be:92:19:d8:15:c8:5c:ca:d8:7e:03:3a:b3:98:c6:
         27:fe:e6:a2:1f:37:80:cc:a6:1f:c8:02:7b:a5:ea:d4:1b:19:
         86:4b:32:e6:eb:d5:32:94:b4:a6:cd:df:2c:40:0b:07:6b:35:
         54:25:47:ef:72:ab:73:a0:56:3d:a5:2c:a0:75:5e:68:ee:95:
         88:48:49:a6:31:f9:e9:3c:12:e5:5b:00:e6:31:0e:ad:62:71:
         9f:03:7b:e8:30:99:32:c2:42:ff:e5:3a:fc:fb:f5:cb:de:48:
         10:05:84:db:e4:5d:1c:85:52:14:25:0b:4e:95:17:25:00:64:
         4c:61:ad:97:96:f7:d2:75:68:8b:05:07:f2:4e:89:a4:ca:84:
         5a:79:b0:94:e4:6c:b3:3e:1a:b9:7d:20:f2:88:4b:0b:c0:43:
         0a:77:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:50:08 2025 by rpki-client