Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File:                     MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier:          nvYpEPDI/CMdMp8/DqTpUYGxV5oBUeZcorBzygAC0M4=
Subject key identifier:   CF:79:53:A5:46:0F:E9:D8:EB:35:DC:93:CC:03:5F:E4:9E:1D:0B:39
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer:       /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial:       01976FD0F9DA360380769DB14913C2F81779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number:          05F6
Signing time:             Sat 14 Jun 2025 19:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:55 +0000
Files and hashes:         1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: /lt7t7RuBAz096pL9YPngG5J2mzvHsT7lmD7oPyEiYg=)
                          2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:f9:da:36:03:80:76:9d:b1:49:13:c2:f8:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
        Validity
            Not Before: Jun 14 19:00:55 2025 GMT
            Not After : Jun 15 19:00:55 2025 GMT
        Subject: CN=cf7953a5460fe9d8eb35dc93cc035fe49e1d0b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:24:0c:b1:25:01:4b:3e:3e:d1:6d:3c:1f:
                    54:85:20:86:9b:39:e1:e6:75:4e:77:92:93:c5:a0:
                    ca:55:17:a8:bb:ea:71:8b:42:5d:ea:f4:58:a2:37:
                    2d:b2:2a:16:63:76:7d:f7:f1:84:87:d7:c1:61:af:
                    f7:44:7f:e2:a4:7d:98:88:33:54:db:5c:b9:b9:02:
                    00:5b:be:4f:8f:fb:da:f4:f5:d3:a0:6b:74:5f:58:
                    ab:5e:87:f7:9b:2f:6e:3b:a0:2a:a1:7b:3b:f3:67:
                    3d:ca:d4:74:33:0c:3a:0b:2f:61:10:83:89:e2:05:
                    b2:02:50:4c:1b:7e:72:75:39:87:5f:4c:97:c7:9f:
                    fb:c0:a0:c4:95:d7:f6:73:12:c1:56:4f:91:65:4e:
                    91:e1:71:ff:99:9c:71:ae:70:45:ef:a6:e6:ee:07:
                    d2:d6:7e:65:be:5b:1b:fe:ae:aa:63:d7:e8:63:70:
                    b2:4f:a9:fb:88:7c:72:b8:ce:65:bd:8d:96:98:17:
                    66:3f:ed:5d:c5:a5:02:16:23:8a:33:f4:c0:59:b4:
                    7f:37:52:04:24:c3:2f:d1:b7:8d:29:fe:3c:7d:31:
                    fb:78:a5:ec:89:12:cf:88:f6:3f:ee:9a:8e:ad:7d:
                    24:e5:ad:21:96:3e:39:36:a4:2d:50:4e:9a:b3:57:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:53:A5:46:0F:E9:D8:EB:35:DC:93:CC:03:5F:E4:9E:1D:0B:39
            X509v3 Authority Key Identifier:
                keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ec:28:d0:f4:9d:00:13:ee:07:e1:34:88:0d:15:6c:82:f8:
         65:89:40:40:f6:6b:98:2f:15:07:81:04:9e:b3:07:a8:4c:86:
         fe:6a:0c:1d:5a:4a:a9:d5:98:d1:19:f6:ca:a0:d5:f3:75:fc:
         13:b7:ad:7d:bd:b9:02:26:1b:dc:bc:bf:c9:8d:30:1a:b4:79:
         41:a7:a6:88:9d:48:25:ed:f7:7c:53:51:fa:e1:09:ff:0c:e4:
         56:fd:f1:a4:2d:8e:06:ac:b2:13:4c:c6:80:d1:40:6f:58:a8:
         d4:53:b4:bd:c6:61:ef:bd:6d:f1:50:55:06:69:b2:48:ce:3f:
         69:92:17:cd:86:9b:72:7a:c0:be:b9:9d:37:2a:8a:cf:46:c3:
         86:8e:e9:08:93:57:ee:65:ec:1e:e3:b5:41:fe:c5:bd:c0:34:
         98:fc:51:d0:73:9c:3f:d3:ba:4f:85:e4:e9:35:47:59:74:23:
         13:4c:27:51:55:05:46:6d:e5:16:ca:7d:8b:b8:25:e5:83:c6:
         dc:dc:92:9e:1e:5b:8d:c5:83:bb:d3:f9:bb:f4:44:d0:39:da:
         b1:a6:46:0a:42:97:1b:1a:10:45:46:86:09:28:c4:b1:a4:1c:
         97:8c:77:c5:76:96:bb:a5:69:c2:a9:da:51:1c:2d:eb:a1:85:
         ac:ba:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:54 2025 by rpki-client