Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          96dEKNw10HguIB7iwO/D3rPWcSXczrp0q7YIpjpWZXM=
Subject key identifier:   E3:F4:47:55:08:E2:C6:99:2C:33:8B:F6:6F:DB:B3:C9:B2:11:A5:F4
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       01976D3D68FAAB8B38272E19F7451BDBEB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0BAC
Signing time:             Sat 14 Jun 2025 07:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:30 +0000
Files and hashes:         1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: L/St7fFJ11AwWCZpebG7jbR6OIt7HHg0t8oZAOgmaJo=)
                          3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
                          4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:68:fa:ab:8b:38:27:2e:19:f7:45:1b:db:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Jun 14 07:00:30 2025 GMT
            Not After : Jun 15 07:00:30 2025 GMT
        Subject: CN=e3f4475508e2c6992c338bf66fdbb3c9b211a5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:ce:b9:4e:52:7b:0f:ee:9c:69:8f:2a:db:
                    0a:d2:5f:32:b1:b7:d6:10:5b:d2:47:db:09:99:00:
                    d3:f7:3e:5b:b5:f4:41:45:2e:cc:98:c4:af:00:9a:
                    1b:a1:cc:53:ce:a7:61:86:ad:6b:e9:96:5d:0c:f0:
                    51:55:f1:71:c7:bf:1a:0a:5a:2a:94:0e:6a:4b:8f:
                    6c:50:a8:72:c3:aa:e2:42:c4:e5:87:89:77:51:11:
                    cb:6c:7f:ae:fb:24:56:6e:09:8f:6d:ae:00:89:62:
                    c0:35:85:dc:94:2f:31:4b:0e:70:60:b7:7b:bc:3a:
                    60:94:f2:c3:1d:46:e8:29:e4:df:6c:68:73:df:33:
                    9f:b6:f6:5b:99:a7:4e:1b:c2:af:18:6f:41:16:1f:
                    af:2b:ae:0d:fb:96:5c:d2:f8:b4:4d:8a:71:f5:0e:
                    e7:0a:0d:62:5b:0f:6b:64:31:62:8a:32:ae:ce:19:
                    6e:10:12:86:7b:66:e2:7d:4e:5d:60:d0:dc:8a:b4:
                    b4:a2:35:4f:55:e7:b2:b5:c6:0b:f8:dd:4b:b0:de:
                    47:70:3b:d9:27:50:34:d7:8a:8d:16:37:e7:ee:9b:
                    2f:78:71:e4:00:be:b4:f9:d5:9f:a2:f0:96:85:42:
                    d0:25:c2:8c:b8:c1:fd:76:1d:bd:7a:85:5a:09:87:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:47:55:08:E2:C6:99:2C:33:8B:F6:6F:DB:B3:C9:B2:11:A5:F4
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8b:d0:fc:77:87:74:ca:3d:7a:20:bc:6e:81:0b:fd:c7:c0:
         ea:e7:64:b7:38:a8:60:f8:48:b1:3f:53:02:0f:36:26:a2:ff:
         07:4e:5b:62:b8:44:53:60:54:6f:09:86:54:56:31:35:b1:3e:
         0e:94:ee:53:97:5d:95:34:7d:93:a0:25:b6:37:f7:c5:44:6f:
         77:bb:86:73:08:dc:fa:bb:9d:52:80:07:90:1e:b8:ff:b9:7e:
         0f:95:27:c8:c3:83:17:a5:3e:07:36:8d:c9:3b:de:21:ff:0c:
         72:0b:ec:70:75:a0:15:16:cc:7a:c0:34:44:4a:c9:44:a8:1a:
         29:0d:a1:15:b3:ef:7f:7c:ae:d6:d0:e4:d5:4e:4d:70:ec:1a:
         f6:18:07:c4:65:20:60:b6:07:15:1b:04:9e:03:ce:48:64:bc:
         30:74:45:05:61:40:ba:54:37:06:6b:a5:2b:86:9a:38:03:bc:
         11:0a:b5:66:98:74:7d:b1:b1:e6:d8:24:d7:70:1b:b4:24:80:
         40:d6:2d:52:c1:91:fe:59:61:78:7c:6a:c5:9e:6e:6f:19:23:
         a2:b7:15:8d:70:79:fe:73:c6:5d:d0:4f:db:62:d3:7d:4b:75:
         7c:56:93:20:11:dc:4d:59:7e:7b:8d:be:e7:67:b1:4c:64:91:
         9f:9a:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:39 2025 by rpki-client