Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File:                     MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier:          2p7KgnohcnMHHPqOiPOnvJyIV/wqVMR9wsHIwdCpR0c=
Subject key identifier:   2C:93:B0:45:F8:25:0B:F1:60:29:58:58:2A:22:19:58:30:4F:7A:E5
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer:       /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial:       0196439F7B5D89F6ABF9DFE96BAD7B3455B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number:          0C51
Signing time:             Thu 17 Apr 2025 12:00:47 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:47 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:47 +0000
Files and hashes:         1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: ubO3c1i8IVdSzRVe7fpIMaolVWU439JHxyq5H3aQT1U=)
                          2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:7b:5d:89:f6:ab:f9:df:e9:6b:ad:7b:34:55:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
        Validity
            Not Before: Apr 17 12:00:47 2025 GMT
            Not After : Apr 18 12:00:47 2025 GMT
        Subject: CN=2c93b045f8250bf1602958582a221958304f7ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:16:ab:21:d7:08:7a:d6:2e:0c:98:b4:98:
                    77:dd:4d:37:34:00:7b:24:d6:e0:22:84:99:d5:f2:
                    0e:bd:07:e5:71:be:1c:80:f4:66:78:ab:b4:42:80:
                    08:48:ac:28:2c:70:f0:3b:05:24:6c:d0:00:e2:2f:
                    12:66:87:e8:94:8c:0c:01:1a:8f:34:4b:3e:e6:a8:
                    55:af:52:e0:80:64:3f:af:ff:00:2d:9a:fb:1f:f3:
                    eb:a5:11:e2:84:4f:aa:e4:5b:50:fb:6b:26:67:66:
                    0c:5c:1a:7d:c6:80:73:ae:16:d3:2c:cc:87:2a:b7:
                    ae:09:a9:1c:59:d6:29:19:e9:ba:cc:85:0d:cf:02:
                    de:a2:a1:90:0f:50:e5:1a:48:1f:2d:dc:50:78:21:
                    f4:a1:86:39:51:34:55:5c:47:f0:b0:81:7b:ae:58:
                    66:f0:60:2f:50:ca:42:c3:a7:4a:56:9b:c0:6e:dc:
                    52:75:4e:ee:19:b4:c9:e1:3d:65:97:bd:9e:f6:01:
                    b1:59:b1:ee:95:cd:97:df:59:7d:2c:f0:82:93:04:
                    9d:91:d2:b7:91:90:71:3e:25:fb:94:a6:0a:04:84:
                    e6:cd:96:88:d5:9d:d4:23:fb:87:c6:07:b5:a6:fe:
                    29:fc:c2:8f:63:7e:71:5b:ff:da:b0:d1:bb:23:bf:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:B0:45:F8:25:0B:F1:60:29:58:58:2A:22:19:58:30:4F:7A:E5
            X509v3 Authority Key Identifier:
                keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:ee:ea:2c:6e:89:6e:30:89:98:70:7f:94:ad:0e:bd:81:
         1a:0d:ef:39:36:b3:6c:b5:d9:98:57:45:62:f7:18:e0:80:a4:
         a5:b5:22:6c:44:37:3a:4a:f9:6a:c6:d0:ef:8c:cd:2b:c6:53:
         eb:89:8b:18:c8:e2:da:3c:de:a2:ed:40:c3:12:aa:9e:03:3c:
         05:59:b4:5f:21:36:7f:15:fe:ca:48:82:9e:01:06:74:f8:fb:
         35:0e:d9:a5:a9:dc:3a:39:e6:84:a0:f6:e5:a5:22:e1:fb:38:
         9d:3b:2b:56:f3:63:bb:26:cf:91:ec:d5:bb:b2:1f:c0:d4:b7:
         b9:89:98:d6:b9:ee:f9:90:84:65:cf:ab:db:a7:9d:56:63:3b:
         b9:a9:c4:77:cd:e1:b1:ea:96:c3:9b:c3:4c:9b:c8:d7:95:69:
         ba:f1:c9:88:cd:fc:e8:21:52:44:55:9d:07:e0:8c:4e:49:7f:
         f8:61:c6:f6:54:37:1f:a1:87:b3:c7:02:b3:4c:56:c4:52:f2:
         37:7f:e8:4a:d4:21:8d:c3:97:72:47:98:14:c6:ff:73:44:6f:
         5b:5f:7d:8e:55:3a:fd:f4:63:58:65:73:e9:45:84:96:92:38:
         2e:9a:da:02:4e:d0:32:83:63:a8:b0:06:7a:d5:f3:de:25:a6:
         17:e6:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:52:30 2025 by rpki-client