Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          8BKBKZYz2L+3vVMkgBO9SSA8nfxsJR2Elhv6lW+FwC8=
Subject key identifier:   D3:5F:CB:2E:02:31:78:67:A8:0B:51:91:DA:5B:02:0D:D4:95:46:8A
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       0198D4E000A5E332A729E2E04B98F6571672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          0599
Signing time:             Sat 23 Aug 2025 03:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:46 +0000
Files and hashes:         1: HB4IhdwJTMbxhpvjbt56qq4pRj4.roa (hash: 9DEHc5XR7sLsTAJDe4PK9ikNGkjNKZGV2LC/PP63QHo=)
                          2: LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa (hash: x/LQ85Ba6X1diSN88n/xPeBpJxAdwtrVHussR4Eyk+s=)
                          3: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: z8mDz8MiqATVFoa1t+t7431dpehciuOHh11tX6uyXfk=)
                          4: VAFUCoUK_BVxyNjCRQWaoFAcB9M.roa (hash: vDTV3bo0aODJvLN0QwS2mzTjLvwXVgvjezjkUwqmkNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:00:a5:e3:32:a7:29:e2:e0:4b:98:f6:57:16:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Aug 23 03:01:46 2025 GMT
            Not After : Aug 24 03:01:46 2025 GMT
        Subject: CN=d35fcb2e02317867a80b5191da5b020dd495468a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:22:4f:1b:3a:6f:3b:9c:cc:22:93:fc:8c:
                    2d:a6:27:e6:8e:4a:4b:c0:59:cd:5a:50:c2:fe:67:
                    3c:38:bb:f8:97:b7:0f:c9:ea:f6:96:c3:ff:57:ed:
                    80:c6:23:0a:65:90:9d:8f:12:80:1e:bb:cb:76:88:
                    0a:19:d0:b3:7f:b8:c4:c3:8e:e8:a8:6a:ab:1b:1d:
                    c7:a8:c4:e5:4b:4e:5d:a8:d0:f0:8a:e0:33:96:35:
                    47:08:da:68:d3:7d:73:85:fd:df:05:d7:9f:90:38:
                    52:fa:88:12:6c:4d:3c:d2:72:04:ce:82:cd:eb:f9:
                    49:b9:d4:ab:89:92:a6:d4:7a:4c:79:cb:cf:43:4b:
                    84:0a:d3:48:cb:9d:c8:b3:9e:66:a4:18:f5:bf:01:
                    8e:64:2e:e2:fd:9d:dc:71:0e:ec:47:de:9b:28:99:
                    21:cd:6b:51:6d:59:a5:eb:6e:e0:be:83:af:b5:19:
                    7c:9c:fb:8f:52:e1:f1:74:8e:c7:23:e9:0a:d0:05:
                    32:27:0d:e3:37:45:b2:60:17:04:45:2c:69:85:c4:
                    f6:f4:12:67:0e:a6:eb:5b:43:e5:f5:7a:30:2d:ed:
                    93:f6:99:b3:f9:91:0e:2d:83:1b:0f:c5:94:1c:04:
                    77:af:59:4e:e6:46:d6:93:34:e9:f2:50:0b:72:f6:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5F:CB:2E:02:31:78:67:A8:0B:51:91:DA:5B:02:0D:D4:95:46:8A
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:3d:a6:ae:d2:6f:53:aa:17:19:e4:1f:6c:50:98:22:a9:
         67:13:97:b3:55:d5:62:90:76:0b:3f:4f:e9:27:01:3b:a9:fe:
         41:6a:e2:f4:3c:a4:ce:fd:aa:14:b8:2e:21:f8:ea:59:c2:ce:
         fc:4a:7e:43:8a:86:49:b5:f3:7f:de:c2:8f:b6:62:73:8b:7a:
         b5:cd:b4:bd:b5:9e:bb:29:b4:ca:39:22:79:0c:cd:9b:19:cc:
         68:a2:ab:8b:ca:b7:48:7c:45:d1:ec:a5:6e:bd:74:25:f4:c1:
         4c:0c:f4:db:b4:ba:08:68:41:49:ca:3e:0c:10:58:af:78:3b:
         c5:66:25:3c:0b:a4:87:ae:f0:02:f4:f7:4d:37:77:42:71:99:
         a3:9c:c1:e0:42:d5:91:f8:a1:98:f8:3c:b0:16:2b:fb:c0:54:
         dd:1f:a3:77:9c:55:30:d3:a0:f5:a6:1f:14:e8:b4:12:90:e5:
         6c:1c:e0:f9:30:68:34:2e:95:86:a7:a2:85:59:c1:a6:6b:9e:
         72:e5:99:a5:b3:54:0b:93:ac:c8:af:76:91:ea:d2:a5:b9:ae:
         8c:e1:11:2f:e1:52:78:2a:c9:e1:b4:0d:31:8b:a1:59:82:67:
         3f:1f:3f:3b:be:3f:be:96:12:4d:ff:17:83:c4:bc:01:cd:68:
         12:ac:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:17 2025 by rpki-client