Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          f+i0ui6WWbb8aX3XMGtJRtTqdL5nvkUQYa3jM9RCl/A=
Subject key identifier:   C3:74:73:2D:77:44:F9:94:96:18:B9:EE:62:03:D5:DA:F4:E5:1E:24
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       01969FE401BE3481FFEF79C335A05FD88D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          01F5
Signing time:             Mon 05 May 2025 10:00:42 +0000
Manifest this update:     Mon 05 May 2025 10:00:42 +0000
Manifest next update:     Tue 06 May 2025 10:00:42 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: R89l75NJ0NHSaUxGl3sgasJqVj2KHM6WStdQCt71q50=)
                          2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:01:be:34:81:ff:ef:79:c3:35:a0:5f:d8:8d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: May  5 10:00:42 2025 GMT
            Not After : May  6 10:00:42 2025 GMT
        Subject: CN=c374732d7744f9949618b9ee6203d5daf4e51e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:79:15:dc:7e:23:ed:8e:57:67:4a:e2:ec:
                    cf:e5:6d:00:4b:75:a3:07:e4:27:66:44:a7:2f:5b:
                    6c:74:47:26:6b:c1:5a:71:de:8f:35:70:f3:17:e2:
                    9d:87:9d:69:6e:a6:36:ea:1d:c3:a4:21:62:b7:6a:
                    a3:d5:5c:2d:ca:45:d3:34:5b:44:3d:4f:49:ba:1d:
                    6f:d8:03:06:1f:b3:24:11:d5:e3:c1:83:c1:76:03:
                    e7:c8:da:42:71:23:b6:5d:fb:f0:e1:5e:ae:44:81:
                    6e:31:1b:a7:e5:2b:d9:a9:23:1e:00:0d:dd:83:6b:
                    c1:9e:0a:b2:d5:12:5d:94:28:a3:41:15:3e:e5:65:
                    b5:08:7a:7d:9c:03:3f:69:b0:09:b9:de:0a:fd:e7:
                    d5:ba:7a:db:36:5d:ab:e9:28:c1:9f:1a:cf:e7:de:
                    b5:ff:2b:b0:40:b1:9a:c5:1d:ab:c6:e2:38:29:21:
                    e7:06:bd:22:f1:75:3c:a9:57:06:b3:ad:a1:56:2f:
                    41:35:e7:dc:7e:8d:51:e5:b0:8a:07:5d:f0:79:87:
                    c2:3e:f0:9e:a1:96:84:c8:b9:9f:3d:01:5e:e4:f1:
                    d0:10:83:a6:82:b1:aa:2f:61:23:05:1b:1a:23:7a:
                    70:57:ee:75:cf:5d:e2:2d:41:07:d6:4d:1f:a5:a1:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:74:73:2D:77:44:F9:94:96:18:B9:EE:62:03:D5:DA:F4:E5:1E:24
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:29:7d:14:2f:63:f8:7d:8b:58:51:5b:00:86:d0:91:bd:e6:
         fa:72:55:31:60:bd:01:b6:bf:3a:35:db:eb:f6:08:7f:67:d3:
         91:f6:d6:9d:bc:96:2e:b4:76:62:ad:05:73:dd:42:4f:ec:e4:
         44:88:30:6c:c6:77:ee:eb:e5:ab:64:01:d0:6a:b9:2f:93:0e:
         d2:5b:7e:e4:3e:f4:d7:e1:12:fd:dc:76:ce:37:88:c0:14:87:
         74:b4:05:65:d6:b3:72:e4:6d:16:1e:fc:09:7f:0c:cf:92:ed:
         a3:bf:7e:8c:5a:4f:4c:82:46:9b:8f:13:07:83:21:a9:8d:bc:
         6e:4b:ea:ef:dd:ba:8c:d7:5b:dd:87:40:82:d6:ce:dd:e8:f2:
         ed:9b:d9:86:bf:e7:45:2b:1e:b6:1e:5e:67:2c:0c:05:d4:c9:
         e8:4f:77:75:cb:69:69:7e:7d:65:64:f4:cb:93:f2:53:45:85:
         c6:91:8e:6c:87:ef:47:42:d5:b3:db:85:ba:01:f3:23:e2:f8:
         30:34:01:d2:5b:70:2c:24:f4:e7:7d:22:67:01:5e:03:c1:a7:
         a9:19:7b:b5:7f:a9:a8:4f:c8:55:af:8c:17:7a:8b:ba:3c:cc:
         b8:b5:79:1c:f8:a0:9b:ab:71:b1:c6:0c:9d:74:96:14:44:42:
         b7:ad:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:52:24 2025 by rpki-client