Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File:                     MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier:          a3+AOzecdmKjtNOMNkBeB0Kcut7i65RgBVaCnYK2rw4=
Subject key identifier:   B5:34:96:0E:DC:A2:65:CF:BD:4E:AB:1D:73:B8:CA:7E:8C:C3:F5:92
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer:       /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial:       01987B2DC7CA8553FB2B54D1E800A4A3985A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number:          148F
Signing time:             Tue 05 Aug 2025 17:00:54 +0000
Manifest this update:     Tue 05 Aug 2025 17:00:54 +0000
Manifest next update:     Wed 06 Aug 2025 17:00:54 +0000
Files and hashes:         1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
                          2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
                          3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: z1zZhjzsPOO5mFB/pD4c1A7zvtW/oJccIMUs1Rd98pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2d:c7:ca:85:53:fb:2b:54:d1:e8:00:a4:a3:98:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
        Validity
            Not Before: Aug  5 17:00:54 2025 GMT
            Not After : Aug  6 17:00:54 2025 GMT
        Subject: CN=b534960edca265cfbd4eab1d73b8ca7e8cc3f592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:f3:38:33:e8:98:55:de:b0:83:23:27:45:
                    58:50:c4:23:ee:e0:9e:6f:57:ce:6e:9d:ec:08:a6:
                    2b:70:12:d9:0a:a3:2d:56:4c:cd:f2:24:6e:f1:be:
                    82:a4:4c:56:4a:82:ef:b1:83:67:ee:a2:2e:b4:c7:
                    34:50:e0:4e:dc:17:14:60:47:84:04:96:d3:94:c5:
                    48:95:cc:3a:23:52:ee:9c:46:1a:f5:71:b7:fb:5f:
                    29:23:c7:12:7f:b3:09:a3:e9:19:96:04:f9:14:45:
                    20:95:fc:11:86:66:61:be:87:81:f4:00:b6:e5:7e:
                    48:a0:22:8e:ca:12:01:31:6c:73:7c:b0:ee:7d:c5:
                    bf:ee:60:0e:5d:6a:2f:22:4b:db:42:2c:f2:c1:38:
                    26:20:d6:55:4d:87:02:83:0b:9c:b9:96:e9:30:b4:
                    d2:85:b8:66:77:1f:b1:b4:c2:05:5a:b5:a6:6f:0f:
                    15:bd:cb:43:76:90:95:85:31:bd:20:9c:f0:c7:5e:
                    f1:ec:0b:3a:c8:02:b5:02:6b:1b:5c:98:b3:40:4d:
                    68:8c:b1:91:dc:ae:63:68:31:9b:63:dc:e6:0b:a6:
                    ac:c2:9c:05:eb:ea:e2:64:1f:84:ec:12:22:3c:a8:
                    e7:17:ca:d5:aa:95:c4:8c:b9:25:d3:80:8f:aa:b3:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:96:0E:DC:A2:65:CF:BD:4E:AB:1D:73:B8:CA:7E:8C:C3:F5:92
            X509v3 Authority Key Identifier:
                keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:73:29:e9:61:38:b9:62:e2:9e:9b:7b:f5:f4:5d:5e:6a:
         f2:e1:00:f3:9a:d0:2f:59:0a:aa:ef:bd:8a:6b:d5:90:97:94:
         41:b8:1b:e5:68:9a:27:fa:c6:32:8c:01:db:ff:c2:37:5a:1e:
         65:fe:f3:0e:9d:89:bb:a7:51:12:c2:2b:9d:a7:18:1c:b5:f9:
         17:49:d3:be:d6:c7:25:aa:23:08:71:35:9e:5b:a2:ae:e7:bf:
         8a:89:8b:6d:1f:f1:46:21:d7:bc:b3:d1:49:13:dc:00:0e:71:
         f3:4d:7b:29:35:1b:50:66:9a:41:d5:77:6e:cb:5c:dd:cb:2d:
         3a:14:a2:b9:8e:18:60:13:ae:16:bb:64:3e:db:3b:44:09:18:
         bb:dd:92:ca:52:7e:67:22:d1:aa:ad:6e:94:48:78:26:11:36:
         d8:98:e1:b1:99:14:5c:cb:c6:e5:01:bc:4d:f5:f2:e8:36:69:
         5a:7b:c6:b9:e5:9c:fd:99:51:9c:1f:ab:f9:df:33:e1:79:84:
         33:8b:65:06:1b:9c:cb:b4:b3:9a:2e:2a:41:87:73:9b:f8:8b:
         b8:19:c1:23:4c:f3:62:55:40:92:16:f0:b1:04:48:da:fc:2f:
         1d:21:6e:d9:66:21:13:49:33:83:5a:ed:22:ab:8c:d6:b4:41:
         73:8f:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:30 2025 by rpki-client