Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          I0knXWDqJkfw5ilEgFjTnFfcwUVUjmczpB3tYJcjNaI=
Subject key identifier:   18:68:14:14:14:00:27:F4:73:A1:C5:37:9F:C3:A0:FB:CE:FA:15:27
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       01974BC3F39AD1E8F15F7DF56D565F988127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          024E
Signing time:             Sat 07 Jun 2025 19:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:22 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: eygQ8sukxM7CoVg+u32GvwpwwJm2NBttne0NZc4UARk=)
                          2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c3:f3:9a:d1:e8:f1:5f:7d:f5:6d:56:5f:98:81:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: Jun  7 19:00:22 2025 GMT
            Not After : Jun  8 19:00:22 2025 GMT
        Subject: CN=18681414140027f473a1c5379fc3a0fbcefa1527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:0e:79:62:40:17:13:49:8c:4b:67:98:70:
                    32:b3:23:70:28:a6:69:24:ac:4d:70:d5:2c:2e:07:
                    e6:d2:ac:4c:57:1d:5b:7a:40:52:7b:8a:fe:73:29:
                    f9:85:4a:09:75:4b:d7:3f:f8:a8:ff:18:ce:90:11:
                    e0:1c:a9:7a:ee:94:77:5e:8f:af:fe:b9:53:e3:f6:
                    27:fc:2c:18:2e:c8:77:3a:a3:d4:5f:82:e4:2a:91:
                    51:67:b1:c2:90:ff:7e:e9:e9:ec:49:83:1b:db:03:
                    c8:32:21:a9:39:47:3c:90:fe:51:ac:2d:dc:fc:5f:
                    1d:65:b1:09:32:5c:d2:eb:82:7f:b3:bc:74:84:75:
                    bf:7c:e2:75:fb:c9:fb:ac:87:d1:b6:09:5c:e6:0b:
                    2b:c9:72:a7:f7:22:2f:b2:77:ee:c1:31:91:0b:ff:
                    b8:09:32:8b:81:56:0d:92:5a:42:94:04:5c:3b:e7:
                    98:fc:b2:31:7e:e9:98:06:67:3f:7c:17:56:e8:f9:
                    ee:7e:53:8e:ba:e0:e2:73:4e:bc:ab:88:c3:48:49:
                    34:e1:90:7f:43:e5:db:f0:6d:15:da:c1:3f:c8:f9:
                    d7:99:80:43:ca:fc:6e:1f:2d:cc:8c:85:8c:8c:64:
                    8f:cc:3a:79:c1:39:f5:12:95:d3:01:d2:1d:55:38:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:68:14:14:14:00:27:F4:73:A1:C5:37:9F:C3:A0:FB:CE:FA:15:27
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:99:c5:1f:b2:27:e2:52:c6:2f:02:79:51:c5:55:89:33:
         58:c3:d6:15:ab:b7:25:81:a4:3e:2c:28:88:4b:27:70:74:7e:
         7a:c2:98:1f:92:60:f2:fb:9e:77:f6:23:a7:98:03:07:28:0e:
         91:0c:93:31:b8:60:6f:94:d9:37:f9:bb:27:7b:9f:6b:84:be:
         36:44:fc:5f:64:77:57:96:c5:9e:7e:e4:f9:90:1e:71:6e:28:
         d5:c5:4a:54:99:62:b6:23:ea:1f:db:07:ab:9f:7d:c5:62:7a:
         f3:cf:0e:05:c4:da:96:f7:d1:4b:76:ad:c5:09:75:d4:aa:01:
         ea:e3:0f:88:a9:93:ff:4a:9e:59:89:d7:d7:ba:13:e7:f8:42:
         51:34:80:1b:e9:04:f1:15:41:84:92:30:df:11:8f:f2:8d:ef:
         59:17:cd:a5:df:40:1c:be:88:94:57:d4:e0:1e:72:dd:93:65:
         93:68:34:e7:9a:28:1b:8c:8c:b4:5e:9d:38:ef:cb:dc:fd:02:
         64:41:29:c8:20:7e:c0:1e:a6:37:ca:83:c8:54:5e:11:8d:a1:
         cb:07:34:73:d0:a7:7b:48:5d:a3:2c:3a:ad:88:35:77:2d:e3:
         20:bb:f2:58:27:65:c5:fc:f4:de:4f:e4:e6:0d:75:cd:51:10:
         f0:36:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:28 2025 by rpki-client