Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File:                     MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier:          e/mYG8jHTWSlu5y8gVkAu8fy62ZTzuo72WU1o/QlFSA=
Subject key identifier:   C9:E6:27:1D:F3:2B:8E:F8:C3:B7:61:0D:CB:8B:45:E7:AA:FE:1D:66
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer:       /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial:       01976696C93A662B8D928121521B0C1D9828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number:          0433
Signing time:             Fri 13 Jun 2025 00:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 00:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 00:00:47 +0000
Files and hashes:         1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: xT0tu2ELo8zoRAaYYlp4OGcvYImhXXkNRpUFGF5/ihA=)
                          2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:96:c9:3a:66:2b:8d:92:81:21:52:1b:0c:1d:98:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
        Validity
            Not Before: Jun 13 00:00:47 2025 GMT
            Not After : Jun 14 00:00:47 2025 GMT
        Subject: CN=c9e6271df32b8ef8c3b7610dcb8b45e7aafe1d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:b9:3a:a0:fa:bf:e4:84:6a:ac:b1:29:f6:
                    d1:64:e7:96:05:a7:63:ab:c8:5e:f5:28:55:70:de:
                    68:6f:cc:34:6a:19:9e:28:4a:08:19:05:18:f5:d3:
                    39:b5:f2:fb:fd:51:a8:94:90:71:07:dd:2f:d4:4b:
                    bc:62:8c:52:73:e0:3f:fa:4b:b5:02:21:4f:80:dd:
                    7c:41:ae:e3:a2:49:a0:d3:9b:71:5c:63:ea:f4:50:
                    aa:b4:2d:b8:1f:a2:21:d9:fd:05:93:fc:ba:2d:1f:
                    4a:96:03:05:7a:4a:d0:08:b9:40:1e:42:b9:ec:e5:
                    7e:7e:3f:2d:af:db:0b:45:17:81:c0:c2:87:b4:b3:
                    e5:64:d6:0d:59:64:cb:51:99:a7:95:f0:51:48:6d:
                    36:3c:77:a6:ae:ec:38:67:0a:b4:36:e5:1a:32:7c:
                    b8:17:93:58:51:d1:2b:3f:9b:8f:b0:c6:fe:54:9c:
                    53:1d:1d:42:85:0b:03:15:35:1c:e3:0a:e9:b1:8c:
                    29:00:0c:25:c4:ca:0e:45:b4:3a:b4:87:ae:af:c7:
                    59:5b:e0:aa:dd:4a:4e:3d:7e:02:5b:10:a4:41:2f:
                    c2:d0:e4:ba:7b:2b:16:9a:d1:36:59:22:9d:8a:7f:
                    6c:62:f6:f7:34:23:9b:53:da:d9:f9:58:92:f2:62:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:27:1D:F3:2B:8E:F8:C3:B7:61:0D:CB:8B:45:E7:AA:FE:1D:66
            X509v3 Authority Key Identifier:
                keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:de:78:32:09:a7:69:18:90:34:31:c3:68:96:da:75:c8:45:
         d0:a5:59:14:53:c3:49:64:33:57:dc:b7:71:5b:54:43:ba:57:
         d1:29:7c:b9:c7:ec:0a:25:ed:89:6e:04:4f:3f:c6:0c:05:b2:
         28:85:be:8f:19:d5:c5:b0:1d:62:23:64:f8:cd:9f:47:c4:3f:
         eb:84:61:39:b2:9d:bc:28:4d:88:97:38:81:b6:1f:57:80:40:
         60:5a:a0:50:7d:2b:0f:42:40:1c:bf:4d:44:28:9f:21:ad:f5:
         5f:8b:b1:aa:1a:41:b5:52:b4:95:bc:5b:cc:b9:d2:ec:88:c7:
         6d:9b:b1:98:e0:04:fe:c1:22:7b:50:b4:fc:3d:8b:ae:5c:fe:
         35:ef:17:64:48:47:ad:1d:8b:1c:5d:fd:4b:e6:e5:9f:f7:0f:
         e5:95:60:4d:51:aa:4b:b7:bf:7d:05:03:8d:ef:79:1a:9a:72:
         8d:c5:d7:61:7b:65:06:f9:8c:8b:cf:25:39:c1:2a:7d:93:81:
         e4:fe:b7:fc:8e:5b:ea:9c:94:65:60:8f:83:de:c0:8d:49:8f:
         f9:9c:b4:93:5a:be:dc:7a:6d:43:3c:56:cd:d4:0e:3a:79:69:
         95:1e:9a:1b:9d:09:e6:1b:0b:42:d6:5c:fd:89:69:83:81:84:
         03:29:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:58:45 2025 by rpki-client