Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          XW8LJLv3UGY9TuWsaHjwsaXKR82h4TfzDEo6WZx7gbU=
Subject key identifier:   74:D1:D0:1A:31:56:2A:03:CF:CF:97:09:C7:6E:AC:CE:BB:96:EC:EC
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       0197700810F4DEBF61C7CA347B283546E110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          1405
Signing time:             Sat 14 Jun 2025 20:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:06 +0000
Files and hashes:         1: 0cSUdPzh_fyOTfC0ruB0gTg1QhM.roa (hash: wUgynLVwcF9qr8K69Rsxkk1YVCBtq1S8/W1PvBOd+ok=)
                          2: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
                          3: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
                          4: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
                          5: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: Z/fLzSkWLQtYMigV9cVf8X2RKF6MQFF3m3ItQTmba2s=)
                          6: TgvbB6i4HXWnjLNcKegQywUTDJ0.roa (hash: YcgfPOv/+fj5b6yQFbK2Xl9gZETkgOC07GVbs5vfuds=)
                          7: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (hash: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:10:f4:de:bf:61:c7:ca:34:7b:28:35:46:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: Jun 14 20:01:06 2025 GMT
            Not After : Jun 15 20:01:06 2025 GMT
        Subject: CN=74d1d01a31562a03cfcf9709c76eaccebb96ecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:35:8c:6c:6f:6b:d0:90:c7:8e:51:72:28:
                    ed:81:ef:2c:d8:32:80:7e:cb:f1:8f:d7:27:aa:41:
                    14:7e:69:54:76:7e:02:7e:a9:8e:c0:34:f4:ca:db:
                    56:3d:fd:16:5c:18:62:df:90:50:2f:67:09:a0:25:
                    56:cc:77:48:4c:02:e4:7d:f3:95:4f:a4:29:29:b0:
                    0a:62:53:58:74:c7:16:de:b8:e2:18:cc:b4:2c:20:
                    7c:1a:12:b7:c2:a6:1c:ff:aa:cf:8b:c2:b9:27:c4:
                    74:56:28:49:cc:f4:d8:93:ab:a6:c8:64:14:91:1b:
                    8c:b2:69:c9:f0:91:12:dd:a8:c7:c5:6f:cf:66:41:
                    5f:16:d0:00:d7:8d:fe:04:fe:74:8e:bc:b7:bb:d1:
                    51:2a:81:17:c0:a5:03:10:1c:96:0c:d8:c0:11:2c:
                    7e:f6:fc:cd:d3:a6:7f:35:36:85:a0:8f:ca:6d:94:
                    2a:f5:88:83:39:d3:aa:8e:69:52:c3:62:97:e9:01:
                    71:b0:e4:bc:72:9c:d1:c8:c7:54:37:f1:7d:f2:6c:
                    f6:11:2f:7b:1f:52:75:83:db:a0:b3:8c:01:bd:0c:
                    11:6e:a8:96:89:4c:fc:c1:de:d1:02:88:12:c7:d4:
                    f6:23:f3:13:aa:71:14:65:f8:13:42:2c:ca:2b:b0:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:D0:1A:31:56:2A:03:CF:CF:97:09:C7:6E:AC:CE:BB:96:EC:EC
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:59:27:e1:bf:77:88:ef:62:68:43:e2:37:9f:9a:68:8f:c7:
         cc:cc:4f:53:af:96:85:f0:c2:6e:7e:ac:8e:d0:4a:8b:a6:38:
         62:65:9e:0c:02:81:ed:fb:3c:9c:e7:c1:60:64:06:6e:d6:36:
         53:56:28:c1:cb:1e:b1:a9:22:a7:08:41:60:21:55:e4:ca:e7:
         63:70:73:fe:e5:2c:4a:39:32:2c:d3:f6:cc:bd:ca:66:e0:94:
         a4:10:94:20:07:14:93:c4:f5:0f:a7:fa:91:08:79:1d:01:3a:
         bf:a6:2b:11:3c:8f:ed:85:ba:86:09:39:fb:f8:6b:6f:16:b0:
         a5:4f:c4:09:3b:58:a8:94:49:77:b4:6c:48:63:47:be:09:c9:
         c0:47:20:48:3a:99:29:4e:9b:64:b0:a6:0a:2f:90:1b:43:20:
         37:ba:33:3f:5f:55:80:ba:71:99:28:4e:79:40:9f:f5:74:c4:
         e4:ec:72:c5:9b:af:c9:42:cb:d8:53:e9:f4:9e:8e:9e:24:dd:
         44:c0:bd:c3:94:b1:10:7d:b1:59:04:63:91:b2:98:cc:ad:af:
         7b:03:c4:9e:24:a5:46:50:aa:33:23:be:44:60:86:ce:8f:06:
         21:76:22:c6:dd:e8:17:cc:55:18:35:7a:72:44:1f:e1:d7:5e:
         f7:ca:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:48:46 2025 by rpki-client