Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File:                     MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier:          DjbUaan7ktnhHgUhQNdcrY41G6xNd2IxbeBGqnK4ldc=
Subject key identifier:   46:E4:BC:5A:BF:C3:0A:86:76:14:D9:93:42:47:2C:95:8B:92:7C:72
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer:       /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial:       01976F2BFE089899826A39AE6EC1B35140A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number:          0B79
Signing time:             Sat 14 Jun 2025 16:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:43 +0000
Files and hashes:         1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: 2pEWF8CsqCZkFbGENM/lVGWFinBVMdnAXcDPgeOhOjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:fe:08:98:99:82:6a:39:ae:6e:c1:b3:51:40:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
        Validity
            Not Before: Jun 14 16:00:43 2025 GMT
            Not After : Jun 15 16:00:43 2025 GMT
        Subject: CN=46e4bc5abfc30a867614d99342472c958b927c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:b0:aa:a3:be:4c:1a:9c:e9:bb:66:a6:5d:
                    78:4c:09:ce:1e:6c:e8:9e:c2:0b:04:c2:7e:22:56:
                    b7:79:6f:51:a6:35:57:ef:45:da:31:ab:eb:84:76:
                    4d:e4:8c:71:42:ba:ce:94:6b:3c:d5:f0:f9:8d:11:
                    59:5b:e0:f8:df:ca:0c:b3:49:88:fc:4c:e5:04:01:
                    8d:e6:50:4f:9a:71:3e:21:0b:ac:7e:d7:7d:80:71:
                    8c:36:e7:5e:03:1d:c8:62:37:91:60:14:f5:4d:80:
                    cd:c7:00:ef:a4:d4:3a:43:91:6c:fc:63:25:13:74:
                    ed:bf:53:c5:59:d9:6e:fd:7a:95:e9:79:72:7d:77:
                    9b:05:05:e0:0f:c1:bb:59:12:23:84:85:e5:37:7f:
                    2e:54:72:f7:97:27:a2:4e:bc:77:03:30:3f:6c:8a:
                    15:9f:6e:35:44:00:9e:ff:4e:6a:a9:20:75:95:bb:
                    04:3c:76:8e:7a:87:b0:71:75:50:e9:85:ab:fa:63:
                    37:12:3e:68:74:02:d3:9d:df:5e:49:03:48:78:82:
                    e9:af:36:f7:4b:be:f7:ab:36:fa:2c:9c:90:4b:dc:
                    53:84:0f:7b:2a:cd:a6:d7:d2:c6:42:2f:d5:f8:e0:
                    45:42:0c:a8:a3:8b:b5:33:78:16:60:84:a6:f2:26:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:BC:5A:BF:C3:0A:86:76:14:D9:93:42:47:2C:95:8B:92:7C:72
            X509v3 Authority Key Identifier:
                keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:0d:3b:e7:55:47:07:13:8a:ac:f4:c6:e7:aa:b6:16:e4:
         3d:93:3f:23:c8:3f:f1:f7:58:2c:91:9e:ba:91:a8:4b:d5:ea:
         df:cb:0a:90:d5:97:60:b4:60:15:84:ad:cb:25:a0:36:1c:5f:
         c0:6d:5c:9a:4a:6a:5c:00:f4:79:4c:f8:e5:0c:14:05:0b:22:
         79:aa:44:b0:20:f6:9b:4d:c2:38:da:2f:be:81:e1:57:c5:4d:
         4d:55:d3:71:5c:15:09:57:57:73:0e:e5:af:2a:4c:fc:28:2b:
         1c:bb:3d:98:55:30:9d:ad:86:12:0b:3c:85:4b:3c:37:14:b0:
         e8:eb:d6:7f:d0:10:37:e8:ae:dc:73:b6:81:03:a0:44:93:69:
         0b:4f:41:19:f8:8c:cb:e1:10:88:be:9b:25:b8:4f:c7:7e:09:
         b1:f5:07:01:a8:95:be:0a:5e:62:aa:9a:5c:ca:42:a5:00:68:
         2c:a1:11:ac:03:ac:05:a9:d1:9f:42:ae:64:bd:9e:4b:90:5b:
         14:27:11:fc:4f:71:41:5c:55:6a:10:94:21:b9:db:e3:00:e8:
         5b:19:2e:2b:44:ce:0d:23:02:ad:df:cb:a4:e9:dd:c5:8f:fd:
         6d:88:6a:87:da:20:33:6b:f5:2b:53:55:0c:5e:78:64:2e:10:
         ba:fe:3a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK/4ImJmCajmubsGzUUClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDM4ZjZhN2JiNzc3MGE3MmFlNzAwZDMxYjZhMDBhODFl
ZThkYmIwHhcNMjUwNjE0MTYwMDQzWhcNMjUwNjE1MTYwMDQzWjAzMTEwLwYDVQQD
Eyg0NmU0YmM1YWJmYzMwYTg2NzYxNGQ5OTM0MjQ3MmM5NThiOTI3YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FewqqO+TBqc6btmpl14TAnOHmzo
nsILBMJ+Ila3eW9RpjVX70XaMavrhHZN5IxxQrrOlGs81fD5jRFZW+D438oMs0mI
/EzlBAGN5lBPmnE+IQusftd9gHGMNudeAx3IYjeRYBT1TYDNxwDvpNQ6Q5Fs/GMl
E3Ttv1PFWdlu/XqV6XlyfXebBQXgD8G7WRIjhIXlN38uVHL3lyeiTrx3AzA/bIoV
n241RACe/05qqSB1lbsEPHaOeoewcXVQ6YWr+mM3Ej5odALTnd9eSQNIeILprzb3
S773qzb6LJyQS9xThA97Ks2m19LGQi/V+OBFQgyoo4u1M3gWYISm8iZKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbkvFq/wwqGdhTZk0JHLJWLknxyMB8GA1UdIwQY
MBaAFDIDj2p7t3cKcq5wDTG2oAqB7o27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgt
ZDc5NTA4ZTE2ODY5LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgtZDc5NTA4ZTE2ODY5
LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTUNO+dV
RwcTiqz0xueqthbkPZM/I8g/8fdYLJGeupGoS9Xq38sKkNWXYLRgFYStyyWgNhxf
wG1cmkpqXAD0eUz45QwUBQsieapEsCD2m03CONovvoHhV8VNTVXTcVwVCVdXcw7l
rypM/CgrHLs9mFUwna2GEgs8hUs8NxSw6OvWf9AQN+iu3HO2gQOgRJNpC09BGfiM
y+EQiL6bJbhPx34JsfUHAaiVvgpeYqqaXMpCpQBoLKERrAOsBanRn0KuZL2eS5Bb
FCcR/E9xQVxVahCUIbnb4wDoWxkuK0TODSMCrd/LpOndxY/9bYhqh9ogM2v1K1NV
DF54ZC4Quv46wQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:43:28 2025 by rpki-client