Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File:                     MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier:          TpoEd8UtiBjLxE8NvmYPACgb7chRw2rvxE9wUq+Egmg=
Subject key identifier:   7C:60:7B:F6:F9:9B:97:B7:47:21:79:18:3E:1F:66:28:16:FB:8A:A1
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer:       /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial:       01974C6916AB4E9A311D29B276001447603E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number:          0B67
Signing time:             Sat 07 Jun 2025 22:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:44 +0000
Files and hashes:         1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: Ozi19a0yuUqSIV0QTiilEzGyCIdGPUWdAP8/of3HmTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:16:ab:4e:9a:31:1d:29:b2:76:00:14:47:60:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
        Validity
            Not Before: Jun  7 22:00:44 2025 GMT
            Not After : Jun  8 22:00:44 2025 GMT
        Subject: CN=7c607bf6f99b97b7472179183e1f662816fb8aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:59:a1:d0:04:01:e3:54:3a:0e:35:84:92:
                    a4:6c:5a:ed:04:74:a8:c6:87:a7:1a:7b:88:95:05:
                    c0:35:70:37:f6:76:c4:a0:e3:7b:2e:b4:1e:8f:07:
                    43:48:c6:6e:0a:4e:58:b8:4a:7c:04:6a:9f:dd:34:
                    d3:0f:7c:ee:41:cc:9b:2c:f7:e7:54:8d:52:85:a6:
                    d0:c9:a2:69:ec:e0:07:ec:8b:85:27:18:d8:9f:53:
                    6c:4f:9c:41:ab:65:c7:e6:a7:80:09:29:5c:7b:63:
                    48:aa:cc:e0:62:a0:9b:17:da:c2:28:55:44:d3:c9:
                    e1:d5:08:34:46:35:4c:ea:64:fc:04:13:1d:9f:a5:
                    19:56:13:aa:39:0a:8d:32:9b:f2:83:1e:9a:4f:ed:
                    3d:0e:cc:ae:71:13:b7:a1:28:3c:bf:29:29:90:5e:
                    af:ed:29:85:d9:bf:85:d5:5e:a1:23:27:62:6d:fe:
                    bd:4b:c1:e2:32:84:ef:75:fa:d9:cc:40:02:f3:f2:
                    f1:8b:d6:0d:e3:47:ee:0c:27:fa:09:e6:95:1e:47:
                    6d:f4:9a:d4:aa:48:37:ad:b4:89:68:01:38:98:c1:
                    37:a4:18:47:d4:64:c2:a2:03:09:32:77:8c:7e:cf:
                    90:22:37:9d:73:41:d2:7c:d5:7e:f5:72:8f:03:43:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:7B:F6:F9:9B:97:B7:47:21:79:18:3E:1F:66:28:16:FB:8A:A1
            X509v3 Authority Key Identifier:
                keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:6c:de:47:3a:13:15:64:c7:6d:f0:af:e8:88:10:19:1d:
         6a:a2:8e:dd:4b:71:4a:69:2f:bd:9a:c3:a8:df:74:c7:44:8f:
         a2:b8:98:ef:68:9d:48:64:fd:99:d8:c5:ef:a2:80:d9:eb:7a:
         ec:03:5f:8d:9d:aa:8e:a2:9f:b2:7d:1c:6e:18:63:02:ed:40:
         7f:60:e7:5c:41:43:05:51:cf:b8:fa:6a:65:fe:8f:3d:aa:f9:
         df:85:a1:80:5b:65:c1:75:48:c7:bd:9f:8f:40:7b:66:a2:69:
         1e:80:12:01:44:d0:97:7d:b6:42:52:91:d1:f1:28:67:ba:12:
         36:46:ad:1c:7d:10:15:a8:b1:a3:c3:51:b7:39:0b:73:f0:62:
         16:b8:4f:af:12:67:ec:dd:a5:73:95:46:68:09:3a:d2:0b:ed:
         26:e8:e5:ea:5f:35:a5:3f:45:4d:40:d5:f8:d7:e5:16:c4:40:
         37:1f:ce:95:16:78:1a:d9:89:c0:5c:3a:ab:8c:92:86:d5:45:
         e7:f3:53:25:f4:26:64:e2:ff:8b:24:44:e2:7f:2d:fd:46:32:
         18:8f:f2:3f:86:88:59:27:51:ca:23:10:43:4c:a7:df:d9:19:
         b2:e9:e6:24:5b:bc:d6:81:eb:2e:f2:0a:f7:e3:ce:8b:44:14:
         fc:ea:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:48 2025 by rpki-client