Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File:                     MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier:          VwmosnoF4UBRYrzYwX38/TFVbQF9+ttvI9Z0wLNd+Z4=
Subject key identifier:   1B:63:F2:1D:2E:CE:37:5E:BA:FF:FD:DB:10:27:26:D3:19:2D:EB:1C
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer:       /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial:       0199FD6B1ACF93F71FDA9692AA589314FD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 17:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:18 +0000
Files and hashes:         1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: AM43fm7R4D+sV3/9NFizGJZMQIBDCab0gK6BTRgrmqw=)
                          2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
                          3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
                          4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:1a:cf:93:f7:1f:da:96:92:aa:58:93:14:fd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
        Validity
            Not Before: Oct 19 17:01:18 2025 GMT
            Not After : Oct 20 17:01:18 2025 GMT
        Subject: CN=1b63f21d2ece375ebafffddb102726d3192deb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:6a:12:ae:0e:02:3d:af:90:26:0f:3d:c9:
                    2f:81:58:38:06:a3:40:a8:54:37:92:9c:48:b1:6b:
                    9d:de:6d:82:bc:3d:91:69:49:6e:a4:18:74:c7:46:
                    18:17:27:42:71:7d:03:e8:60:35:be:8a:0b:e4:d6:
                    8c:85:bf:fe:e5:24:2b:a9:f7:60:0f:8f:2a:b8:b2:
                    fa:a0:7a:67:91:85:2c:68:f6:00:be:ec:50:95:ff:
                    d9:5f:00:5b:9d:b2:b9:d0:0e:53:b8:e6:39:4c:94:
                    79:f7:01:c4:46:03:7a:29:ef:db:a0:29:8b:db:79:
                    6b:02:f8:0d:e6:33:73:88:4e:df:df:9f:16:af:30:
                    87:35:1c:bc:94:78:51:54:c1:d6:af:27:c4:d7:ea:
                    4e:36:b6:8c:90:a5:06:e2:56:9e:2d:5e:70:78:5a:
                    14:65:cd:08:8f:c6:b6:08:38:cf:7b:05:4a:a7:e7:
                    f3:0c:11:3d:45:ec:d8:13:a2:96:58:6d:c3:0c:5a:
                    25:de:e0:54:c9:a9:1e:e2:a7:3f:92:eb:17:ba:89:
                    b4:9c:41:61:fc:f7:75:06:8b:a7:c6:5e:fe:fb:d7:
                    b7:9b:20:a4:81:ea:dd:78:ed:2c:98:a5:34:5c:b9:
                    4f:01:e4:c6:a3:e0:43:3b:80:16:ca:62:16:37:31:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:63:F2:1D:2E:CE:37:5E:BA:FF:FD:DB:10:27:26:D3:19:2D:EB:1C
            X509v3 Authority Key Identifier:
                keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3d:bb:73:e1:64:b5:17:48:09:d0:f5:18:7e:fd:60:45:ff:
         8e:e3:5d:9e:25:09:ac:06:97:50:74:b5:10:78:d0:2c:94:74:
         ee:ee:2b:53:2a:88:cc:51:9f:b5:ec:34:df:dc:29:4f:d0:76:
         46:da:a5:c2:e1:cb:d3:c0:71:98:2d:fa:39:ec:71:6b:47:ae:
         0f:0e:43:81:76:3f:6c:e8:4a:1e:38:df:34:03:35:14:9e:31:
         7a:35:97:1a:85:12:1f:fe:0d:ac:5a:cd:b6:8d:4e:6f:db:40:
         67:bb:10:ef:c4:ce:d6:32:78:14:6d:93:d6:bf:91:a7:b8:97:
         8b:76:79:bc:e9:df:2c:54:3b:20:e3:e7:46:e8:1b:6f:af:03:
         77:e7:27:f8:9a:9d:ba:d3:92:2b:fe:b0:71:22:f7:de:d2:74:
         8e:a6:4f:da:d7:8f:dd:01:51:85:58:22:6a:3e:d8:66:74:91:
         4a:88:5f:4e:75:64:ef:c7:cb:ef:58:80:7d:ac:65:98:01:2e:
         61:fa:e3:ae:0b:13:b0:4d:92:9f:3e:bf:38:6e:df:0a:2f:d2:
         7b:ac:d7:3d:c6:2c:af:e9:62:be:01:88:d5:8d:14:23:28:9f:
         ff:2d:b5:6e:b9:3f:49:eb:0f:b2:c9:8e:ac:f8:6f:e5:f4:35:
         a5:31:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:57 2025 by rpki-client