Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File:                     MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier:          Hkrh9nyfpz0wrFTILdWrPly9J5v89n3QYnjxVZMUy/c=
Subject key identifier:   BC:4E:1B:D9:4D:6F:9F:49:C9:6A:5C:AD:C0:7E:6D:92:8B:32:F7:74
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer:       /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial:       019786FD4DCFCD175D77ED2FE26AF16CA282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number:          107C
Signing time:             Thu 19 Jun 2025 07:00:36 +0000
Manifest this update:     Thu 19 Jun 2025 07:00:36 +0000
Manifest next update:     Fri 20 Jun 2025 07:00:36 +0000
Files and hashes:         1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: X8P6VY+fJkCHXVgJHJryOdvndAghjjYf9Kc42fzVq6I=)
                          2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:fd:4d:cf:cd:17:5d:77:ed:2f:e2:6a:f1:6c:a2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
        Validity
            Not Before: Jun 19 07:00:36 2025 GMT
            Not After : Jun 20 07:00:36 2025 GMT
        Subject: CN=bc4e1bd94d6f9f49c96a5cadc07e6d928b32f774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:99:50:0d:9e:a2:34:3c:2a:3c:2d:2f:1d:
                    bc:e4:cc:b2:f0:26:93:84:66:20:0c:a8:f8:db:6d:
                    b3:ad:75:1a:88:ec:10:4f:66:d7:79:c3:53:13:af:
                    4e:f2:2f:94:1a:22:6f:31:db:8d:1f:c4:c4:fa:5a:
                    3a:30:67:91:5c:50:8e:06:4d:ea:f3:15:41:aa:81:
                    8d:14:49:7f:11:10:ec:60:cb:aa:6e:d8:60:35:2c:
                    6b:32:34:bd:a7:94:44:44:92:f4:2d:96:04:77:83:
                    81:90:71:af:2b:6c:0a:38:50:c0:6f:96:91:a4:8d:
                    33:3d:8e:44:08:04:63:01:12:c7:c7:69:c9:ad:e4:
                    f2:d9:40:d4:2f:3d:f0:84:05:6e:e4:62:1a:99:8f:
                    77:c3:be:fa:6f:87:41:9f:86:79:53:60:00:15:11:
                    26:31:bc:48:1a:37:34:13:7a:94:a1:76:93:34:c3:
                    ef:9c:d1:a6:5b:ef:e6:df:26:3b:75:a6:38:c5:2d:
                    26:4d:92:ae:29:c5:30:c8:4a:d4:f9:74:b7:7e:3b:
                    dc:55:77:40:af:fe:2d:42:de:11:3a:d1:0b:fd:f3:
                    82:06:5b:8c:f8:3b:3a:47:83:ba:b1:0b:02:36:88:
                    49:32:bc:1a:97:fd:23:8f:c1:4d:25:93:0f:ad:6e:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4E:1B:D9:4D:6F:9F:49:C9:6A:5C:AD:C0:7E:6D:92:8B:32:F7:74
            X509v3 Authority Key Identifier:
                keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f4:f7:6a:5d:49:8c:38:8b:ed:b8:67:37:3e:b1:1a:5f:8f:
         5c:4a:d2:ec:a3:ad:3f:6d:d0:c8:b1:31:7a:f1:03:31:51:76:
         b8:0a:60:c1:32:13:a3:f8:f8:10:a9:39:4b:62:28:d8:12:35:
         6e:74:5d:e4:21:a2:06:b3:a7:db:04:79:54:e1:5f:99:de:7d:
         93:15:c9:60:c0:21:9f:0e:99:ec:8f:cd:56:d9:a4:5e:66:36:
         64:00:c2:85:c7:f5:19:45:a4:a8:e5:31:75:cb:0e:02:5b:20:
         34:14:f5:d9:7f:28:08:e3:7d:5b:5d:2c:51:21:7b:25:a8:b6:
         30:ad:27:79:d5:4e:58:f1:88:10:b4:b8:89:71:46:1d:7e:f0:
         87:60:32:ab:cf:f8:e9:92:8a:7c:d6:d3:77:44:f8:88:f0:2b:
         fd:d0:a0:da:b4:f8:8b:71:7a:51:21:84:63:17:4c:ef:c5:89:
         9d:9f:f8:69:96:59:d0:02:2c:ed:6e:aa:e7:1f:ac:33:96:fb:
         ee:fb:d0:2e:17:af:75:81:90:7d:c9:4c:97:2a:f8:45:20:dd:
         33:ac:9a:b4:cc:03:40:06:44:6e:df:21:88:78:69:b3:1b:85:
         bf:f2:83:06:8c:9a:96:34:e8:d1:25:79:a8:e8:4f:33:e3:24:
         15:39:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:51 2025 by rpki-client