Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File:                     Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier:          md+odXMO0r244pNNaZ2dvsp1hc4lqkVvSHO2iGmto9o=
Subject key identifier:   58:63:2E:50:E3:A1:2F:F0:37:DB:21:BF:8B:22:3C:19:B5:50:43:34
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer:       /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial:       0199221E3AA313A659E0CA380014AECEB483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number:          12D0
Signing time:             Sun 07 Sep 2025 03:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:30 +0000
Files and hashes:         1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: A5bfXS+QCR2yNV2fcc/2/Y5UWQ4nNAjYaxEoSL7Ggmk=)
                          2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3a:a3:13:a6:59:e0:ca:38:00:14:ae:ce:b4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
        Validity
            Not Before: Sep  7 03:00:30 2025 GMT
            Not After : Sep  8 03:00:30 2025 GMT
        Subject: CN=58632e50e3a12ff037db21bf8b223c19b5504334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:8a:bd:0e:fb:fa:76:78:3f:17:8c:d2:60:
                    2e:43:e9:59:6f:f7:6b:39:a5:a0:64:70:5c:c3:ad:
                    23:23:0f:fd:6d:80:d3:a0:8a:43:5a:39:63:60:7e:
                    84:65:3e:af:05:2b:bd:83:2a:df:b7:26:ac:3d:76:
                    f7:f9:00:a7:46:63:81:18:12:4e:96:ba:0d:d8:be:
                    82:03:c6:6f:1a:d8:c8:a4:92:3b:23:48:ca:8c:1b:
                    b2:37:29:88:1e:34:92:ba:e3:f4:f7:bb:8e:5c:c2:
                    7d:db:dd:dd:d1:fc:2c:e6:e4:0d:4e:97:96:fa:b8:
                    7b:d1:1b:8f:4d:9d:68:6f:cb:5b:7b:98:95:58:94:
                    ab:02:94:11:6e:09:73:c0:d3:a5:b1:8a:dd:c2:9f:
                    34:6c:46:e4:dc:70:0d:e6:77:22:ba:ad:a0:a0:d2:
                    8e:c6:7f:30:2d:54:a4:f4:09:9a:9e:2d:87:1c:d1:
                    0b:ad:42:a6:ac:00:09:c1:b5:92:e8:56:e9:3a:41:
                    d4:f8:56:95:ac:5c:fd:47:53:ed:c4:02:7e:0e:c2:
                    71:77:4d:4b:1b:2a:35:c7:8e:5c:e4:e0:e5:ae:47:
                    a9:1f:e8:5e:7d:ab:aa:60:32:4d:0b:90:ea:83:61:
                    29:28:14:3f:0a:c7:5c:ed:c5:8a:a5:e4:be:af:46:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:2E:50:E3:A1:2F:F0:37:DB:21:BF:8B:22:3C:19:B5:50:43:34
            X509v3 Authority Key Identifier:
                keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:dd:24:04:03:91:a8:62:96:ff:56:3a:99:fb:95:43:c6:
         1a:70:58:9b:b6:12:cb:aa:ec:1a:dd:b7:cf:03:b7:24:6b:8b:
         a8:dd:41:10:0c:22:6f:f6:c4:8a:31:e1:1c:36:8c:d9:ad:6e:
         ae:0d:dc:30:0d:0a:db:51:19:69:f8:9d:58:05:e4:a2:a0:3c:
         09:ca:fe:e0:3f:2c:c3:58:7d:5e:34:6e:db:e6:60:04:38:51:
         0e:da:19:8f:ba:16:e1:10:e0:46:3c:55:a4:bd:6d:f5:58:00:
         b9:db:b5:a2:db:c1:7f:25:b9:7b:b8:b7:ef:48:37:0b:61:88:
         24:cd:b7:81:fd:50:27:b4:27:a1:ef:b5:36:9f:57:50:f2:d1:
         77:13:f0:fb:c5:fb:de:ad:e6:de:70:a8:72:56:dc:38:7e:77:
         ec:5c:1f:52:0f:93:18:c1:30:03:cb:e5:5b:39:d7:d4:c3:03:
         89:32:1d:a7:f0:3f:42:3d:6c:0f:56:98:b8:d6:4b:1d:8f:88:
         36:be:84:cb:e5:9d:ae:1c:b3:b7:a1:46:9d:ad:6a:c3:1f:eb:
         eb:0d:0d:ab:70:c3:ab:cc:28:e1:e2:79:22:1c:41:fe:78:ea:
         f7:26:00:fc:e0:16:69:e9:86:c0:80:cf:1c:64:66:32:85:85:
         85:02:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:36 2025 by rpki-client