Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          VU55iMIrl2ctj7M6SnPVVCdEO5L2FRjf/CinQNDqTzg=
Subject key identifier:   9E:9F:46:D4:2B:CF:02:56:B7:6F:34:78:99:21:01:C7:77:59:D4:BC
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       0198CA256008E0B67E4043BE17F688207761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          14BA
Signing time:             Thu 21 Aug 2025 01:01:43 +0000
Manifest this update:     Thu 21 Aug 2025 01:01:43 +0000
Manifest next update:     Fri 22 Aug 2025 01:01:43 +0000
Files and hashes:         1: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
                          2: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
                          3: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
                          4: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: a0OOWV87/2CrJpVe4JW8Jxo8f5Az8qR4X7nk/vRXJbw=)
                          5: wEwtO0NZ6TXQX8gg0IJb0VzbQ-Q.roa (hash: FcEEWrJiS8yPWJa3yj7NmskgZezjJ7BeD2/PrD66/Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:25:60:08:e0:b6:7e:40:43:be:17:f6:88:20:77:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: Aug 21 01:01:43 2025 GMT
            Not After : Aug 22 01:01:43 2025 GMT
        Subject: CN=9e9f46d42bcf0256b76f3478992101c77759d4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:05:92:30:c8:25:c3:6e:41:fc:29:ba:2f:41:
                    76:38:c1:4e:f4:3c:d7:78:7c:86:3f:b8:97:25:ca:
                    6f:64:2f:1b:1f:8c:72:54:f7:e0:4d:60:bd:62:78:
                    b0:0a:a7:d7:d6:8e:4a:d8:56:3f:48:af:eb:44:c3:
                    c7:28:4c:13:dd:07:a6:db:de:23:e1:44:bd:d6:5f:
                    d2:49:d8:d4:65:88:bf:fb:bf:5a:a2:0c:34:e0:90:
                    0a:d4:40:09:ec:f8:ff:0b:bc:72:e2:0a:ba:76:7e:
                    65:5a:a7:43:44:d3:b3:ec:f8:54:54:ce:7b:cd:e9:
                    62:6f:b9:52:75:43:cb:55:91:d0:f5:d6:17:b8:8d:
                    59:05:7f:6b:cb:28:d9:e5:00:d2:08:f5:a3:ff:c9:
                    81:bf:68:45:7b:78:4c:81:4a:ea:ea:77:a8:2e:e2:
                    1c:4c:d6:50:5b:9c:f2:cc:43:16:bc:c7:fa:39:85:
                    42:e2:22:b0:3b:bb:a9:c9:b4:a5:67:fa:d7:dd:4b:
                    80:54:40:b3:da:f9:55:0a:dd:d3:94:a9:82:27:61:
                    20:be:53:00:f4:df:27:e5:7e:56:f2:a6:5e:1c:54:
                    b4:13:b1:68:28:26:b1:2e:b3:47:37:85:54:e8:42:
                    ef:13:8d:f9:98:e7:67:3b:31:c6:88:b7:b1:25:0f:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9F:46:D4:2B:CF:02:56:B7:6F:34:78:99:21:01:C7:77:59:D4:BC
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:66:a1:c0:c3:3c:8d:ae:1b:c7:9e:cb:c6:7d:dc:bb:52:
         f2:80:91:76:96:b8:1f:97:a5:18:7a:62:86:55:a3:6d:4f:04:
         b2:65:df:e4:3b:d5:bf:c3:82:67:b9:28:20:1d:d8:06:b3:4e:
         18:6f:60:e2:94:49:7b:da:d5:36:25:c7:7a:b8:29:e5:87:68:
         b0:eb:1b:0a:0f:45:a5:dd:bb:bc:cf:87:e9:88:1d:9f:46:0d:
         4b:fb:8f:f9:61:ce:81:6f:fc:8d:bc:33:d1:9f:fa:2c:29:6e:
         db:d8:10:3c:69:e9:85:82:ab:27:01:a9:d8:42:86:6b:b3:52:
         36:fd:ed:df:e6:40:00:40:9a:73:89:5f:f9:4a:40:d8:2b:63:
         36:b2:c8:e4:68:95:ab:34:4d:aa:70:cd:95:03:a7:39:87:c2:
         dc:33:9a:2c:d6:6d:d6:ec:b3:eb:87:2a:9a:b7:7f:8e:c7:00:
         8e:86:68:d8:d4:c9:26:87:f3:9a:8e:88:13:32:b4:3c:8a:be:
         d1:20:ec:3a:14:1a:d6:ba:bb:73:05:07:b8:de:1a:f5:88:cb:
         d0:27:4b:db:5b:37:5e:8d:2f:03:cd:fe:9f:74:37:fd:94:11:
         81:72:72:37:38:b5:59:75:31:1d:3d:d1:1e:ab:9c:e5:55:76:
         e3:a7:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:52:28 2025 by rpki-client