Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          ERXZtqyAAEnAT6gvi5myFgisj+frMGbn9xOFLVG3Iqo=
Subject key identifier:   2C:C1:A0:F7:89:2A:D1:2E:35:67:3A:3D:4B:53:4C:C5:A9:7A:DB:D2
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       019748559500D0042E69FF9670D18F2E661C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          150F
Signing time:             Sat 07 Jun 2025 03:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:57 +0000
Files and hashes:         1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: /a6vAsiLgz0rFs1sgoVIwN5Fky/SWthJdSNpBZPNn1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:95:00:d0:04:2e:69:ff:96:70:d1:8f:2e:66:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Jun  7 03:00:57 2025 GMT
            Not After : Jun  8 03:00:57 2025 GMT
        Subject: CN=2cc1a0f7892ad12e35673a3d4b534cc5a97adbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:ed:f4:e8:2d:95:0f:b9:38:fe:85:77:ca:
                    5a:1a:0f:8c:b5:08:85:bf:f4:6d:91:52:69:81:42:
                    f5:a3:6e:a7:fe:0a:f8:65:95:cb:31:24:95:f7:03:
                    e9:68:26:3e:85:e6:81:50:39:1a:5b:a2:3c:e4:c6:
                    55:63:f7:45:5d:20:95:c0:9a:cb:b4:06:8d:c3:b3:
                    85:3f:9d:cf:53:b1:68:39:62:87:3a:34:37:4e:9e:
                    c3:86:69:b7:17:24:e4:21:5e:95:ea:42:8a:9c:de:
                    6e:3b:a5:02:8c:0e:e0:b0:e4:e2:0b:b8:7f:a9:f3:
                    53:81:e9:dc:61:50:e4:86:d0:0b:69:70:68:6a:b8:
                    75:aa:8b:94:aa:e8:ce:f5:b7:bf:28:8a:2a:ae:f5:
                    23:50:34:c8:98:00:9c:a7:9f:47:38:6f:2f:d9:4c:
                    e8:19:d4:fc:16:6b:30:be:d7:a5:30:f4:ac:60:f8:
                    cd:9c:7e:0e:0c:28:9a:e6:b9:e5:41:07:68:43:63:
                    a9:ac:45:9c:ed:09:d3:80:b1:d7:da:ba:c2:a7:0d:
                    46:69:21:c8:ed:fd:be:c7:cf:16:ac:1a:e4:37:9f:
                    28:fd:96:14:04:96:6d:92:c5:4a:96:22:90:d4:23:
                    e6:01:1c:ed:eb:97:76:38:6f:49:2a:7e:32:3a:4a:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:A0:F7:89:2A:D1:2E:35:67:3A:3D:4B:53:4C:C5:A9:7A:DB:D2
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:19:8d:12:1e:53:16:ed:89:f3:47:11:9f:88:44:91:95:
         e4:7b:1e:fe:bc:39:97:6a:e9:fb:63:79:b3:19:07:22:50:d1:
         21:db:aa:74:06:48:de:82:4e:95:f2:09:24:85:c3:7e:41:f9:
         0a:c9:e8:1d:af:12:0b:58:de:c1:0e:6d:e7:d5:e4:98:a9:4f:
         56:d4:60:d5:db:a5:a9:3d:2f:ba:bc:22:18:38:5a:50:0d:da:
         f0:7d:e3:65:6b:7f:be:47:b8:36:2e:c6:85:49:3b:93:ac:40:
         ed:eb:1a:4f:43:de:68:f3:6e:ef:e5:cf:da:47:4f:7a:af:de:
         07:cc:6c:6b:05:9a:dd:e7:be:be:f6:ed:a3:e0:b1:de:da:dc:
         b3:66:1b:91:56:ae:20:bf:9f:17:18:d0:ab:be:36:29:5e:e5:
         94:aa:b3:c1:f1:ff:17:51:e4:4c:d4:fd:02:a3:43:f8:32:c1:
         d1:05:f0:cc:01:1c:c0:60:63:67:fe:20:7e:2d:8d:2b:2f:8e:
         87:48:23:34:e0:b8:d0:dd:f4:b7:34:9b:4a:cf:06:d9:a6:ce:
         cf:bb:38:ca:bf:c8:4b:7b:cc:a4:88:d5:56:ce:9c:d2:9c:af:
         b7:a4:e9:21:17:12:68:e7:72:9f:b6:a2:fe:09:c2:eb:d3:34:
         d6:89:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:50 2025 by rpki-client