Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File:                     mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier:          dtS+9URurhYLxZg4/VnTo4WPlmCyCqBWPEF5c73dEB4=
Subject key identifier:   6B:33:FD:71:59:18:06:D2:BD:88:74:61:0F:3E:1C:54:3A:4E:60:7E
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer:       /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial:       019921B176F423DD867B47632EEB9184D0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number:          0D57
Signing time:             Sun 07 Sep 2025 01:01:42 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:42 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:42 +0000
Files and hashes:         1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
                          2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: xcFqCKcLcPemEhQTKs+bDWIEu2kbqMHdGwYfBe7B2U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:76:f4:23:dd:86:7b:47:63:2e:eb:91:84:d0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
        Validity
            Not Before: Sep  7 01:01:42 2025 GMT
            Not After : Sep  8 01:01:42 2025 GMT
        Subject: CN=6b33fd71591806d2bd8874610f3e1c543a4e607e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:0e:3c:8c:6b:94:74:e3:55:41:93:5d:40:
                    1f:88:89:71:52:c2:1d:5c:dd:c4:26:9c:85:0f:e2:
                    71:38:6b:3e:d5:98:e0:59:18:f4:59:15:35:5b:33:
                    67:4b:27:9e:c2:7e:d8:cd:1a:43:da:c5:77:b0:5e:
                    f2:00:ef:ab:5a:91:e2:e4:81:7a:84:69:13:25:dc:
                    62:01:8a:00:8e:15:dd:61:57:c8:14:af:39:7f:3a:
                    07:8e:3f:ea:9f:45:e5:51:5f:49:e5:e8:dd:2c:ee:
                    99:95:fc:38:60:f0:7b:80:49:e4:c2:54:da:1b:dd:
                    63:1b:dd:bd:ba:63:eb:66:ab:06:c6:94:0c:1c:82:
                    b7:5b:84:ce:8f:fa:18:1a:96:99:4f:79:5d:4e:ac:
                    be:27:0a:ec:48:48:e5:de:a2:02:0c:d0:84:a8:dc:
                    be:e0:10:dd:d3:d9:37:7b:32:48:0a:50:ad:db:cf:
                    7b:5b:8c:97:58:72:bb:95:c8:93:6c:03:e0:18:2b:
                    a3:b4:88:3c:53:1c:64:76:16:ee:65:a2:08:a5:9c:
                    c9:84:cc:a9:10:78:8d:e6:62:01:e6:1e:b8:36:99:
                    e7:cb:db:45:f9:2b:95:bb:8e:93:f8:23:87:19:f2:
                    8b:7e:58:8e:8f:23:0d:ee:26:36:09:f0:f0:01:ed:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:FD:71:59:18:06:D2:BD:88:74:61:0F:3E:1C:54:3A:4E:60:7E
            X509v3 Authority Key Identifier:
                keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:f1:e5:3a:85:4d:98:83:2c:a2:f9:7f:a9:2a:0e:58:5e:
         ac:79:db:03:d4:77:4f:86:13:95:d1:e5:db:4a:91:cb:6e:4d:
         b0:e7:23:24:3a:b5:34:f9:6a:06:d7:b3:d4:f6:ce:3b:74:24:
         b3:62:c5:85:ac:20:5b:44:ac:0b:26:bd:42:c9:b1:dc:c9:4c:
         bb:6b:8b:fa:24:4c:e2:77:ba:66:d2:40:e5:a3:fc:73:b2:10:
         8e:45:25:de:7f:63:12:de:90:8e:7c:8a:2c:6e:15:3d:35:4b:
         01:5d:45:04:52:42:17:c1:c3:67:86:0f:b3:99:1f:7a:0a:cc:
         e9:e4:0e:c0:60:ba:49:e4:96:8c:91:e9:a9:4b:dc:59:d1:53:
         64:3f:98:ad:72:59:09:65:82:c6:74:15:4a:5b:99:45:6d:67:
         d9:ff:62:de:ed:2b:66:4f:6f:0e:5b:16:9c:d7:aa:7b:a2:92:
         20:30:bc:9f:b4:1c:e8:43:b4:2a:2e:fc:c6:a1:2c:01:d3:c2:
         eb:0d:db:d8:ea:b2:65:94:fb:b7:d0:5b:5b:6e:c9:9e:cf:e6:
         61:63:e9:b0:35:36:c5:13:0f:02:f5:d7:49:71:90:9b:7b:a4:
         d5:d0:dc:91:f1:bb:c9:c1:c5:f4:85:7c:02:c8:78:44:08:c7:
         9b:7e:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:01 2025 by rpki-client