Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          gI+K0E2Inh09AziIyVECE61sUV0HE0yKw6/rKRaCjCA=
Subject key identifier:   3A:B2:9C:64:9F:43:42:D2:8B:5E:28:F7:BE:15:77:C7:27:67:D8:47
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       0196AB0C09636378DB91AB8535E3FCEED46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          139F
Signing time:             Wed 07 May 2025 14:00:14 +0000
Manifest this update:     Wed 07 May 2025 14:00:14 +0000
Manifest next update:     Thu 08 May 2025 14:00:14 +0000
Files and hashes:         1: 0cSUdPzh_fyOTfC0ruB0gTg1QhM.roa (hash: wUgynLVwcF9qr8K69Rsxkk1YVCBtq1S8/W1PvBOd+ok=)
                          2: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
                          3: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
                          4: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
                          5: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: OFGt8RPiS/glR2yz/ObtrayqB4R+AsAuTtZWLCEyKbA=)
                          6: TgvbB6i4HXWnjLNcKegQywUTDJ0.roa (hash: YcgfPOv/+fj5b6yQFbK2Xl9gZETkgOC07GVbs5vfuds=)
                          7: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (hash: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0c:09:63:63:78:db:91:ab:85:35:e3:fc:ee:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: May  7 14:00:14 2025 GMT
            Not After : May  8 14:00:14 2025 GMT
        Subject: CN=3ab29c649f4342d28b5e28f7be1577c72767d847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:c3:aa:d4:12:73:f3:32:19:48:51:fa:41:
                    a1:c1:d7:cd:8a:aa:68:3a:a8:41:5a:67:ab:4e:65:
                    b2:73:5c:a1:da:92:47:ec:b4:c8:8a:c3:62:4c:ff:
                    ab:73:c0:5a:f6:d1:43:7c:80:fc:c6:d7:20:53:0e:
                    4a:ff:63:30:37:92:28:83:9b:16:e1:46:0b:d2:3e:
                    2e:32:e3:c1:f2:56:e4:11:13:b3:0e:60:3d:6c:ca:
                    7d:c2:18:2e:62:d7:12:ea:a1:e5:b8:ba:d8:53:27:
                    27:bc:a1:63:3d:b0:a2:4f:b3:e1:97:4c:6b:6f:77:
                    40:ee:9a:f7:f0:6b:f7:1e:df:a7:5c:ca:ea:92:87:
                    40:12:44:08:1e:95:df:fb:c1:53:4f:ec:67:99:45:
                    0e:a5:65:8a:68:51:31:df:93:ff:27:1c:71:fe:81:
                    f4:f5:77:07:75:5f:c8:9c:3c:0d:89:f2:7c:c5:5a:
                    46:4b:64:5a:92:2f:b2:a4:b4:83:8a:1b:b0:a0:1d:
                    9c:31:d8:16:2d:9d:d4:a6:e2:ac:74:93:bb:ad:6c:
                    52:7f:f8:7c:88:e1:cf:18:80:c7:e0:f2:57:94:ac:
                    31:1c:09:95:1a:21:c6:7f:01:4c:16:7e:af:41:06:
                    6b:9e:b6:0b:23:ee:2f:18:61:5f:fe:57:5f:06:7f:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:9C:64:9F:43:42:D2:8B:5E:28:F7:BE:15:77:C7:27:67:D8:47
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:75:06:ab:51:0c:20:d9:5a:0e:4b:ad:bf:15:61:61:9c:
         b4:85:8f:02:ad:c0:77:01:c5:a1:67:b2:70:87:fc:e4:44:21:
         4b:7b:72:71:6d:fe:c1:fa:a3:eb:cb:8d:3a:c3:74:2d:19:78:
         e3:cc:c6:3c:9d:2f:f8:0f:33:0e:e7:ac:b4:3f:a4:18:8b:ef:
         69:b0:0c:92:be:a9:a5:9f:88:53:17:5c:a0:45:8d:da:46:38:
         e7:d8:ec:62:d1:a8:c6:10:39:86:01:8c:3f:c4:85:c7:a9:0b:
         06:69:ee:08:fb:8e:60:e6:11:6a:35:72:d4:72:bb:9e:a8:69:
         bb:08:34:04:a2:b9:34:a7:7e:99:c5:22:22:71:0f:c2:fc:9f:
         67:2a:5f:3f:07:07:0a:a4:0b:55:3e:13:61:b0:9a:1a:59:21:
         93:04:6b:af:f2:2f:d1:84:26:8b:3f:4f:1b:50:a6:b8:80:c9:
         a4:6f:5a:49:1c:22:54:cb:27:56:39:70:86:a4:fb:b4:eb:32:
         d5:02:fb:3e:9f:2c:aa:08:ce:af:48:37:42:3d:79:4b:b4:09:
         4f:68:3d:a8:d5:a3:a6:38:2c:2c:9f:fa:a9:ae:2b:20:46:50:
         d3:35:db:97:f8:de:33:81:75:66:0a:b8:e3:94:b5:8d:37:9f:
         20:83:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:50:29 2025 by rpki-client