Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File:                     MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier:          ixT6QiqfhmzRsc1aqmgtpUAWhGAClu5BZjAh2UO3roQ=
Subject key identifier:   C0:9F:73:8D:5D:94:8D:3B:9D:88:06:B4:AC:6D:FF:C5:C9:66:64:C8
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer:       /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial:       019776E5AB82F31899C626248348BFDC5619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number:          0577
Signing time:             Mon 16 Jun 2025 04:00:52 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:52 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:52 +0000
Files and hashes:         1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=)
                          2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: YPrKrym9qCwU4KCbAN2NzBbulF2QhQFZc52IHyxd0l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:ab:82:f3:18:99:c6:26:24:83:48:bf:dc:56:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
        Validity
            Not Before: Jun 16 04:00:52 2025 GMT
            Not After : Jun 17 04:00:52 2025 GMT
        Subject: CN=c09f738d5d948d3b9d8806b4ac6dffc5c96664c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:5b:3b:fc:ff:8d:b8:45:6b:5c:30:b6:4a:
                    47:05:bf:cb:2a:50:68:48:8d:27:b8:7f:93:ea:e6:
                    0c:23:09:e5:9a:27:d9:29:5c:3d:a0:40:87:fe:4f:
                    db:b0:df:93:47:8d:cf:52:f7:a3:76:cb:98:4c:14:
                    67:57:a5:50:cb:f1:4c:a3:d2:5c:8c:95:5e:d7:c5:
                    d1:2d:f4:dd:8d:d6:02:de:84:32:e1:73:26:de:15:
                    8a:39:b3:0e:44:d7:7b:9f:a7:96:f0:4e:76:c1:78:
                    86:0d:6f:6b:36:4c:f7:cf:54:28:d8:94:f2:e8:a6:
                    43:7c:e7:8f:9e:74:28:1f:a8:86:55:75:e1:5c:56:
                    fa:f6:e7:af:44:09:34:38:79:8e:8a:86:20:4c:fc:
                    19:da:da:b7:12:74:bc:21:2c:19:ae:0e:a5:7f:c0:
                    6e:02:a6:59:12:93:3d:3e:3d:c3:c8:fa:dc:4e:15:
                    ac:e1:e8:3a:37:18:ab:a2:2d:cd:80:86:17:32:40:
                    bb:0f:2f:f6:21:7f:79:71:23:65:91:88:78:55:6a:
                    08:9d:b4:70:c4:cf:21:e6:c6:65:d0:26:b1:dd:e0:
                    e7:af:84:93:d3:62:03:97:5f:ae:f0:4d:38:d6:f2:
                    0f:c6:93:27:1d:f1:4f:9c:0e:b6:63:4e:6d:5d:82:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:73:8D:5D:94:8D:3B:9D:88:06:B4:AC:6D:FF:C5:C9:66:64:C8
            X509v3 Authority Key Identifier:
                keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9b:61:86:af:91:11:86:9c:dd:a4:04:31:2b:f6:7f:0d:c7:
         53:ec:15:ef:ff:32:ab:74:0f:4d:9f:f4:9b:cb:eb:ac:c2:04:
         fd:76:03:75:26:05:08:ba:8a:9d:55:09:e9:aa:cb:1b:d3:ab:
         24:ca:b0:ae:7d:d7:10:5e:af:51:3e:40:1e:55:ed:ee:9c:01:
         13:f9:b4:58:26:b7:ac:c2:7a:30:54:ba:20:89:52:4a:8a:0f:
         5b:af:25:a5:42:f2:85:44:83:42:42:99:4c:5a:41:5b:b6:c6:
         b4:9d:81:fb:71:70:a3:d8:57:33:2b:cc:b1:fe:17:80:2d:ab:
         31:7a:47:f0:b5:89:d5:4a:3d:34:35:80:4f:bc:ee:d4:d9:48:
         7b:86:e0:5e:f5:00:0c:0e:e6:7a:d1:80:40:f9:09:29:5e:8d:
         f0:15:0a:55:f9:60:4f:5b:f9:08:92:55:5c:e1:ef:f8:76:0f:
         26:16:d6:8e:17:21:3d:ec:86:1d:2a:8d:b7:e5:49:95:29:fe:
         b0:6c:49:17:99:6a:39:8c:ec:55:8c:8f:4d:b8:ef:7c:c0:2a:
         d1:dc:9c:e9:f0:3c:1e:8c:a8:3f:29:7f:1d:23:8f:11:bb:f1:
         d8:f2:25:60:dc:95:0b:a3:90:e4:bb:90:ef:3d:a9:22:50:e9:
         00:6e:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:48 2025 by rpki-client