Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File:                     Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier:          ES+cVSwI3Rzt6MQY3SziqOaq4csm7nQE+qYDmIXUhno=
Subject key identifier:   B0:A3:18:EB:3A:EC:93:90:E3:E4:2F:FA:4A:4E:C6:33:7F:AD:9B:4F
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       0198D4A7EDF0D33FFFAAF3A768FE9F5A0EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 02:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:31 +0000
Files and hashes:         1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
                          2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: QswfCcSX+Oe/lo13WveHjr6Z3wyEqpzy2YA7QUJDxWA=)
                          3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
                          4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
                          5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
                          6: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
                          7: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
                          8: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:ed:f0:d3:3f:ff:aa:f3:a7:68:fe:9f:5a:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Aug 23 02:00:31 2025 GMT
            Not After : Aug 24 02:00:31 2025 GMT
        Subject: CN=b0a318eb3aec9390e3e42ffa4a4ec6337fad9b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:45:42:8c:93:7e:1e:c6:ad:6b:fa:5d:30:
                    42:2e:2a:bf:da:b6:eb:b9:c7:df:5b:20:1a:4d:d1:
                    6e:83:76:17:86:26:e8:b3:f0:92:fb:21:70:21:81:
                    47:fc:9a:c9:7b:66:e0:2c:68:84:ce:11:3f:ab:7b:
                    7f:dc:ae:6d:d9:26:a6:c6:ef:2c:75:9d:76:43:f4:
                    d1:16:7e:35:68:ed:d5:49:8d:53:1f:4d:b4:31:f1:
                    82:86:08:75:61:4a:e6:ad:63:26:8b:74:4c:df:37:
                    76:a1:98:fe:69:37:e1:64:5a:ad:59:9f:c4:56:43:
                    7d:cf:a6:45:0f:2f:5d:af:3e:ca:11:19:84:98:40:
                    12:47:1a:fa:9e:a7:c5:dc:af:a3:ae:4b:6b:83:a2:
                    4c:41:76:66:37:d8:a6:de:8c:eb:02:06:15:10:4f:
                    d8:61:8c:8e:81:c3:6c:4a:d6:5f:5c:14:2a:08:4f:
                    28:99:40:7d:de:1f:dd:ab:86:8b:4b:c0:ab:7a:50:
                    c3:9b:28:c7:f9:0a:62:fd:f6:e4:ef:63:65:e6:1f:
                    f1:e9:24:95:f9:30:59:0b:70:d7:9a:15:f6:98:2a:
                    43:7c:2c:3d:93:39:a4:34:2f:d5:55:ee:00:84:66:
                    c2:e9:33:c7:2d:3e:09:14:85:93:28:e2:36:4f:55:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A3:18:EB:3A:EC:93:90:E3:E4:2F:FA:4A:4E:C6:33:7F:AD:9B:4F
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:db:86:fb:03:f1:6a:d4:4d:a6:ad:3d:82:e3:ec:1a:a8:02:
         23:27:25:df:28:9f:1f:d0:0c:d1:e7:c8:c5:a7:7e:c6:91:7a:
         2d:f8:9d:5c:ba:73:3b:6f:30:1f:6a:78:78:dc:1d:3e:bb:40:
         04:3a:23:51:44:5c:41:d1:74:f0:89:69:d3:76:04:f4:75:52:
         c8:b2:08:92:1a:58:5d:3c:db:ea:b1:44:3f:b8:f5:f5:eb:0c:
         8e:28:2a:e2:4b:e0:c2:78:99:d8:32:f2:8c:89:77:02:22:70:
         bf:e7:26:be:cf:5d:04:55:a0:c2:69:7d:b0:4d:1e:4b:41:77:
         ff:22:df:da:ea:e7:7d:36:e5:14:94:47:28:63:8a:b7:c3:a8:
         78:33:84:fc:b5:fb:ae:d9:1b:30:6a:cd:ce:7a:75:b5:f7:06:
         66:09:2b:35:a0:57:7f:76:47:80:70:92:c5:e9:43:98:d0:85:
         8b:57:b5:07:91:53:17:c4:b0:e7:f3:c1:8b:c8:80:df:25:10:
         6b:df:2c:bf:e6:5a:3a:52:46:9d:e7:b7:51:71:90:81:f1:3a:
         ff:c6:3b:d2:52:f0:f6:5f:eb:67:64:8a:64:cb:70:68:d6:6f:
         b4:8b:b3:81:50:b7:ec:5b:22:05:6e:d5:8d:ec:c7:93:fa:21:
         3c:53:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:41 2025 by rpki-client