Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File:                     MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier:          U6ZofmqsZyw1IW0UKhassaYNEHWTtoTheUHE53f1TRQ=
Subject key identifier:   69:ED:BD:4F:0B:98:06:D9:FD:56:7B:8E:10:51:F8:36:76:11:18:4A
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer:       /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial:       0196CEE236571C1372E79FAB7FAFB0C694C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number:          04A7
Signing time:             Wed 14 May 2025 13:00:53 +0000
Manifest this update:     Wed 14 May 2025 13:00:53 +0000
Manifest next update:     Thu 15 May 2025 13:00:53 +0000
Files and hashes:         1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: pB6l9tBYu59MaO12IXVuNP58BZ69kl8cIEfw8tLcNWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:36:57:1c:13:72:e7:9f:ab:7f:af:b0:c6:94:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
        Validity
            Not Before: May 14 13:00:53 2025 GMT
            Not After : May 15 13:00:53 2025 GMT
        Subject: CN=69edbd4f0b9806d9fd567b8e1051f8367611184a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:c4:34:ab:7f:ec:31:b2:86:aa:d7:61:e4:
                    a1:64:65:19:00:e1:ba:a8:6b:23:8c:23:7d:5a:7b:
                    17:0b:8b:90:58:45:c7:7b:bc:7f:30:26:4c:64:bd:
                    48:01:a2:62:b3:9b:36:10:f6:21:af:41:74:52:36:
                    a4:20:28:06:10:fc:38:90:c6:f8:92:89:2d:4b:ba:
                    4c:0e:9b:36:bd:39:94:cc:52:34:3d:d4:31:73:f5:
                    ad:cb:0c:17:5e:1d:30:3d:93:c2:dd:d2:34:d9:52:
                    ca:59:42:3e:96:f7:21:c8:77:74:f0:6d:ef:6d:5c:
                    f5:14:41:dd:12:16:07:8e:e1:03:e1:ef:36:39:07:
                    e4:96:fc:73:b9:55:f0:11:cd:e4:e4:3b:78:da:ff:
                    4c:08:b5:47:55:47:f1:21:6d:56:71:ce:b9:8c:b7:
                    f8:fa:fb:4a:da:bf:e1:50:ce:26:ff:39:0a:72:e2:
                    50:48:9d:27:27:54:b6:dd:a7:94:88:60:5e:37:24:
                    36:b1:7a:a3:19:05:f9:59:0e:ca:dc:72:27:dc:45:
                    29:b7:aa:cf:1a:87:a1:17:23:23:0d:50:91:70:40:
                    9d:ef:7a:5f:88:26:6b:1c:34:9f:22:67:37:b4:04:
                    7f:95:1f:ff:23:3c:58:39:30:92:72:cc:8c:cc:82:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:BD:4F:0B:98:06:D9:FD:56:7B:8E:10:51:F8:36:76:11:18:4A
            X509v3 Authority Key Identifier:
                keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c8:e3:ca:af:14:f7:7b:e9:99:b6:a1:cf:ab:3e:7f:aa:af:
         1f:df:45:95:49:54:64:ac:11:9c:4d:e4:1f:83:ca:ee:04:68:
         aa:a8:19:c5:6a:95:d6:98:dd:05:ef:8f:a3:c3:5b:a6:15:ad:
         f5:cb:8f:ab:c6:9b:15:db:11:ec:4c:c2:5d:cc:ea:20:31:e1:
         08:b2:38:e6:7f:8a:e7:4d:fc:d1:3f:52:8d:26:e2:00:0f:b3:
         00:de:92:99:df:91:1f:98:16:88:67:1c:bf:69:57:48:f8:9f:
         b5:e8:a9:54:d2:3f:ca:a3:8c:00:ca:d0:63:fc:c6:4e:50:97:
         32:97:ef:f2:38:1a:18:c7:91:c3:57:4f:8b:cf:cd:bc:74:15:
         f7:c4:d7:a5:f2:ae:18:34:88:9e:3e:44:0b:57:c8:8e:b3:9d:
         86:79:e2:6e:59:50:dd:11:bb:1f:6c:c3:25:7b:93:0a:9c:a4:
         4f:93:4e:de:bd:1d:4b:7b:85:ab:4b:51:fe:6e:14:d0:51:86:
         df:a2:cf:87:06:fd:f9:09:72:0f:49:45:1e:b4:a5:fd:a4:1b:
         eb:02:ea:a3:fa:17:73:33:b4:d8:ba:51:5f:3a:ee:e0:00:32:
         1f:20:27:4d:79:d1:fc:11:bc:f0:06:f6:97:b1:78:ab:d8:b8:
         22:b8:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:03:58 2025 by rpki-client