Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File:                     MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier:          e60DFB+fxKaYfJM3QuZBz4b3py+7+iFA9kzcidsPi2o=
Subject key identifier:   B3:48:17:49:30:C2:F5:18:C8:98:AB:33:31:95:F1:53:6B:06:92:86
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer:       /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial:       0198D583478738DC67B47A99913DBB47D0F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number:          64
Signing time:             Sat 23 Aug 2025 06:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:06 +0000
Files and hashes:         1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: nY269hJYiab8FRDd9Odk6Q4r8D8smCPGa9NzoSWoaK0=)
                          2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:47:87:38:dc:67:b4:7a:99:91:3d:bb:47:d0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
        Validity
            Not Before: Aug 23 06:00:06 2025 GMT
            Not After : Aug 24 06:00:06 2025 GMT
        Subject: CN=b348174930c2f518c898ab333195f1536b069286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:15:37:95:bd:f3:53:72:58:17:3a:5f:43:
                    a4:f2:40:30:77:9b:b0:aa:96:49:1b:9c:9b:39:e4:
                    81:3b:4a:91:b3:14:2d:48:00:4e:85:25:b1:9e:09:
                    3b:65:cb:08:eb:ad:4d:7a:3e:94:8e:4f:d0:b8:04:
                    1a:5c:a2:33:58:b2:41:0b:ae:e4:4b:8c:20:d3:77:
                    1b:bd:26:f9:2b:55:a5:a7:30:79:3d:85:9b:73:14:
                    b3:66:6d:b8:ea:08:15:44:8a:83:60:2b:dc:1f:d8:
                    cc:7e:7c:89:3b:4a:9e:3e:b1:73:d3:5c:dd:6a:82:
                    3e:0c:50:76:f2:1a:c8:c6:6f:81:43:fc:6e:3c:8e:
                    fc:18:fd:73:04:66:13:a2:6e:92:11:ee:99:df:bc:
                    9b:11:1e:21:a7:69:0e:3e:9f:62:32:97:0d:6f:34:
                    3c:82:1b:d6:96:89:d3:10:5b:ec:a6:51:1a:bc:71:
                    68:c7:27:2a:75:80:ec:4d:a1:0d:be:e7:2b:2a:6a:
                    2d:c6:3f:64:c9:c1:bb:0c:08:6b:24:7e:6b:80:7d:
                    79:ae:cd:3c:ba:8d:ce:70:36:7d:28:0c:ca:0e:9f:
                    ea:d6:7d:96:e8:4a:63:36:73:3d:83:e7:55:d2:7d:
                    50:60:93:44:62:4a:c3:ac:e7:68:9f:75:75:3d:58:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:48:17:49:30:C2:F5:18:C8:98:AB:33:31:95:F1:53:6B:06:92:86
            X509v3 Authority Key Identifier:
                keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:12:53:50:76:2b:2b:74:c0:11:5a:90:69:d5:57:74:74:a8:
         b3:aa:e2:0b:61:9c:af:8f:12:11:e8:94:eb:47:0b:4f:10:fa:
         bd:51:f5:a6:94:d8:b5:d7:2a:7d:51:b6:f0:15:d4:82:10:01:
         99:3f:a3:a5:91:9a:e2:8c:99:60:56:52:ca:0b:a9:5e:cc:81:
         85:c2:f7:6a:3f:04:f5:50:15:90:b6:c0:00:4d:a2:b4:8e:53:
         54:6c:b5:da:4d:44:97:c5:3b:2b:74:a3:fb:1c:c6:88:5f:f0:
         25:9f:bd:92:ff:70:e8:5e:bb:fb:41:d0:5b:34:c8:7f:64:f5:
         e2:83:02:59:a5:cd:58:70:94:c4:9a:7e:b6:03:22:5d:5f:37:
         94:73:c4:7f:3b:2e:88:45:ce:54:4f:77:03:96:20:4b:ab:1e:
         76:2d:88:f1:a9:af:98:d1:b2:7b:e6:0e:e7:fe:79:83:ca:22:
         13:6b:20:7e:f4:ae:08:a6:68:ee:72:b1:ae:51:78:b1:0f:2e:
         63:66:f9:7e:06:c3:15:45:14:2d:3d:9f:ab:49:bf:dd:22:08:
         07:c7:d4:3e:d5:3f:e4:42:ea:7e:9d:d7:e9:df:ac:f4:48:ea:
         ca:3b:d0:4d:cb:ae:17:84:37:33:0f:20:da:01:a4:29:da:de:
         04:8e:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:43 2025 by rpki-client