Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          RV6F3nzdNCocKnRv7+CDHD3qNBySCm6z5tQMb6DAcN8=
Subject key identifier:   27:7B:8E:CE:FF:DA:BB:10:F5:1B:4B:90:1D:02:F0:26:7A:EA:FF:A0
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       019874BE4816EF0615386FF821A0D6A061D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          148C
Signing time:             Mon 04 Aug 2025 11:01:24 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:24 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:24 +0000
Files and hashes:         1: 0cSUdPzh_fyOTfC0ruB0gTg1QhM.roa (hash: wUgynLVwcF9qr8K69Rsxkk1YVCBtq1S8/W1PvBOd+ok=)
                          2: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
                          3: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
                          4: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
                          5: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: eTpX5UO71dIsmxbFxSbo1V4LsgpCQWTutJ0mhfFKazk=)
                          6: TgvbB6i4HXWnjLNcKegQywUTDJ0.roa (hash: YcgfPOv/+fj5b6yQFbK2Xl9gZETkgOC07GVbs5vfuds=)
                          7: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (hash: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:48:16:ef:06:15:38:6f:f8:21:a0:d6:a0:61:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: Aug  4 11:01:24 2025 GMT
            Not After : Aug  5 11:01:24 2025 GMT
        Subject: CN=277b8eceffdabb10f51b4b901d02f0267aeaffa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:c8:de:b1:8f:86:76:68:38:a6:93:d3:15:
                    f2:a1:95:24:e5:62:66:ce:88:81:59:9f:c0:07:95:
                    d3:89:4c:de:d2:63:c4:2a:4d:39:15:e2:a1:56:a8:
                    f1:23:42:82:f9:29:4a:2f:f5:cf:37:97:de:91:54:
                    e0:5f:30:2d:69:c9:0f:99:d7:85:eb:9a:08:43:bb:
                    a9:e0:e2:b1:82:99:cc:b7:55:93:bc:37:bd:18:a1:
                    24:87:38:2b:4d:24:41:d5:bd:3e:5b:41:53:ff:e2:
                    3b:08:bd:1c:37:e8:e7:a4:83:a2:87:6d:33:b2:94:
                    31:06:92:c0:7a:13:3d:6d:48:31:01:16:d7:8b:70:
                    ab:b7:19:7d:fb:be:38:0f:40:76:7f:c2:0d:e1:6f:
                    3f:bd:b7:1e:e9:03:ee:67:d7:ab:00:75:80:96:53:
                    12:f0:48:a7:24:ad:4a:6c:22:eb:7c:92:74:20:4a:
                    d9:d6:7f:62:d1:c3:64:b8:b7:54:ab:5d:8b:a3:72:
                    1a:53:fd:42:c4:d9:eb:e7:20:69:4e:dc:5f:29:78:
                    a0:f6:d3:ec:da:91:64:0f:40:b0:34:d4:cd:e7:d7:
                    1a:03:da:8f:72:55:dd:b7:ad:e4:e1:3e:cb:6d:5d:
                    4f:1f:33:e2:50:6f:32:c2:54:bb:d9:78:c5:68:0d:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:8E:CE:FF:DA:BB:10:F5:1B:4B:90:1D:02:F0:26:7A:EA:FF:A0
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:fc:82:20:d8:95:68:17:b7:22:68:b8:7c:0c:58:37:ca:
         01:7e:1a:9c:19:1f:d9:87:a7:5c:b9:14:eb:5e:77:69:c6:be:
         f4:d2:de:c2:91:32:4c:eb:66:cf:36:4d:fe:9b:3a:dc:da:5c:
         92:43:c3:ee:49:0d:b5:ec:0b:df:a1:dc:eb:14:c3:37:e8:f9:
         3c:1f:64:28:98:e6:2e:04:29:90:31:21:32:8e:6b:31:b2:55:
         e1:c1:c5:ef:e4:99:e1:94:6c:6d:4c:5c:ce:54:89:75:f5:de:
         0b:26:b0:31:72:16:8c:ee:d9:d2:d6:44:e3:b5:ea:9f:fb:63:
         d8:ad:16:64:c4:13:73:cb:24:31:c7:ab:0d:67:fc:70:a4:75:
         8f:92:a1:8c:f9:ee:4a:44:fa:24:f2:4c:2f:33:20:a4:89:83:
         2f:cf:c9:29:cf:e7:9a:35:3b:11:8f:a4:97:28:d5:37:7a:c0:
         b0:84:70:a9:f4:cd:05:27:3a:da:03:49:4f:83:c5:4e:84:a3:
         6e:80:61:e0:f6:fa:14:0c:07:01:7c:00:c1:10:83:8d:fd:02:
         60:00:f0:e6:9a:88:aa:98:3a:f8:37:98:de:6e:b2:5f:6a:58:
         87:0f:82:e5:0b:de:da:2b:70:71:6a:06:a4:01:e1:49:5a:80:
         03:21:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:36 2025 by rpki-client