Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          Hpz21j2HMQQBlocIWC0gXDzyUzFsATxyPRuanRVnvuE=
Subject key identifier:   72:67:D7:6F:17:63:8E:25:89:0E:6B:4F:CC:38:76:66:76:8D:FF:90
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       0198D84F6AC3E0342B6FA42FCBE9365CD4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          06FF
Signing time:             Sat 23 Aug 2025 19:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:20 +0000
Files and hashes:         1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
                          2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
                          3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
                          4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: GYLswnIYrz1LwIyYmV8IPUd5YPQo+wPm4jvcnU9gg6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:6a:c3:e0:34:2b:6f:a4:2f:cb:e9:36:5c:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Aug 23 19:02:20 2025 GMT
            Not After : Aug 24 19:02:20 2025 GMT
        Subject: CN=7267d76f17638e25890e6b4fcc387666768dff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:3d:d8:2b:64:27:73:85:e5:68:7d:70:49:
                    44:59:5a:79:e2:1c:be:f6:a7:e7:a1:f0:71:4a:7e:
                    fe:5d:3b:8f:70:30:08:10:3f:cc:2a:47:bc:5e:85:
                    db:4f:81:f2:99:ce:17:2c:71:46:4c:a6:f4:52:51:
                    9c:62:94:7a:b3:a1:f0:49:c2:b7:5c:55:db:98:a2:
                    ba:37:df:93:66:01:a7:8b:8d:09:2b:b7:fb:86:6c:
                    be:fb:ca:7f:8d:2d:c8:fe:3f:8a:89:21:25:2e:7b:
                    4f:cd:9e:04:27:ae:1c:8c:17:37:c7:76:a3:95:18:
                    0b:b2:74:b6:9a:88:73:c4:1b:a6:be:f7:fa:9c:be:
                    af:92:76:24:97:89:04:b2:93:ac:2c:6f:11:80:96:
                    3b:a9:6a:87:15:f0:25:35:53:66:0c:16:00:1c:7c:
                    c0:06:a4:50:5c:08:83:49:95:76:c3:8f:4b:bc:ef:
                    eb:e3:45:a5:f9:09:56:c1:12:6d:83:c7:5a:b1:d9:
                    18:b1:b4:cf:c5:1b:1f:5c:32:da:8a:f1:d5:d7:0a:
                    bc:ad:cd:98:2a:25:c7:c0:aa:2b:a6:e3:b6:f4:43:
                    d4:0f:e3:74:d0:ef:09:33:fe:20:39:48:54:81:f6:
                    4b:3a:09:08:1a:5c:00:cd:7b:73:46:7e:65:8f:ae:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:D7:6F:17:63:8E:25:89:0E:6B:4F:CC:38:76:66:76:8D:FF:90
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:cf:0b:bb:c1:21:ba:a9:23:5b:f9:81:e1:fe:85:40:c2:26:
         44:ca:05:c9:05:81:2c:f9:fc:06:4c:3d:d3:76:7c:3e:23:55:
         a9:2a:6a:42:e3:70:18:68:4b:47:af:fa:ba:88:c0:8c:45:6b:
         c2:a3:56:f2:aa:c6:5b:52:10:c9:a8:6f:38:f5:60:3c:c2:b9:
         89:a3:52:a9:68:ad:55:41:a5:b4:9f:39:47:a3:6e:f1:76:d7:
         e7:eb:99:36:f1:9d:f1:ba:a2:99:84:f0:af:3e:ed:ed:b7:c5:
         02:3a:1e:7c:cf:ba:16:75:3e:8d:dc:5a:e9:01:78:3e:0e:97:
         84:21:fc:74:03:4f:4f:db:ea:50:1a:9e:5e:b4:4c:eb:ea:16:
         6f:95:48:b8:42:6c:98:1b:bd:dc:70:4a:ca:21:9e:51:a0:96:
         10:87:30:86:f6:7b:2a:6e:cf:60:24:78:de:6f:97:85:82:bb:
         89:7d:f7:61:03:7c:cd:4c:35:b0:c5:ef:76:e0:76:6b:1d:4c:
         83:f5:73:ec:a7:2e:64:be:46:8d:8b:8b:ec:1b:28:e6:cd:18:
         ad:26:58:e0:75:84:be:9a:85:2b:6f:2e:dd:cf:8d:40:a8:0f:
         9f:d8:da:4b:a0:9d:a4:6d:51:da:54:8b:c4:d5:b3:b1:fb:42:
         eb:2f:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:34:18 2025 by rpki-client