Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          aNkjJFE9fHnpDp0BT8zVJAIYhXAY1E/TqC21YrF7s0I=
Subject key identifier:   F4:23:3E:B0:77:DB:B9:DA:A4:5E:16:85:3F:EA:C9:F7:A3:DD:C5:5D
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       01991B7807091F19F77F860A640472350476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          098E
Signing time:             Fri 05 Sep 2025 20:01:14 +0000
Manifest this update:     Fri 05 Sep 2025 20:01:14 +0000
Manifest next update:     Sat 06 Sep 2025 20:01:14 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: hHbcOqyxrETIyXEY37CEcVAEIxie+au2BDUUriJL1iY=)
                          2: 5Y3Jwmte8A-d_YlOn8cgBr_VO4M.roa (hash: vSY895Pgffq53GRNLVm1t6+gWyyWT9dNx713Rvp80xY=)
                          3: 87iBXWDpSIwRDGkwc7K8UhWgGyI.roa (hash: GnB7PMQFypZjuArzdsmg92AtM/uSLFw3faYH5HVQkIw=)
                          4: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=)
                          5: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=)
                          6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=)
                          7: bf7MiBVtuN_VY-lMeIniqJDCBns.roa (hash: m1U+Cy0bI+/dKIetpHKZZ9yo7LVmFreBiQ7nhZy+5Fo=)
                          8: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=)
                          9: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=)
                          10: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:78:07:09:1f:19:f7:7f:86:0a:64:04:72:35:04:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Sep  5 20:01:14 2025 GMT
            Not After : Sep  6 20:01:14 2025 GMT
        Subject: CN=f4233eb077dbb9daa45e16853feac9f7a3ddc55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:da:45:c8:bf:38:53:1a:9d:13:db:97:6c:
                    8b:73:e1:d1:27:b1:99:06:36:40:4f:f8:4e:11:2e:
                    98:1d:25:c8:56:9b:8b:a3:76:28:1e:03:30:8b:ea:
                    d2:24:c9:fc:8a:b9:9b:dc:31:0b:b5:25:28:ac:a9:
                    e0:2c:3c:4d:22:9a:f6:07:3e:05:35:02:35:ef:85:
                    bf:66:75:d5:b9:f5:e9:06:3f:18:2e:14:fc:cd:89:
                    10:c2:5f:59:7e:4e:78:22:40:fa:b7:77:b2:6e:4b:
                    b4:98:d7:a8:27:d2:bb:5b:f8:f9:fc:9e:a5:f5:e0:
                    59:73:d3:1b:4d:d5:7d:64:66:d3:bf:ba:71:ee:2a:
                    52:55:4d:42:f3:0c:24:68:65:01:2f:93:da:6b:08:
                    ac:26:a9:e9:11:61:6c:fe:64:ca:48:cf:bf:cc:2f:
                    8c:1b:2a:d1:3d:8f:6b:78:72:74:4f:11:0c:1f:cf:
                    c3:24:d3:77:6d:81:e7:b1:81:75:ad:b4:79:13:15:
                    bf:a8:38:d0:c3:70:fb:d4:b0:a9:7a:62:2a:e1:46:
                    73:7f:36:ee:a5:cd:53:e4:61:36:8a:81:89:d2:7e:
                    7e:e9:d9:d4:8d:88:af:5c:5d:d8:77:d2:7d:3d:93:
                    6e:ab:69:94:34:6a:8b:c4:3d:0d:2e:3c:b9:41:04:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:3E:B0:77:DB:B9:DA:A4:5E:16:85:3F:EA:C9:F7:A3:DD:C5:5D
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:31:d6:20:8a:31:9c:3a:a8:7d:a6:1d:d3:10:d6:b7:4a:
         5c:00:59:f1:0b:b1:06:7f:e6:f6:c2:74:b3:c8:a3:d2:e5:06:
         a7:26:ba:29:9a:f3:81:cf:ec:5e:48:9b:78:16:f5:34:ef:18:
         5d:21:c3:d2:c8:b9:fb:ed:44:52:b2:2b:7e:9b:a5:1b:de:a9:
         52:8e:b9:69:48:af:90:18:08:4b:fc:4a:09:d6:75:0d:8e:c1:
         5f:f2:22:f9:7a:2a:da:19:ad:62:d1:29:cb:ad:a1:03:01:f1:
         13:ad:8d:88:03:e4:93:f5:b9:bf:21:df:07:b3:b0:92:9b:bd:
         da:4f:54:27:03:bb:02:55:9b:1b:2a:d8:c6:fc:93:2c:76:f1:
         ee:2b:91:4d:32:77:e2:a4:e4:29:16:f5:07:1c:f8:32:92:4c:
         1e:76:12:8a:02:60:2c:74:92:94:41:bb:fd:e5:95:be:8a:90:
         01:2a:a5:e2:44:0e:60:09:42:ac:8b:dd:28:4e:3e:00:df:ca:
         4f:3e:87:71:f9:6d:92:19:ef:d4:3f:b0:09:9a:bb:db:84:97:
         bc:bf:c1:35:8c:40:2b:13:8e:9e:5e:f0:52:f8:7b:1c:b2:4c:
         41:d8:9e:ad:e2:16:e7:30:15:04:31:55:13:16:e5:6d:41:51:
         d1:79:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:26:47 2025 by rpki-client