Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File:                     ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier:          ykX5JWWmNhs6dHestEJggdJ5vgOWEcF1ukQjnAkE9go=
Subject key identifier:   9E:63:9E:0B:19:0B:EA:15:E8:E5:90:A8:CD:02:D5:09:E0:E9:20:1C
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer:       /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial:       0197722CF42085917607F74169DD6EED79EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number:          0FB3
Signing time:             Sun 15 Jun 2025 06:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:38 +0000
Files and hashes:         1: Fwkn-erxqVJGCICr5bQF1GUB_bA.roa (hash: ePgJDihP1/Ez/90nsTWFdItvP2OyGIqDLFpAtXpE1Pg=)
                          2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: oZDKxktv4GmbMnW1cMl0xbAoYmdSZyk+qqgVfysxEGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:f4:20:85:91:76:07:f7:41:69:dd:6e:ed:79:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
        Validity
            Not Before: Jun 15 06:00:38 2025 GMT
            Not After : Jun 16 06:00:38 2025 GMT
        Subject: CN=9e639e0b190bea15e8e590a8cd02d509e0e9201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:67:6b:19:7e:35:5a:a7:7d:13:09:8c:52:
                    da:13:54:54:9f:58:52:eb:7e:df:b7:a0:8f:a6:6d:
                    fe:db:92:c1:ad:40:7f:f9:38:7b:6d:b4:55:b0:8f:
                    46:14:1a:89:b4:77:8e:b4:af:29:bc:92:22:b7:64:
                    00:13:f9:fa:e9:08:15:3b:3d:07:42:d3:07:13:40:
                    26:a0:92:26:10:95:3a:7d:dc:23:d7:86:0e:3d:10:
                    fc:1e:01:a0:6e:cc:d0:c0:b3:e6:31:aa:4e:37:49:
                    ee:c7:74:2a:dc:5d:af:c4:d5:57:52:b6:67:f6:32:
                    34:3c:58:44:0d:81:02:8c:ad:84:95:47:31:90:61:
                    ba:60:62:3c:78:16:13:f0:35:34:17:84:cf:d0:5f:
                    50:5f:9d:0e:f6:02:67:0e:a9:93:d4:69:b9:3c:72:
                    0c:10:8f:91:1f:5b:1a:40:f5:ab:3f:c6:ae:91:a8:
                    4a:5e:73:f1:80:e3:eb:d9:c3:57:e6:a7:bd:a9:42:
                    cb:67:d7:f7:f3:39:e9:94:56:18:84:af:85:7d:a5:
                    70:0d:7f:f7:ba:be:7b:fc:c9:cc:53:71:2d:7f:eb:
                    95:83:d1:29:48:78:20:ac:a0:d4:45:b1:fb:d9:46:
                    bf:d3:b3:e8:b4:f6:cb:ad:ed:25:64:76:d0:ca:24:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:63:9E:0B:19:0B:EA:15:E8:E5:90:A8:CD:02:D5:09:E0:E9:20:1C
            X509v3 Authority Key Identifier:
                keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:24:21:80:22:5d:31:a6:5f:d6:79:03:19:d5:32:42:06:
         f7:bf:61:0d:48:00:44:c7:51:2c:54:75:26:6d:1f:a4:a7:47:
         58:38:d8:fc:d4:f8:98:e6:1d:38:bf:92:c9:bb:d2:26:2b:6d:
         1e:87:b5:d7:a9:41:df:be:8b:7a:94:48:30:7f:47:4e:82:09:
         9e:46:c2:95:a6:a8:be:38:77:de:ae:44:58:3d:d5:38:69:98:
         e6:07:9f:d0:76:45:b7:b2:62:ea:d7:b1:08:45:1e:ae:df:af:
         59:87:5b:a2:0b:8f:09:f3:75:79:a1:a1:03:2b:5a:59:f3:28:
         4a:48:5d:05:86:66:d9:a1:61:4d:fd:81:5e:0b:3b:ef:82:23:
         ff:b1:64:96:d7:04:16:06:a3:1d:1b:9d:7f:73:97:78:22:5c:
         2a:85:ae:8c:d9:19:87:06:69:31:71:5b:bb:cb:15:d5:97:0a:
         0d:28:59:27:cb:3d:3d:a0:2a:7b:56:1f:cd:00:01:f3:08:cb:
         cb:31:65:f0:27:3d:98:31:59:be:13:63:05:fb:54:e0:15:3e:
         40:96:78:32:08:a6:34:5d:18:e2:8b:87:12:14:b4:41:47:ca:
         0c:1d:30:b9:48:12:41:c1:52:b6:1e:e2:2d:38:38:2f:57:95:
         ba:99:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:48:08 2025 by rpki-client