Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File:                     MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier:          KXDB8Gwcmky0Z8zHHLO9BzFnKJMPFYT3HvOTKE7vWXI=
Subject key identifier:   1A:4D:32:EB:F9:2A:96:9A:76:DE:F7:DC:3A:46:45:37:B1:43:10:5E
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer:       /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial:       0198741952D0EB5CDAD84192DEB034E1DAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number:          1366
Signing time:             Mon 04 Aug 2025 08:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:13 +0000
Files and hashes:         1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: /XWN4a7m6qI1zBZLRt209iyNsBewv+JfHEnGSGW4xds=)
                          2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
                          3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:52:d0:eb:5c:da:d8:41:92:de:b0:34:e1:da:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
        Validity
            Not Before: Aug  4 08:01:13 2025 GMT
            Not After : Aug  5 08:01:13 2025 GMT
        Subject: CN=1a4d32ebf92a969a76def7dc3a464537b143105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:be:f3:2e:46:13:b4:e1:39:3a:52:fc:0c:
                    12:5c:77:ce:bd:10:19:04:6d:e4:25:66:27:64:1a:
                    ce:99:4e:52:b7:b1:72:aa:d0:85:ba:ba:42:e1:8d:
                    41:07:3c:31:15:94:61:22:3f:65:bb:c7:dd:83:af:
                    41:40:f0:fd:0f:bc:68:7d:07:76:ae:36:87:6e:6b:
                    80:45:20:5e:82:91:27:48:55:c5:df:21:9a:bf:d4:
                    b1:e3:2c:ea:58:ec:49:ce:88:e9:ac:bd:e6:ad:05:
                    3c:3a:28:ac:e7:63:48:a6:cd:bc:c0:df:f6:12:3b:
                    8f:b2:9a:30:06:c8:cb:b1:90:65:43:f1:26:ef:fb:
                    62:6c:2f:0b:f6:00:34:84:51:96:d5:64:e6:b6:9b:
                    d3:c8:11:37:14:50:b1:b3:20:f0:f3:23:a2:dd:8d:
                    bf:b7:c1:da:8d:ab:23:38:a6:83:cb:e0:30:9e:48:
                    50:79:64:77:35:99:6e:e2:46:0a:fe:d4:21:23:53:
                    e6:f7:d0:70:f7:f0:ed:8f:3a:41:47:ea:40:91:cf:
                    c9:49:e8:7a:fc:b8:23:d0:f5:22:9d:50:88:0d:97:
                    27:af:ee:95:19:34:ef:35:ef:4c:c8:7b:6d:b5:c5:
                    08:5f:af:60:5f:ac:1b:56:71:1a:64:c5:8d:bd:53:
                    8d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4D:32:EB:F9:2A:96:9A:76:DE:F7:DC:3A:46:45:37:B1:43:10:5E
            X509v3 Authority Key Identifier:
                keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:4c:7b:86:b9:b2:16:5f:7c:e2:78:c4:6a:4e:23:fa:bf:
         d6:47:39:fc:7d:9b:21:05:b6:f0:78:48:64:31:c7:41:63:5d:
         b3:56:85:49:a3:c3:04:24:4d:5f:da:02:a6:a6:4d:f3:86:c8:
         53:75:2b:e5:68:50:d8:f9:83:fd:a1:5f:e3:b1:62:fc:ca:9a:
         e4:05:57:1f:00:d9:84:01:77:30:cf:da:74:f0:1d:75:4c:5b:
         06:1a:cf:9f:aa:6a:d5:49:77:7c:7c:ba:b2:ac:72:25:c1:0a:
         33:0e:1c:03:e0:8a:7c:d6:23:14:89:e9:95:47:76:d3:34:8e:
         d9:e7:70:d4:c4:a1:1b:6c:80:cf:4d:17:dd:de:71:d6:93:65:
         50:68:0a:f5:8e:84:05:27:b8:04:18:f2:03:2c:6b:37:1c:c5:
         61:4a:80:d7:f2:0d:45:b3:cb:9c:af:d6:d8:2d:91:35:fe:3a:
         4b:65:01:af:71:55:84:e6:77:a7:e4:eb:cc:50:df:46:e4:ef:
         95:be:9e:ab:2d:12:2d:7f:55:bb:a3:7e:95:87:f2:b0:8b:15:
         21:4c:64:ad:b1:58:6e:ca:85:64:2c:33:a9:43:1c:5a:65:a4:
         56:4b:6c:9e:3c:c2:c4:99:fe:20:6e:0a:0b:9c:8b:dc:f1:2a:
         2d:24:15:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:16 2025 by rpki-client