Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File:                     MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier:          DHzbMSN+mRCscFs4Wl9ohtuVuG7IDhrExmC9QluYl+I=
Subject key identifier:   78:F8:25:88:09:55:2D:B0:9E:08:A8:8A:10:D5:9D:90:94:16:99:8C
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer:       /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial:       0198D7E12B31C4F49D98009656422B1442AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 17:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 17:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 17:01:54 +0000
Files and hashes:         1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: waL1ZXFHUzNbD06Jk7/NGJyEUMBibkFY3u74TfZNTSE=)
                          2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
                          3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
                          4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:2b:31:c4:f4:9d:98:00:96:56:42:2b:14:42:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
        Validity
            Not Before: Aug 23 17:01:54 2025 GMT
            Not After : Aug 24 17:01:54 2025 GMT
        Subject: CN=78f8258809552db09e08a88a10d59d909416998c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:04:26:cc:27:be:a4:be:3d:c5:a8:d3:1c:
                    1a:cf:ab:3f:a3:e0:a5:18:cb:f0:8f:40:8b:06:25:
                    89:8e:5a:17:45:fd:5a:e0:87:af:35:ab:a8:50:db:
                    13:18:68:28:0c:ca:97:ec:ff:01:28:50:fb:1a:84:
                    f7:da:d4:8e:63:a9:c9:2e:be:91:4f:49:d8:b6:99:
                    3f:bd:c7:05:23:3a:b9:54:64:bd:97:44:d9:20:e5:
                    1e:ac:38:2e:63:59:98:86:7a:ec:fb:61:5b:ba:22:
                    1c:1c:61:6e:eb:3c:62:ec:6d:2b:ec:34:45:ca:fa:
                    fc:76:78:d2:2a:87:d4:05:a5:54:46:34:ec:56:ee:
                    1a:cc:ff:2d:07:31:61:9b:b3:b5:7a:af:98:06:4f:
                    b0:c6:dd:3e:60:68:55:8f:58:bb:e4:7d:87:10:83:
                    b1:72:be:92:9e:af:34:05:87:6b:57:00:97:f1:22:
                    08:92:79:61:76:12:c0:d5:73:75:b7:2d:c5:dc:d4:
                    14:97:d3:e2:fe:b7:65:d6:0f:f6:ba:69:8d:e1:85:
                    ae:52:ea:39:f7:6c:ec:27:49:2a:cd:90:23:14:2a:
                    ab:c7:a7:d6:9e:53:1c:85:33:f4:c3:f0:44:5b:7c:
                    cd:5a:3b:b9:f0:ec:f1:d1:8c:cb:b8:94:40:88:16:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F8:25:88:09:55:2D:B0:9E:08:A8:8A:10:D5:9D:90:94:16:99:8C
            X509v3 Authority Key Identifier:
                keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:a0:7c:58:90:36:64:85:85:c2:73:ea:ab:e1:32:03:85:
         6b:73:95:ed:57:13:c2:9e:a3:1c:6b:83:a4:ca:69:9c:4a:be:
         3b:ff:e4:ed:d0:39:24:32:48:1c:57:c8:79:fe:38:d4:81:50:
         f5:e0:ea:57:c2:60:fd:13:ed:a6:0d:79:ec:2a:3d:70:66:c5:
         d4:78:fa:63:64:e1:33:fe:f7:7f:84:a2:18:bc:e4:8c:95:ba:
         87:c1:05:dd:86:a9:88:17:eb:e5:92:aa:2c:86:51:3d:61:7d:
         0a:e8:84:a8:d6:a6:7b:fa:f0:ac:40:27:62:dc:b3:19:d2:62:
         36:9f:9c:a2:f3:b3:da:ed:62:a2:13:19:1a:78:3f:e0:9e:b9:
         6f:a7:ae:79:0d:f5:2e:26:c3:47:17:f9:e9:83:5f:66:62:84:
         a5:82:07:ad:fb:3e:23:f6:95:00:7b:5a:60:e4:38:6a:f7:64:
         c2:58:59:c7:f4:f3:a3:c5:6c:e6:e5:2d:89:6c:3d:0a:3f:59:
         55:bf:54:9a:41:00:94:87:45:b4:d6:56:70:4f:ba:e2:aa:22:
         82:9e:ad:d0:60:bb:94:5a:6a:88:b7:a2:0d:3c:45:74:53:cf:
         31:ac:f5:12:c0:00:da:03:bb:18:b4:50:28:01:bd:14:c5:6e:
         21:82:4a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4SsxxPSdmACWVkIrFEKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj
YjhmNDgwHhcNMjUwODIzMTcwMTU0WhcNMjUwODI0MTcwMTU0WjAzMTEwLwYDVQQD
Eyg3OGY4MjU4ODA5NTUyZGIwOWUwOGE4OGExMGQ1OWQ5MDk0MTY5OThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02MEJswnvqS+PcWo0xwaz6s/o+Cl
GMvwj0CLBiWJjloXRf1a4IevNauoUNsTGGgoDMqX7P8BKFD7GoT32tSOY6nJLr6R
T0nYtpk/vccFIzq5VGS9l0TZIOUerDguY1mYhnrs+2FbuiIcHGFu6zxi7G0r7DRF
yvr8dnjSKofUBaVURjTsVu4azP8tBzFhm7O1eq+YBk+wxt0+YGhVj1i75H2HEIOx
cr6Snq80BYdrVwCX8SIIknlhdhLA1XN1ty3F3NQUl9Pi/rdl1g/2ummN4YWuUuo5
92zsJ0kqzZAjFCqrx6fWnlMchTP0w/BEW3zNWju58Ozx0YzLuJRAiBY2dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj4JYgJVS2wngioihDVnZCUFpmMMB8GA1UdIwQY
MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt
NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0
LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdWgfFiQ
NmSFhcJz6qvhMgOFa3OV7VcTwp6jHGuDpMppnEq+O//k7dA5JDJIHFfIef441IFQ
9eDqV8Jg/RPtpg157Co9cGbF1Hj6Y2ThM/73f4SiGLzkjJW6h8EF3YapiBfr5ZKq
LIZRPWF9CuiEqName/rwrEAnYtyzGdJiNp+covOz2u1iohMZGng/4J65b6eueQ31
LibDRxf56YNfZmKEpYIHrfs+I/aVAHtaYOQ4avdkwlhZx/Tzo8Vs5uUtiWw9Cj9Z
Vb9UmkEAlIdFtNZWcE+64qoigp6t0GC7lFpqiLeiDTxFdFPPMaz1EsAA2gO7GLRQ
KAG9FMVuIYJKRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:31 2025 by rpki-client