Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File:                     2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier:          ps2U6baBhwRdBtDa7aiJxo6bzcKl520DcTjwiTEFVu4=
Subject key identifier:   EB:49:5A:DE:DB:CE:56:9B:FE:AD:90:30:1D:12:F0:A3:70:46:F2:7B
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer:       /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial:       0197469DC6636E68B1C8AAD26EE536C28EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number:          0D9B
Signing time:             Fri 06 Jun 2025 19:00:34 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:34 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:34 +0000
Files and hashes:         1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: 1sw/mDP/p79GwYAYdXfLi3PcPXsQ6ZE+XRFqmWNFqh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c6:63:6e:68:b1:c8:aa:d2:6e:e5:36:c2:8e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
        Validity
            Not Before: Jun  6 19:00:34 2025 GMT
            Not After : Jun  7 19:00:34 2025 GMT
        Subject: CN=eb495adedbce569bfead90301d12f0a37046f27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:79:3b:1e:78:58:f9:59:c8:e2:eb:0d:ac:
                    ff:be:40:4d:6d:1f:a4:05:26:f8:99:83:e8:ee:4c:
                    4a:bd:da:55:47:3b:b9:98:02:7c:ad:ec:45:50:ff:
                    5d:6d:48:b5:7c:56:07:48:c8:34:15:fb:45:f8:ee:
                    1f:62:74:b3:86:d8:66:39:b3:d3:3b:90:f8:bf:34:
                    32:7d:9b:8f:79:80:1d:67:3a:ae:00:17:1e:b7:87:
                    b6:c6:38:45:71:9b:f3:e1:99:72:a7:c7:6c:f4:fd:
                    3a:3f:9e:ad:e5:04:57:72:1e:e4:1e:7a:92:d5:ff:
                    52:a8:46:26:d3:56:6b:48:24:ac:e8:90:5c:7e:8d:
                    73:57:b7:66:ee:a1:45:96:23:d0:be:3d:1e:de:2c:
                    19:26:4c:2a:2a:24:d0:ff:e8:f1:01:b9:80:de:e8:
                    9d:fa:55:2c:e4:ef:d0:27:ce:59:5d:4b:74:da:f9:
                    8d:f6:90:4c:07:0b:b7:72:ac:52:70:32:d5:d5:1e:
                    c0:ef:09:17:4d:eb:13:fc:f1:0b:f2:85:de:f2:5d:
                    8f:94:1a:13:47:60:89:29:92:16:82:6c:54:20:d9:
                    76:a2:39:0c:7e:c0:78:11:93:7a:2c:37:68:37:08:
                    df:ce:e8:c1:5f:40:05:d1:85:4d:13:68:ea:6d:eb:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:5A:DE:DB:CE:56:9B:FE:AD:90:30:1D:12:F0:A3:70:46:F2:7B
            X509v3 Authority Key Identifier:
                keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:3c:74:f1:15:79:6a:ad:36:d7:e4:a4:9b:51:f7:05:fe:
         38:82:18:2f:ac:c6:ea:04:74:60:8c:a2:b8:17:98:f8:6d:97:
         d5:c9:35:d3:8d:02:10:2d:24:fd:f8:f1:37:fd:fc:af:ea:2f:
         2f:94:b1:a3:bc:91:ed:c2:9d:a0:1e:ec:26:76:b4:6e:b1:49:
         0f:55:ca:3a:83:13:3a:c6:8e:3f:c3:89:62:04:13:48:3e:d2:
         7a:f8:73:14:41:92:7c:5a:d0:41:f8:64:61:84:f3:df:33:f5:
         bd:70:8c:85:5b:f0:08:18:48:5d:c6:75:a0:f8:98:c1:22:45:
         1f:08:79:25:b2:25:fa:ee:64:90:d2:b5:24:9b:37:b2:06:01:
         84:42:b8:2f:78:b7:37:cf:f3:5e:0b:ff:4c:23:b6:3f:af:42:
         74:0d:18:d0:f6:5e:e6:11:ba:c2:4d:ce:5d:20:0b:5d:e2:14:
         fc:87:35:e9:e7:3b:d3:82:87:fd:c9:3a:79:6a:cc:72:43:b8:
         0e:c0:7a:16:ea:68:32:ca:ca:75:5c:15:fd:71:94:09:60:55:
         7a:40:a6:63:a9:e9:fe:d6:40:ff:31:a1:a2:fd:d5:ab:bc:36:
         52:2a:b5:2d:2b:02:72:90:aa:1d:e2:91:0e:b2:b0:0c:cc:f9:
         c2:85:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:29 2025 by rpki-client