Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File:                     MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier:          YqdjYP0Fg6Gt98ICpX/DQtkhyvLD+nUULY4otbUsB+M=
Subject key identifier:   EA:D1:54:1C:3E:5B:FE:26:1C:05:3D:3A:EF:48:7F:3C:0D:2D:41:2F
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer:       /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial:       01974D7BE93C65F6D359C83CD7AFB8B7B552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number:          0181
Signing time:             Sun 08 Jun 2025 03:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:55 +0000
Files and hashes:         1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: V4+uQZaWMFmvzl9eO11abi1XNYS13k+lMZ4snMF6WHU=)
                          2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:e9:3c:65:f6:d3:59:c8:3c:d7:af:b8:b7:b5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
        Validity
            Not Before: Jun  8 03:00:55 2025 GMT
            Not After : Jun  9 03:00:55 2025 GMT
        Subject: CN=ead1541c3e5bfe261c053d3aef487f3c0d2d412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:bc:46:55:b9:a0:8f:60:b1:00:49:e1:b8:
                    13:37:36:ce:27:30:50:4d:92:7a:48:98:b5:62:db:
                    b7:70:be:7f:3a:fb:47:55:76:d5:39:0c:f3:38:59:
                    9c:c8:2d:49:4c:6f:47:69:b9:e5:a8:6d:35:9d:c0:
                    25:6d:33:de:19:a2:2f:11:fc:4a:d7:fb:0a:c5:94:
                    8c:7d:fd:43:a1:c7:d0:63:cc:76:8c:26:b5:3b:d8:
                    1c:9e:52:af:cf:d9:3e:f7:b4:df:53:1f:d2:b2:1b:
                    1f:9b:2b:e3:0e:9f:8d:ac:32:42:d3:a5:8f:e9:6d:
                    ba:c9:2d:c3:5f:d5:75:6a:c5:89:70:b9:3c:5b:da:
                    ac:f9:10:e2:b9:8e:48:02:cb:78:7c:2b:e0:b6:84:
                    2a:42:ae:95:c9:2c:66:b3:03:fe:74:4b:11:c6:38:
                    6d:ca:59:4c:77:86:d9:0d:68:02:e1:e9:a3:b0:6b:
                    4a:b0:2e:96:bb:3c:ce:de:ea:2e:45:c0:a4:3f:53:
                    dd:6e:0b:49:0c:46:88:12:eb:fd:22:d2:5a:6e:42:
                    96:01:b1:c4:84:d2:d6:fe:b3:b7:75:31:75:b7:0a:
                    91:7d:b0:15:d7:a3:4e:42:cd:e1:bc:bb:fa:3a:b5:
                    f4:d0:58:16:87:77:9a:fb:58:94:dd:b4:a7:04:d1:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:54:1C:3E:5B:FE:26:1C:05:3D:3A:EF:48:7F:3C:0D:2D:41:2F
            X509v3 Authority Key Identifier:
                keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:bc:e8:12:f7:29:b0:91:dd:fd:8f:dc:ae:fa:61:66:b1:
         1f:4f:2b:83:e0:4e:8f:e3:2e:73:ae:0f:27:09:c0:41:df:7c:
         4a:92:79:6c:1b:47:ee:7d:52:5c:6e:6e:90:6b:7e:33:82:ac:
         53:7c:c2:73:7d:6d:19:72:55:9d:a0:42:de:4d:f3:ba:dc:df:
         15:65:ed:b6:37:73:9c:c0:4d:b9:05:cf:51:d4:ef:c9:74:2c:
         c8:40:6d:07:ab:2e:55:35:95:e0:81:ff:98:be:ed:33:48:20:
         68:1b:57:d2:c7:46:55:11:b2:c4:ac:ea:f5:bf:a3:25:ae:4d:
         b7:bf:01:05:4c:ef:b4:41:83:10:48:75:e6:06:3b:ce:74:e5:
         81:22:00:18:7a:56:41:0d:11:22:96:d6:4f:a0:d8:46:79:8d:
         a0:33:ce:86:fa:73:25:47:4c:2c:dc:04:c1:66:30:7c:c7:99:
         c3:23:be:35:e2:81:8e:65:23:03:e2:5d:6f:d9:7e:68:82:48:
         82:30:26:1e:32:a6:bd:b2:c3:f3:fb:9a:31:9a:a4:a2:c3:c6:
         8c:c5:3a:a2:7e:6d:4c:f5:19:c9:0e:c0:e8:93:52:32:35:e5:
         b2:bf:2e:87:8a:ba:ef:84:45:3b:e2:67:bc:50:9c:01:5f:b1:
         38:af:ab:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:29 2025 by rpki-client