Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File:                     MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier:          ce7evu6BsvU8sqVAxjcBsJTPRr/9HWhL2H6YdVvawzQ=
Subject key identifier:   0E:5D:95:51:62:DA:2F:91:E8:AB:D0:8B:C7:00:C0:B4:4F:E9:5B:D2
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer:       /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial:       019A25F86B05C4B1F3A0376B208EF6DD1A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number:          156C
Signing time:             Mon 27 Oct 2025 14:00:28 +0000
Manifest this update:     Mon 27 Oct 2025 14:00:28 +0000
Manifest next update:     Tue 28 Oct 2025 14:00:28 +0000
Files and hashes:         1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
                          2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
                          3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: OIjXQZmWtYayNpqRbuY8FTl07VYCXD3kwkQA84ldE5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:f8:6b:05:c4:b1:f3:a0:37:6b:20:8e:f6:dd:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
        Validity
            Not Before: Oct 27 14:00:28 2025 GMT
            Not After : Oct 28 14:00:28 2025 GMT
        Subject: CN=0e5d955162da2f91e8abd08bc700c0b44fe95bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:7e:c8:2f:7e:d4:b8:41:1b:d9:b3:e7:41:
                    d9:d9:53:c8:2b:9f:33:78:aa:93:ef:78:f6:ab:10:
                    c1:40:66:26:72:f2:fb:62:36:3e:0d:2a:c7:00:d6:
                    ca:d4:7c:10:88:85:5c:3c:1f:c7:38:c8:e6:df:32:
                    46:95:66:56:1a:51:8e:74:49:e1:c7:59:4e:c3:7e:
                    9d:a9:49:19:61:9c:ba:ae:71:5d:8b:53:b4:dd:9f:
                    f6:ae:aa:5b:db:8c:2b:7a:ee:cb:a8:5c:17:b5:ec:
                    10:5c:87:8d:5e:75:45:f7:10:68:2d:d3:6b:e9:af:
                    2d:2e:10:2d:fc:fe:9d:8a:23:a8:61:c5:33:bf:77:
                    ac:a4:ad:8d:97:0c:ba:47:7b:88:ea:c1:5c:7f:d4:
                    6d:f3:1d:4f:16:cf:52:ca:52:76:d8:2f:2a:ea:2c:
                    e8:cc:2f:65:61:24:38:cd:f2:e4:17:02:32:2d:e2:
                    d8:42:0e:82:2e:f3:7d:45:ee:92:20:ec:06:f8:9d:
                    2f:f2:70:cf:7e:2b:fa:d4:ff:86:1b:af:41:b0:d9:
                    de:14:72:ba:2d:21:43:75:28:8a:4d:43:39:d2:3c:
                    d3:40:ee:ad:3d:83:0e:20:32:63:8a:12:46:d4:ad:
                    8d:25:11:09:a3:76:f2:06:82:a6:8f:ac:be:c3:d9:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:95:51:62:DA:2F:91:E8:AB:D0:8B:C7:00:C0:B4:4F:E9:5B:D2
            X509v3 Authority Key Identifier:
                keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f4:01:7c:f1:95:30:72:bb:b7:f5:7b:e9:0c:ad:4b:6d:47:
         f5:7b:05:2d:e5:a1:72:b5:e1:1a:3e:46:a0:6f:91:f0:9e:60:
         e3:c3:0b:6f:d3:e3:d3:a9:cb:ad:ee:86:dc:c5:9d:ae:d5:b8:
         71:98:bf:9c:ad:52:14:95:47:85:01:b7:3b:3f:78:be:a5:ea:
         68:15:77:ba:0f:74:83:1e:bc:e1:c3:38:bc:e9:84:71:24:ca:
         82:78:97:ee:07:46:a6:fa:4d:96:e2:f5:bd:8e:ba:76:17:55:
         46:1f:23:c2:ce:9f:62:f3:d4:07:7c:41:2f:e3:4a:b9:ae:78:
         0b:80:fd:7d:63:b9:79:47:9c:aa:7f:4f:79:da:a8:6a:e7:94:
         6c:33:cd:b5:2c:e3:85:36:19:04:14:74:c2:0a:3a:ee:2c:bd:
         71:47:43:f3:5a:9c:d3:9a:7e:14:00:ee:db:da:c0:81:c2:96:
         a5:c9:87:71:ab:65:01:b1:d8:07:5b:12:2e:1a:c1:7f:65:4b:
         17:de:30:60:0c:d3:57:b4:a2:59:7f:0b:b6:9b:2b:ce:2b:eb:
         5d:1a:ca:be:88:7b:39:ba:8f:74:40:26:d8:cc:95:af:72:4b:
         3d:05:6b:8a:74:51:59:15:ea:c7:45:30:a8:5d:d5:5e:92:08:
         72:56:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:05:03 2025 by rpki-client