Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File:                     MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier:          nxJKcff+Kj2aJG6iUELIa72Is2Os1jjyDRGDpRGqKZk=
Subject key identifier:   A6:A0:45:E6:66:A7:FA:5D:44:CA:EB:0F:B1:F8:FE:11:47:60:C7:F6
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer:       /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial:       01987E9CEC3790AED1989BE702CA7C3628EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number:          37
Signing time:             Wed 06 Aug 2025 09:01:09 +0000
Manifest this update:     Wed 06 Aug 2025 09:01:09 +0000
Manifest next update:     Thu 07 Aug 2025 09:01:09 +0000
Files and hashes:         1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: +Myew64XypX7J15FU+4Ok0wIlKnX58TB/DFp39z3Ktc=)
                          2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:ec:37:90:ae:d1:98:9b:e7:02:ca:7c:36:28:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
        Validity
            Not Before: Aug  6 09:01:09 2025 GMT
            Not After : Aug  7 09:01:09 2025 GMT
        Subject: CN=a6a045e666a7fa5d44caeb0fb1f8fe114760c7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:b2:8e:23:61:d5:8b:f4:1f:19:7f:d0:1f:
                    35:87:db:af:c5:55:f4:b4:9b:fb:25:f3:49:33:48:
                    05:1d:13:96:c1:c8:da:dd:4c:70:b7:56:5a:e0:3c:
                    18:e6:44:85:47:b1:6f:7a:50:bf:fb:4a:8e:ed:a0:
                    6e:f6:36:08:23:8e:6c:9c:7d:9b:7e:02:37:eb:a7:
                    43:34:b3:3f:a4:24:12:07:80:a8:fa:1d:87:34:0a:
                    94:22:6d:48:65:7a:3e:a3:7f:ca:ea:3c:6e:49:2d:
                    d1:43:bc:6f:58:bc:08:3c:fa:2d:4c:fe:c1:01:3c:
                    0b:bb:76:1e:cd:d6:42:17:81:1d:3d:12:ad:b2:60:
                    3f:39:30:e7:de:9e:18:c0:76:65:7e:eb:ef:b6:ad:
                    cb:bc:a2:c4:8b:84:ca:17:60:57:34:a9:4b:87:e7:
                    b6:a7:a2:f3:7a:96:ac:b0:df:f5:1f:2f:2b:26:45:
                    9c:26:1b:64:0b:07:db:7e:91:eb:cb:b8:1c:b9:a4:
                    f2:2d:67:43:cc:ea:92:ab:46:f5:ae:6e:8f:21:42:
                    6d:2d:ae:41:b1:93:e5:a4:94:bb:68:a6:4e:21:5b:
                    86:10:38:31:c4:24:4d:72:0c:98:d6:27:ce:b5:ef:
                    9b:2d:e8:63:d6:58:c3:7b:e5:e2:0c:2f:ae:7d:a0:
                    4f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:45:E6:66:A7:FA:5D:44:CA:EB:0F:B1:F8:FE:11:47:60:C7:F6
            X509v3 Authority Key Identifier:
                keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:d7:86:83:e7:4a:74:86:70:0a:f8:72:be:7f:45:6e:bb:
         81:4d:e6:85:72:4a:09:bd:51:44:2d:31:6c:67:e3:c1:5d:cd:
         05:7b:ef:87:57:aa:85:bd:ad:8e:97:77:4f:23:a2:04:23:3d:
         f8:28:97:66:c9:91:a6:78:a3:92:ee:17:1b:6a:01:7b:21:59:
         5f:f6:b2:98:35:6b:f6:ff:30:34:f9:8d:51:7c:a5:7e:15:30:
         99:24:1a:97:54:9b:72:7d:9f:90:36:ff:9f:78:6f:4e:d2:b4:
         31:9b:bc:02:62:c8:48:5d:84:d5:52:5d:28:f8:25:dc:dc:f3:
         3c:f7:ed:1f:01:aa:e5:d6:cd:2a:d9:77:d4:b2:ae:c5:f0:9f:
         f4:f4:fe:8f:62:ea:06:ac:a2:a6:17:ef:c0:09:91:69:e0:d0:
         a1:8b:b5:b1:d6:bc:5d:fd:16:c2:15:e6:ff:80:1e:ba:cd:47:
         81:f3:7f:53:31:58:72:97:8a:51:e5:34:b4:e9:a0:a7:1b:3b:
         cf:bc:0d:bf:5e:da:6a:04:6e:e5:99:de:2e:f0:e4:ee:e3:f7:
         55:1d:8d:cc:3c:fc:6d:25:e1:78:2a:e0:c4:bb:bf:7b:f4:d8:
         b9:44:31:12:fb:a0:b3:c4:f3:a9:99:80:36:6b:5d:0f:4d:3d:
         64:77:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:24 2025 by rpki-client