Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          w9Y0nNTzleFTgcXr7trHLtVpQSd6uJzcmEBl3bQIvOs=
Subject key identifier:   82:53:B1:12:1D:7D:11:60:D4:C6:0E:D3:FB:87:77:4B:3C:86:EE:F6
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       01992255D07FB65813C57988E9A91BA7BB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          1676
Signing time:             Sun 07 Sep 2025 04:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:13 +0000
Files and hashes:         1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: jF5FU1g2YSI/oir7YvNd909vnTAMMYyCe7Yhj+qFYh4=)
                          2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:d0:7f:b6:58:13:c5:79:88:e9:a9:1b:a7:bb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Sep  7 04:01:13 2025 GMT
            Not After : Sep  8 04:01:13 2025 GMT
        Subject: CN=8253b1121d7d1160d4c60ed3fb87774b3c86eef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:4c:85:22:75:e6:ce:91:0f:74:69:58:7a:
                    d7:40:7a:e4:e1:4d:06:d7:ed:aa:08:3d:5a:14:c2:
                    01:ea:ee:de:31:d1:80:b4:8c:9e:53:62:06:c5:57:
                    95:e0:0e:ce:63:8f:dc:7f:de:c0:45:de:03:b7:45:
                    b4:00:c0:3d:7b:e1:54:d9:1b:de:06:cb:93:20:a1:
                    b9:32:da:e4:10:41:da:d1:d4:3a:42:1d:0c:73:cc:
                    68:10:2a:95:56:dc:06:c9:49:9c:9f:6d:41:5a:ef:
                    d0:36:1d:4c:22:96:c8:7e:3f:46:3c:02:0a:23:0f:
                    8f:92:32:06:af:a6:a1:20:16:00:e5:d9:42:47:a5:
                    a5:8f:4e:e4:72:28:3b:18:17:94:5e:be:57:f3:40:
                    1c:15:a3:62:5b:50:f8:e2:ad:63:a4:8f:ee:ac:3b:
                    c4:e4:61:a7:91:d7:b5:3d:55:fe:b7:cf:57:92:16:
                    b4:98:b0:b7:0b:89:f8:2b:db:46:92:31:ed:06:74:
                    c1:99:84:64:5b:83:fc:3e:a5:0a:a4:2b:51:34:24:
                    b1:09:a7:04:63:a4:79:d8:20:7c:28:58:e0:a6:45:
                    30:e7:e7:c5:29:a2:22:c4:73:9d:4a:d8:2e:88:f4:
                    14:4d:da:e2:26:a6:75:ab:25:12:7f:a3:28:b8:4e:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:B1:12:1D:7D:11:60:D4:C6:0E:D3:FB:87:77:4B:3C:86:EE:F6
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:c3:d1:64:26:c6:ee:2e:4c:2f:0e:96:f2:ed:bb:1a:d5:
         b3:47:8c:2d:c3:5f:54:4d:35:d3:e4:e5:91:54:bc:62:3f:b2:
         72:a6:00:9e:b2:3d:a5:f0:3e:84:9c:d2:79:62:5c:37:33:4e:
         0f:c3:8c:a5:39:dc:d8:08:c6:5b:3c:1a:80:af:35:20:36:e1:
         a1:49:cc:bf:c8:87:59:2c:5f:17:7d:2d:b5:58:68:d1:ff:5e:
         7f:91:45:c5:df:0a:ea:ef:2b:5e:4e:ad:ba:57:ae:85:ff:30:
         aa:26:fe:78:02:40:1a:46:33:45:13:f3:54:f0:93:3e:8b:26:
         0c:1b:d0:25:6b:8d:c0:cc:b8:df:68:02:79:35:34:39:92:9c:
         38:73:d1:d4:c1:cd:d5:9f:0c:15:da:d8:b1:88:9b:61:e6:f4:
         3a:2b:c2:0d:98:70:8a:1b:c5:c7:51:fb:19:1d:54:f7:b7:d4:
         40:cc:d7:79:7d:09:73:ab:b8:62:12:0b:c7:ef:fe:96:6a:24:
         79:d9:ea:29:12:55:8b:5a:ca:34:0b:d9:61:9b:a9:23:4f:27:
         ee:53:c7:9a:04:9b:4f:cd:df:8a:32:96:0e:17:29:b8:76:1e:
         e8:b0:97:6a:91:fc:23:d3:65:a5:12:31:9e:2c:a1:78:0f:19:
         65:2f:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client