Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File:                     MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier:          MUA9z+dEZdWTAjpd5LtnniSLe4ai448by60DCl0sgwU=
Subject key identifier:   73:18:8B:81:89:C8:DD:71:EC:E4:24:6F:0C:4B:70:9F:2E:99:E1:AD
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer:       /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial:       0197499F068ADB353A547DD116A7E0672E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number:          052A
Signing time:             Sat 07 Jun 2025 09:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:47 +0000
Files and hashes:         1: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: Hxw4BhFvE+AYzHnAd8jpa9NGCMzU30UOa+2PseEt0OE=)
                          2: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:06:8a:db:35:3a:54:7d:d1:16:a7:e0:67:2e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
        Validity
            Not Before: Jun  7 09:00:47 2025 GMT
            Not After : Jun  8 09:00:47 2025 GMT
        Subject: CN=73188b8189c8dd71ece4246f0c4b709f2e99e1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:41:a8:27:e9:ef:a3:2c:e7:85:5b:35:e8:
                    93:1d:02:3f:51:9b:f7:ac:82:bc:de:e8:c3:c2:fb:
                    bf:c5:fb:03:6c:e8:13:35:dc:a9:db:96:fa:23:54:
                    51:51:45:93:85:2a:15:2e:41:91:4e:2a:9d:e8:ab:
                    bd:da:0c:fa:9a:b7:87:a6:38:99:34:02:3c:a7:6a:
                    5b:18:fd:c2:28:a7:8f:3f:45:d3:88:ed:d3:0c:8b:
                    9d:3f:84:af:43:51:f7:63:46:74:05:70:68:65:1b:
                    26:8e:6b:69:5a:e0:65:3c:03:42:00:81:64:b8:f2:
                    53:5b:69:98:ec:86:02:4d:c3:64:a5:f4:ee:b0:1d:
                    bb:06:d7:fc:c8:f6:ac:a0:eb:ad:2f:9c:bf:77:6c:
                    74:c0:13:3e:3f:7a:03:eb:40:54:48:90:07:53:16:
                    ab:23:7d:3f:0e:79:25:59:0e:21:d5:50:0b:88:a2:
                    b6:84:bc:42:74:fd:c1:a0:71:ea:29:e8:99:6b:be:
                    1a:ae:f1:3a:fd:d2:03:4d:bd:5d:24:44:f3:7a:45:
                    e7:bb:75:2a:05:05:8a:b1:ae:a3:c8:8e:36:4a:54:
                    b3:47:34:11:d3:ab:d3:a5:ae:43:25:4b:34:dc:ff:
                    7c:4d:d9:8f:13:ef:6b:b2:8b:73:c5:d8:2d:4d:d0:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:8B:81:89:C8:DD:71:EC:E4:24:6F:0C:4B:70:9F:2E:99:E1:AD
            X509v3 Authority Key Identifier:
                keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:2b:7c:9a:f8:86:4c:b2:4d:79:22:59:8a:05:a4:14:b4:60:
         a0:81:f8:a0:20:f0:96:88:cd:19:1c:7a:a6:76:ba:87:fe:f7:
         a5:a5:7f:13:92:ec:1d:54:b6:71:6b:b5:71:8b:58:aa:8d:ea:
         2d:65:4f:0c:91:cc:77:9d:fc:83:15:a3:5e:92:e0:a8:91:da:
         a7:f9:61:b2:de:a2:93:22:c4:ae:aa:50:c6:48:90:95:70:ba:
         8c:17:de:06:94:64:02:f8:18:34:62:cc:75:34:00:ec:77:89:
         7e:7c:b4:f3:80:5d:a3:ea:c7:5e:f8:67:8d:5e:0f:83:02:9c:
         47:1c:2d:5f:99:0e:48:f6:96:23:f2:80:72:fc:47:e9:78:d1:
         29:a7:ff:73:54:f0:f1:34:c3:07:2e:7b:c4:d6:49:34:ac:b1:
         c5:81:2f:56:c5:af:1f:b0:5b:5e:4b:92:16:93:62:64:f4:59:
         bb:6c:0f:dd:16:3f:4f:ce:59:ae:00:07:d4:05:b4:2d:b6:a2:
         2b:9a:f9:5c:9d:75:50:32:68:de:da:e1:bd:9e:9c:20:32:67:
         17:af:9c:f1:50:33:4f:88:44:46:e6:cf:21:d8:6b:6e:2a:be:
         f7:b8:26:01:fe:1a:6a:a1:b8:f5:d1:7c:3c:83:ac:d9:ce:56:
         9f:14:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:18:43 2025 by rpki-client