Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          mEebftjhHigcjXAKHyrlfHA6Sjbmrw79GzBn+0oYEDk=
Subject key identifier:   97:6C:7E:AC:C7:85:38:5D:48:35:CB:0E:90:BE:F3:E2:47:88:48:99
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       01993312159D0B55624A698BEDEF96599693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          168B
Signing time:             Wed 10 Sep 2025 10:00:47 +0000
Manifest this update:     Wed 10 Sep 2025 10:00:47 +0000
Manifest next update:     Thu 11 Sep 2025 10:00:47 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: UwYazjpfGDLQjZrQ2KlL3hF9GVQ+sYp2qFuxJBEKPXI=)
                          2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
                          3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
                          4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:12:15:9d:0b:55:62:4a:69:8b:ed:ef:96:59:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Sep 10 10:00:47 2025 GMT
            Not After : Sep 11 10:00:47 2025 GMT
        Subject: CN=976c7eacc785385d4835cb0e90bef3e247884899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:12:91:e8:b7:39:cd:75:e5:49:eb:0a:22:
                    66:e9:d0:c1:e8:be:9e:ca:2e:f4:82:ee:83:57:7d:
                    34:9b:5e:08:bd:92:3c:76:f0:5f:15:4b:23:7e:c0:
                    26:ed:3a:3b:60:87:db:e3:2f:91:e1:33:89:50:f8:
                    15:df:7b:2e:ae:a5:da:14:86:94:f2:49:a8:59:21:
                    c4:c6:22:4b:b9:e5:1b:8a:43:5c:7d:f4:2c:27:fa:
                    48:ad:62:5d:b5:2d:73:75:8d:35:e8:8a:76:4a:ff:
                    7c:25:1a:5a:5a:97:59:47:b8:32:24:6a:bd:f9:f6:
                    8e:62:5a:e1:a6:06:d9:be:3b:58:24:22:c3:8f:c4:
                    96:5a:ea:8b:cb:8e:4e:b7:8d:6f:82:89:70:2c:ff:
                    30:23:84:64:aa:19:1a:36:d0:0d:de:b9:e7:5d:77:
                    57:f3:e7:31:d0:8d:04:a1:b9:8a:e3:3d:48:15:51:
                    6b:fd:27:81:e5:81:39:b9:ed:c5:ca:cb:a9:8b:5b:
                    0f:87:09:34:b3:61:74:ad:88:1c:51:dc:da:1a:59:
                    a9:f7:c4:d8:5b:05:19:50:42:f5:20:77:35:57:af:
                    19:be:1c:7c:ad:70:fa:97:e5:f2:0f:50:b2:d6:53:
                    28:8e:df:30:c6:45:4f:66:e3:58:9e:14:36:b0:44:
                    19:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:7E:AC:C7:85:38:5D:48:35:CB:0E:90:BE:F3:E2:47:88:48:99
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:18:e2:61:72:fa:71:a3:a5:4f:d0:3d:6a:84:4a:0a:2e:d4:
         1c:ce:0c:8b:77:db:be:bf:0a:e4:49:2b:7d:de:36:88:8a:98:
         48:1c:38:20:6e:d3:00:f0:23:c0:4b:11:bf:7b:8a:51:95:91:
         82:99:4f:15:db:5c:b9:ef:f9:b9:b3:24:73:fa:dd:21:ec:13:
         07:5c:c6:00:18:e1:3c:a1:14:8e:62:ec:0c:5c:7c:b9:2b:7a:
         b1:8d:15:d6:57:29:05:11:a4:8a:5a:43:c5:90:4b:67:cd:ea:
         99:f4:fc:8c:0f:45:92:c6:7e:7e:90:e8:f1:a5:29:d0:fb:bc:
         f5:06:2f:4d:94:e8:4a:67:00:b3:b3:4d:0b:49:8f:e3:85:08:
         c7:9b:5a:d8:18:d0:50:d7:58:e6:cf:49:85:f3:ed:73:de:bb:
         22:96:33:65:83:31:86:c2:87:12:b5:ff:d8:e2:aa:07:da:2c:
         43:eb:89:84:e1:e8:cc:a2:f7:52:15:1d:0b:ef:69:14:e2:d3:
         ad:7a:a4:03:29:b5:6d:ce:ae:a6:85:b0:10:8a:27:34:b8:b9:
         94:28:24:bb:ef:66:a6:3b:33:a4:3b:6d:f2:89:0e:ee:aa:a9:
         f4:9e:6c:03:1b:7d:3c:67:4c:c8:e7:be:7d:89:6d:ed:8b:9f:
         e0:bb:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:21:25 2025 by rpki-client