Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File:                     MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier:          +kv03uIi8ZWWc1k6vqjqQN/YsLKyDYCRm5d1SnBcuX4=
Subject key identifier:   83:FD:CD:54:AC:99:11:80:21:9A:B6:14:31:05:2F:AC:55:69:60:1F
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer:       /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial:       019746672C99A9CFF65217AC4AC33612E349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number:          048E
Signing time:             Fri 06 Jun 2025 18:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:55 +0000
Files and hashes:         1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: uQDXSIAlGETxSyaBED03cAWLloaGuHbkOXxvtKDiVOM=)
                          2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:2c:99:a9:cf:f6:52:17:ac:4a:c3:36:12:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
        Validity
            Not Before: Jun  6 18:00:55 2025 GMT
            Not After : Jun  7 18:00:55 2025 GMT
        Subject: CN=83fdcd54ac991180219ab61431052fac5569601f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:63:ba:eb:32:23:9d:5e:5c:26:0d:00:20:
                    da:86:43:82:e2:6c:14:66:61:f1:60:8f:ae:db:70:
                    51:46:40:0f:18:32:3a:18:dc:38:d8:f4:18:0a:28:
                    a6:9f:d2:de:eb:c1:ca:70:bf:98:bc:56:dc:9f:95:
                    85:13:31:9c:0e:7c:80:62:f7:e3:a0:1e:d0:56:82:
                    85:19:3c:66:c3:c9:33:3f:db:5a:52:37:57:3b:8e:
                    8f:92:8d:8b:99:51:a0:bc:43:f4:d3:dd:8b:82:7b:
                    f0:08:74:ce:8c:87:95:8b:ad:81:db:dd:b1:c0:e1:
                    3c:c3:86:b6:cb:43:5a:97:aa:18:4b:ee:67:c0:77:
                    39:54:2a:84:e0:fe:c6:c0:dd:5c:93:bf:68:6b:ae:
                    d3:3d:09:60:4b:86:0c:9d:d7:c7:8b:2e:ff:31:69:
                    a1:4c:11:1b:45:63:9d:57:30:a0:f4:bb:9a:7d:0b:
                    e8:78:82:68:ae:4a:98:ee:0c:21:f7:9d:25:47:94:
                    cf:67:93:39:14:bf:c2:64:f8:7c:49:67:55:83:e2:
                    79:bc:cb:05:93:25:e9:c1:d8:93:a4:4e:16:37:09:
                    0e:12:fd:b1:54:bc:d3:8f:63:ec:51:2e:14:39:33:
                    df:81:3d:68:67:3e:1c:0f:cd:1c:b2:05:92:8a:7b:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:CD:54:AC:99:11:80:21:9A:B6:14:31:05:2F:AC:55:69:60:1F
            X509v3 Authority Key Identifier:
                keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:82:62:2f:c1:cb:d6:ab:06:0b:0a:69:fb:ad:c6:70:40:
         32:9a:c3:f4:32:4c:ac:c8:a4:a7:33:8b:5c:fc:22:63:20:2b:
         df:3b:06:b0:15:8a:90:98:40:2a:59:d4:c8:93:71:46:4e:93:
         c0:5d:06:99:b3:b7:e1:5e:16:ce:e2:6b:40:f6:56:c7:43:44:
         21:fd:b1:0a:06:c0:8a:ee:ab:14:1f:39:19:1a:06:f9:2f:2f:
         d6:0e:8a:61:8d:82:6b:b8:78:28:20:1a:a3:2d:c3:a3:17:1a:
         26:c2:cd:1a:d1:b8:95:e9:0f:6a:72:01:cd:a4:a3:06:86:11:
         f7:ad:6b:17:dc:b1:b0:b8:fd:27:3b:86:be:5d:d6:e5:d0:7a:
         bc:6a:95:51:6a:3c:f8:fe:25:42:94:6c:e3:ba:14:c1:a2:d9:
         13:9b:7f:3f:ea:87:c2:38:80:c1:de:a0:cd:cd:94:67:6c:1a:
         43:08:83:73:a6:08:33:43:d2:78:7a:f7:66:c2:1e:48:38:0b:
         5a:0e:e7:b5:ce:3e:30:82:12:9e:3f:e5:fb:79:82:77:4b:07:
         47:fb:d0:51:84:41:df:06:55:8f:11:dd:31:30:9f:ab:62:0c:
         31:66:05:34:96:bc:e4:a6:0b:4a:29:73:01:5c:9e:d4:f4:74:
         22:ce:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:04 2025 by rpki-client