Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File:                     MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier:          6nRkvyNvhtZIVJfA+Mb1yGX55HSKfGsuTQVdJ36BeFE=
Subject key identifier:   82:CD:01:19:25:75:E9:01:41:9B:47:BF:A1:08:2D:CB:EB:DC:A5:61
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer:       /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial:       019844AC88F74E43FF28D9735615F2CB77CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number:          046E
Signing time:             Sat 26 Jul 2025 03:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:14 +0000
Files and hashes:         1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: 5KnwxIWWznk/Rgw3LTkhLgH0d5576Z8+X/iTDOhzo48=)
                          2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:88:f7:4e:43:ff:28:d9:73:56:15:f2:cb:77:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
        Validity
            Not Before: Jul 26 03:00:14 2025 GMT
            Not After : Jul 27 03:00:14 2025 GMT
        Subject: CN=82cd01192575e901419b47bfa1082dcbebdca561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:d0:5a:5a:be:cf:01:47:59:4c:17:46:7c:
                    1b:5d:be:d3:5d:c2:bc:d7:95:94:45:94:6c:97:7d:
                    62:46:92:64:af:7d:33:4c:21:fc:68:58:ea:2f:25:
                    40:57:0a:9f:25:ae:cd:65:e3:7e:12:5d:ca:60:ad:
                    eb:46:4c:46:3f:0a:ae:1a:7a:98:af:0d:9c:f9:73:
                    6c:9e:ed:c5:ba:c1:0b:23:ab:32:08:7b:12:06:d9:
                    7f:8b:c3:cd:4f:ac:ec:25:69:9a:4f:23:ec:25:52:
                    f1:9d:32:e0:3f:80:53:0b:a8:93:e6:4c:dd:65:32:
                    4a:b9:fa:16:b7:bc:41:77:a5:8b:cb:ee:b6:07:20:
                    8e:9a:4d:b2:99:05:5c:36:36:ef:92:d2:64:3f:03:
                    eb:f7:4d:c6:f6:5f:18:8e:f8:e7:34:e4:25:05:45:
                    99:ba:8f:35:67:33:e5:0d:0d:00:2e:d8:ad:e8:8b:
                    7f:38:08:5d:24:be:2a:eb:76:48:3e:22:fb:1e:be:
                    cd:5e:77:dc:ce:b7:e9:c9:3b:5f:26:da:d6:c9:bf:
                    1c:24:fd:e6:72:1e:d8:d6:e7:7c:04:bf:f4:8c:62:
                    f6:6f:20:f8:24:fb:94:96:6f:52:54:4b:b2:97:28:
                    3c:d3:5a:d9:9d:be:02:eb:b3:77:53:01:c3:51:cb:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:01:19:25:75:E9:01:41:9B:47:BF:A1:08:2D:CB:EB:DC:A5:61
            X509v3 Authority Key Identifier:
                keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:63:90:a2:8e:30:48:a1:df:cd:6d:7c:e3:ca:87:27:ba:
         92:07:50:f7:6e:6e:c0:3e:e8:1a:d5:17:4d:f1:07:4d:2e:95:
         c8:28:cf:a1:0a:e2:e6:ee:23:c2:04:49:fd:26:9d:19:bf:c3:
         30:f5:3c:b6:e1:49:a7:a1:3f:9e:3c:bb:92:21:a0:78:88:86:
         25:31:a1:c2:91:27:aa:ad:7b:90:9d:b3:2f:fa:f4:98:1c:e8:
         3d:25:77:75:83:85:62:69:36:75:81:47:92:3c:46:9c:71:d6:
         99:fa:10:fb:6b:a0:41:ce:26:a9:f2:6c:68:43:b9:a9:fa:5a:
         83:16:24:51:89:a4:dd:b6:20:30:36:c9:bc:25:7a:c1:84:65:
         2e:e5:23:0e:7d:5a:10:27:4d:63:f0:e4:6e:1b:66:8c:62:35:
         ca:21:8b:44:4d:a4:09:59:56:23:21:30:61:b1:53:5e:bd:d5:
         89:be:5a:47:f7:1e:6e:7a:5f:96:da:9d:87:8d:1e:e5:55:96:
         a0:ae:9d:18:f8:8f:15:97:93:8c:98:d9:72:1d:29:62:48:68:
         76:fd:22:0e:29:35:db:ed:fb:bb:e2:5d:2d:50:3c:f9:c2:25:
         02:64:4f:45:9b:72:7a:50:da:85:6b:e5:c2:d7:39:20:aa:c5:
         51:ce:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:02 2025 by rpki-client