Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          W+XhklN8T6Rn7rMeyzceKNTpn25rPNts1yBsOjomYW0=
Subject key identifier:   CF:EF:A2:A4:D2:8F:D0:CF:68:B5:95:6F:9F:CB:03:59:8D:30:C6:41
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       0197B5FC1DCC4154EDBBF59BFD416F0EE8CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          0285
Signing time:             Sat 28 Jun 2025 10:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:28 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: 1EOXx1zeNYPURKYj8+Zr52feP8aK4DBGUTcNEThQfH4=)
                          2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:1d:cc:41:54:ed:bb:f5:9b:fd:41:6f:0e:e8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: Jun 28 10:01:28 2025 GMT
            Not After : Jun 29 10:01:28 2025 GMT
        Subject: CN=cfefa2a4d28fd0cf68b5956f9fcb03598d30c641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:c8:fd:ce:a5:33:25:b2:d8:4e:78:3f:c6:
                    c5:4a:ed:74:08:b5:8d:06:bb:b6:65:b5:c4:ec:f5:
                    c3:2b:43:ce:ce:ff:86:43:31:f9:93:c9:55:70:7d:
                    ba:16:26:d7:c8:e2:bf:70:cc:98:de:4f:a3:ac:b5:
                    22:de:c5:65:cd:cb:aa:8a:d9:26:5b:bd:8c:4b:2e:
                    5d:34:33:c4:b4:0c:bd:7b:c1:d3:ff:c4:8b:79:39:
                    91:10:fb:58:d6:11:ee:f5:1e:7e:27:e8:1b:5f:a5:
                    02:7e:c0:bd:19:73:da:d1:c3:32:a9:19:40:3b:8f:
                    14:60:4a:26:10:5e:23:6e:6e:fd:e9:9a:40:0e:e6:
                    c2:68:e1:f9:3e:2a:3d:1a:5e:ce:6b:a9:cb:c4:99:
                    bb:ad:24:d9:ed:41:95:a0:1a:91:18:41:a7:d0:00:
                    d9:e6:20:5f:24:8d:29:cd:5c:3f:3f:5a:ef:04:00:
                    91:51:cc:9e:67:c9:e1:3d:64:a1:f4:f5:dd:0d:55:
                    75:d9:83:5c:a2:38:b3:41:57:a1:e6:93:7d:bc:c9:
                    df:8a:23:ac:75:a1:18:54:0b:ce:b0:fc:d0:2a:3d:
                    9b:23:18:84:97:79:24:5b:24:97:a4:84:06:22:c0:
                    34:aa:da:53:c3:cd:92:23:cc:f2:bc:f6:8e:58:f0:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:A2:A4:D2:8F:D0:CF:68:B5:95:6F:9F:CB:03:59:8D:30:C6:41
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:f1:ac:ad:71:19:e2:bd:17:ae:09:22:5b:56:b0:1b:2b:
         e9:a9:6d:a9:33:43:20:a3:3c:29:56:ea:57:9a:8a:ee:91:29:
         03:e0:63:b8:e8:a7:5a:9a:2b:e9:41:f5:0f:e9:41:6b:e7:5c:
         95:b4:f9:a9:64:e6:0c:6a:64:a3:2d:5d:5d:4d:46:a7:c8:21:
         e6:49:c0:4d:d9:cb:30:17:7f:fd:18:05:ae:ef:af:b0:a7:60:
         86:ac:52:f3:67:9e:66:8b:20:69:59:00:9d:22:f6:87:72:40:
         3a:ad:af:0f:8c:69:d9:05:9a:a6:ee:7a:c5:37:6a:20:f5:bc:
         85:40:e1:7a:d1:44:c9:3b:25:8a:0d:ac:fa:8c:64:24:43:70:
         e6:96:12:29:af:50:0b:c0:da:85:7a:61:fe:cb:ea:21:67:91:
         a0:88:dc:67:54:2e:c5:ac:9a:f9:47:60:f5:2b:d0:37:d6:db:
         d3:be:fb:17:d0:df:dd:ee:44:94:6c:b6:01:90:61:8c:22:96:
         37:d6:f0:4c:d7:33:37:12:28:b1:1e:5e:50:dd:64:45:d0:14:
         a8:01:11:9d:7d:b2:b4:9f:6c:ef:73:f9:85:3e:93:a4:9f:eb:
         41:fc:cc:1c:16:c4:66:40:26:7f:b8:ed:c9:5d:25:0c:4d:24:
         74:8e:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:23 2025 by rpki-client