Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          DbnJegGA+vJjyWGZdpbQ9r52u4PM7MRbqtSdEPydQcU=
Subject key identifier:   4E:EB:42:8F:42:69:B7:3A:63:33:9F:AA:56:9E:96:E1:38:AE:F2:E0
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       0198D5BC43098B7D2E537FC7822BBB0DC2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          031A
Signing time:             Sat 23 Aug 2025 07:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:21 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: 1RfEX2kdbE9f1jDwDhtK83aK4wBYCVY1XZ9v1gNvC0Y=)
                          2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:43:09:8b:7d:2e:53:7f:c7:82:2b:bb:0d:c2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: Aug 23 07:02:21 2025 GMT
            Not After : Aug 24 07:02:21 2025 GMT
        Subject: CN=4eeb428f4269b73a63339faa569e96e138aef2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:b6:e6:bc:6d:5c:e7:08:be:96:2e:f2:de:
                    64:6d:f8:ab:34:1b:4c:d1:3d:45:3a:7b:4c:26:80:
                    88:85:64:44:cf:a7:c3:2b:c6:51:19:0a:70:78:9c:
                    75:39:3f:33:4a:ef:91:17:66:60:71:4b:52:07:20:
                    b5:bd:8e:9d:5e:f1:82:5e:29:eb:f1:9a:97:d6:6e:
                    08:b3:7b:eb:09:8e:78:09:c4:8b:ee:91:25:5b:fd:
                    84:ad:c9:1b:6c:27:48:cc:c5:34:cb:29:67:44:c1:
                    db:ec:51:c9:75:ba:e2:ca:9a:3d:d2:89:30:1b:51:
                    04:92:91:99:5b:10:0a:c7:c2:e5:02:87:30:78:18:
                    e9:a1:b5:ff:2d:a8:dd:9a:56:f9:c6:32:95:b9:58:
                    49:52:35:15:8b:cb:82:bc:18:a7:73:a4:a0:5a:6b:
                    41:8e:92:15:17:42:41:53:6c:1c:e1:4b:6a:d3:e2:
                    67:af:18:49:a6:de:16:1a:b7:50:30:ce:2d:94:13:
                    86:4c:e3:f4:39:99:a0:0d:27:90:45:3d:58:fd:78:
                    3e:54:ed:93:e7:00:b0:c2:73:d0:ad:37:f2:9d:73:
                    66:33:17:a2:1b:a1:44:43:0e:75:24:5b:ea:c1:f6:
                    78:b3:13:b4:7f:44:4b:94:66:5e:7f:6a:39:52:46:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:42:8F:42:69:B7:3A:63:33:9F:AA:56:9E:96:E1:38:AE:F2:E0
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:84:fa:31:90:d1:b7:5d:01:0a:3e:01:a0:62:67:d2:48:d7:
         87:8f:76:a0:64:81:0a:80:91:f7:90:24:50:dd:7c:85:48:11:
         17:0c:6a:e6:2f:31:fc:f1:fc:5e:1a:d5:25:c7:6a:77:96:e5:
         cb:09:f3:15:df:41:7e:5e:cd:1e:cd:41:69:50:3f:c3:84:d3:
         44:25:6b:3f:71:b1:7c:bd:ce:f1:f3:d2:6f:ad:63:df:30:5b:
         d6:2f:1b:05:f2:e0:5d:ec:a1:8d:0d:b5:96:39:4f:27:a4:bb:
         d0:d1:d7:ef:ef:50:1e:69:5d:cf:a4:a9:fa:7c:c2:14:7c:e5:
         b4:b0:5f:06:ae:1e:5b:07:08:64:0c:45:d8:58:00:d5:a9:5f:
         13:c4:bc:aa:ab:b7:0b:9b:c0:4e:a8:02:9c:f8:a2:3b:c9:1d:
         7c:14:a8:e7:d4:2a:0a:dc:a6:44:19:0a:a5:d4:78:6f:74:b8:
         13:de:da:f8:d8:20:5c:1a:e0:26:29:42:fc:2c:07:08:61:cd:
         99:05:0f:a6:67:0f:28:62:01:be:cc:91:93:0c:98:73:cf:48:
         7e:e6:20:0c:d6:1f:e7:58:12:1c:7a:60:27:0f:43:27:58:dd:
         7f:43:05:d6:9e:e9:c2:b7:72:ff:12:80:8f:e2:8e:f1:50:62:
         55:b8:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:15 2025 by rpki-client