Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File:                     MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier:          9X9yUzcsICsI0f/ZHRHMVaq+u52Xn3f7WVhSIziBtrA=
Subject key identifier:   24:14:7C:70:0F:2E:39:C4:29:89:36:19:59:0C:7A:C5:E0:96:4E:A1
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer:       /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial:       0197B77BF8165604D10606066C79468E4D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number:          1286
Signing time:             Sat 28 Jun 2025 17:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:44 +0000
Files and hashes:         1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: OR08bNOmqKm0sPtOwwPvZpeEH18qIQOg0SOH66cC4Rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:f8:16:56:04:d1:06:06:06:6c:79:46:8e:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
        Validity
            Not Before: Jun 28 17:00:44 2025 GMT
            Not After : Jun 29 17:00:44 2025 GMT
        Subject: CN=24147c700f2e39c429893619590c7ac5e0964ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:f6:b7:9d:a7:04:18:52:65:47:6c:08:a0:
                    a1:71:a5:4d:29:e7:9f:5e:af:53:2e:fe:27:7b:f3:
                    59:e5:e3:3c:5a:ac:ed:70:b1:9a:91:03:fc:d7:de:
                    b3:d7:b0:f1:ba:29:6a:e8:74:89:13:e2:5b:0b:4a:
                    31:67:eb:97:79:fa:23:8a:dc:a6:5c:97:54:4b:e5:
                    56:8a:ed:bf:93:29:94:d6:33:00:ef:6a:32:ae:57:
                    49:cf:50:35:93:a9:b9:15:ec:05:b3:6a:94:bb:32:
                    7b:db:1e:0f:c9:44:a3:46:36:1d:3f:a2:15:27:21:
                    b9:1d:2b:db:3d:0f:9a:c4:c0:6b:43:5d:16:ef:4a:
                    74:d3:58:80:c5:0a:c0:33:6f:55:81:23:af:ff:b9:
                    30:dd:a8:3a:6c:e6:ed:38:c8:2f:a9:24:17:a7:69:
                    c9:95:b9:a3:58:00:58:83:30:25:97:be:c4:b6:0a:
                    62:4d:b2:cc:18:ae:e2:80:fe:ec:9e:f8:5a:98:d5:
                    3a:dc:48:52:d2:8e:40:45:11:1a:11:32:ba:34:9a:
                    98:79:f4:2b:d4:43:4a:67:3a:b3:98:6e:31:4a:89:
                    bd:a6:77:c6:63:74:30:15:09:d9:86:ef:ec:73:26:
                    84:40:1a:ba:5f:f5:ca:8a:a3:0c:c3:4b:89:18:55:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:7C:70:0F:2E:39:C4:29:89:36:19:59:0C:7A:C5:E0:96:4E:A1
            X509v3 Authority Key Identifier:
                keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0a:fb:1f:98:5e:d4:8c:12:8d:8a:82:6f:e9:ee:c1:a1:a5:
         87:2e:01:0d:f8:53:39:a7:1a:0b:05:48:a8:a3:87:78:f5:cb:
         84:fb:0d:07:82:02:39:a4:55:06:56:d6:8c:dc:4b:a3:5e:1a:
         fb:df:87:89:5d:8e:cd:1b:0a:c1:3b:88:f4:07:0c:b0:0b:89:
         03:90:59:f2:1e:c1:c0:4e:3c:20:90:37:ee:f0:68:7f:05:31:
         dd:26:fa:c3:09:a1:a1:21:d7:31:85:05:3c:53:00:0f:4c:89:
         28:6e:e8:eb:42:f9:80:ab:ea:a0:0d:a9:0e:17:1c:cd:93:8d:
         94:46:23:f7:57:aa:52:89:e1:b3:03:14:56:49:91:a5:6d:2c:
         72:d8:4c:41:9c:c1:1f:99:13:a6:b4:07:73:15:26:aa:5e:a3:
         bb:cd:ae:de:54:fd:93:6b:16:e2:f0:95:6c:77:09:23:88:70:
         4e:10:94:a7:5d:0e:44:4a:27:eb:ed:83:cb:91:55:44:41:9e:
         2f:29:ac:ae:09:f2:34:73:b1:a4:c4:31:5d:36:69:0d:d6:72:
         56:5c:30:d6:53:ad:39:27:5c:87:47:5e:71:21:24:2d:2c:39:
         9f:2a:3c:16:4c:10:ba:3c:02:31:d2:f1:72:a6:fe:a9:1f:c2:
         3d:00:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client