Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File:                     ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier:          NbQQgzidQ4X1DY5EUZHMDUBYI3g2iQr5dqZxKOXA1B4=
Subject key identifier:   8F:FE:C5:F7:7B:E8:DC:AF:73:99:1E:8B:F7:F5:36:F2:B2:97:13:F0
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer:       /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial:       019D9A3E903120FFBF7FC5033C61B6FC5C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number:          12E4
Signing time:             Fri 17 Apr 2026 07:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:24 +0000
Files and hashes:         1: 0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa (hash: 6QAThh9Df6kXu7nNhqJfERiUtZ4umexbpptr0sQdbu8=)
                          2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: PkrLGveHXZOUC5FW5X2CVkKEqC3TgmfAemm+a5OzhbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:90:31:20:ff:bf:7f:c5:03:3c:61:b6:fc:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
        Validity
            Not Before: Apr 17 07:01:24 2026 GMT
            Not After : Apr 18 07:01:24 2026 GMT
        Subject: CN=8ffec5f77be8dcaf73991e8bf7f536f2b29713f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:b3:46:75:7c:64:2f:14:bd:d1:26:5e:3e:
                    7f:c6:2d:2b:dd:a1:90:f6:7e:5c:40:bf:1d:ed:04:
                    2b:36:0c:24:f3:05:35:66:5f:48:08:b5:3d:4a:ff:
                    b5:37:f9:8b:e5:4f:2f:30:f6:9a:d0:36:d2:29:64:
                    11:01:de:c4:ba:8f:16:dc:3f:78:43:d4:9a:52:bc:
                    8a:df:87:1f:0f:02:17:e8:7e:ae:1c:21:b8:c9:95:
                    5c:da:e8:a2:81:40:60:00:74:1d:6d:75:cf:0c:d0:
                    35:67:a4:33:8b:37:b3:f8:34:3b:1e:70:93:12:85:
                    ac:b6:88:86:07:9e:75:30:00:30:ae:74:59:84:a0:
                    77:07:a5:fe:a9:e6:d5:eb:a0:07:0e:c2:d9:60:12:
                    b1:8e:16:cf:fb:c4:17:b2:10:81:45:58:a0:b7:5c:
                    58:f1:27:14:8d:c8:39:d0:4c:c4:e7:f2:12:a5:fe:
                    7f:7f:f6:78:1a:43:e5:f7:94:2f:8d:a2:f8:b8:d0:
                    83:bf:c6:e3:e1:b4:5a:85:96:2e:31:7d:bd:8f:1b:
                    41:37:df:cf:b9:5a:4f:f7:34:80:30:46:92:6a:f6:
                    e3:3e:53:95:6e:96:7c:8b:7d:00:fd:c2:18:c9:a5:
                    55:2e:1b:18:bd:fc:a4:48:b9:08:88:8d:30:50:51:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:C5:F7:7B:E8:DC:AF:73:99:1E:8B:F7:F5:36:F2:B2:97:13:F0
            X509v3 Authority Key Identifier:
                keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:26:60:d3:8e:8b:ed:99:ab:e7:07:64:77:8e:fe:50:3f:
         f4:cc:61:42:79:ee:6d:e5:5e:30:ae:c1:30:eb:30:6e:50:eb:
         77:3a:ca:6b:99:71:32:fc:a0:d0:21:43:69:8b:6d:9a:86:c5:
         93:57:29:c2:e2:5d:34:ac:0a:42:2f:47:cc:38:6b:f6:dc:e8:
         a3:6d:65:8b:84:fb:ab:dd:29:81:cc:ad:76:e8:3d:de:7a:03:
         ac:0a:0d:0c:97:a1:a7:ec:e9:6c:8f:66:65:b8:d3:01:8f:f8:
         d5:eb:34:39:71:ed:79:e9:0a:c5:14:fb:56:e3:71:a7:3e:53:
         a8:ec:fb:e2:5c:e4:e3:94:db:fa:11:a8:72:e0:68:40:78:e2:
         b2:96:b7:a8:a2:bb:68:c6:29:11:03:db:1d:7c:2a:46:a9:99:
         49:79:f7:ef:e7:17:30:ff:0b:62:41:9b:45:24:22:ac:e5:dd:
         e9:0f:e0:36:50:48:2d:56:d3:9b:c9:e4:f7:93:69:7f:20:09:
         ee:e0:f0:33:8b:71:da:30:c3:1c:16:76:e6:a1:8f:9d:79:df:
         94:22:41:5b:01:57:fc:6c:79:ce:89:31:52:91:15:38:3e:99:
         6a:e6:78:01:bc:9e:38:89:58:1a:0d:0d:00:3a:c0:02:60:a3:
         33:16:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:37 2026 by rpki-client