Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File:                     mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier:          tlif6XVD5JzxFESOma+UvLQ7nXIlkbBw/E4vLVkbRN4=
Subject key identifier:   8D:55:9F:56:FE:2C:F2:62:46:32:76:9F:11:DA:4C:A5:01:45:B0:F4
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer:       /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial:       0196AA9E5EB2F59A110EE01A33E35FF6B98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number:          0807
Signing time:             Wed 07 May 2025 12:00:27 +0000
Manifest this update:     Wed 07 May 2025 12:00:27 +0000
Manifest next update:     Thu 08 May 2025 12:00:27 +0000
Files and hashes:         1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: czqBPt5w+Q0PT42eXrlgOk/nzsgwKr2EaeDTHt8ntq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:9e:5e:b2:f5:9a:11:0e:e0:1a:33:e3:5f:f6:b9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
        Validity
            Not Before: May  7 12:00:27 2025 GMT
            Not After : May  8 12:00:27 2025 GMT
        Subject: CN=8d559f56fe2cf2624632769f11da4ca50145b0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:40:70:31:10:a8:4f:63:bf:f7:2b:7f:44:03:
                    2f:9b:54:09:64:57:63:ee:0c:cd:b8:2a:bf:df:8b:
                    10:cd:25:c8:89:3a:47:c2:e3:1f:b9:92:f7:3c:f2:
                    50:51:3e:7b:a1:76:d1:32:06:53:5f:4b:1b:f3:8e:
                    1b:82:a0:9e:7e:f3:2a:fb:d2:14:9c:c8:bc:f6:07:
                    94:db:29:62:d4:17:7b:6b:e3:eb:2a:53:76:ba:6e:
                    5b:7c:7d:78:12:59:fc:8b:71:ea:77:b4:a4:79:85:
                    37:b2:3f:91:99:0c:dd:61:52:9a:3b:29:75:4e:d8:
                    d8:b8:1c:0e:ce:f2:d4:4b:a2:2d:cb:fa:83:51:7c:
                    bd:6c:f9:8a:16:3d:5b:36:18:3c:7f:2b:f3:a6:cf:
                    a3:c5:ba:3a:88:36:64:61:c7:77:2e:47:eb:4a:c9:
                    6c:7c:dc:f4:f5:c1:81:fb:fa:09:46:7f:33:69:51:
                    04:cf:d1:1f:a3:89:08:35:67:b4:23:ce:18:4e:51:
                    3e:c6:79:c7:31:fc:82:f8:26:9d:30:53:02:4b:ae:
                    d0:b0:26:79:98:86:86:35:c2:6f:7c:ba:89:4a:d1:
                    c0:59:9a:71:c6:a8:2e:62:43:d0:92:47:c6:5b:e8:
                    14:b4:63:57:bf:4c:c6:58:be:8d:3d:30:91:cc:41:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:9F:56:FE:2C:F2:62:46:32:76:9F:11:DA:4C:A5:01:45:B0:F4
            X509v3 Authority Key Identifier:
                keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:6e:63:73:15:89:f3:b9:20:99:9d:4f:45:25:42:51:97:
         78:95:e9:21:07:d7:88:22:3e:87:52:e9:d8:24:e3:a6:d3:1b:
         1c:d7:8a:9d:6c:8f:8e:d4:03:4e:2d:c4:a1:b6:fb:ad:48:14:
         2a:de:c9:80:8c:c2:49:8f:44:ad:c8:6f:77:00:f7:e0:12:7c:
         46:a9:92:9e:05:1b:05:5c:97:17:d4:89:d9:75:c3:2e:43:67:
         9c:f8:cf:ee:45:b1:c3:b5:20:6a:c6:bc:99:c6:f7:d9:de:28:
         4e:ea:40:39:fe:67:f3:f2:8f:5e:6c:3c:ce:08:ee:da:1a:24:
         07:b3:65:81:db:74:a9:76:b0:bb:7a:7c:b5:d4:a3:49:94:5e:
         80:9b:67:87:f3:9a:32:e9:fb:17:8a:b6:90:ec:cd:db:fe:17:
         f1:99:1e:70:32:c2:bc:2f:4f:ab:5a:0d:bf:83:56:e7:73:4f:
         71:59:81:d5:b1:98:26:0d:d0:57:f3:da:30:38:7f:89:10:e2:
         e9:46:ba:2b:79:d2:46:f4:40:88:78:b5:d4:9a:0c:76:99:ba:
         63:34:46:1d:8a:cb:28:38:aa:43:db:77:c6:4f:97:74:ab:59:
         25:85:05:70:8a:fe:b6:b0:14:4d:e9:56:ad:6f:0a:bf:03:87:
         d0:ab:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:03:45 2025 by rpki-client