Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          bBXZYGo8lrWTn6yrXtD/PgfWnmgMvJ8B5lSFPDoMwu0=
Subject key identifier:   54:36:1A:D2:08:02:FC:7E:7E:25:F5:A2:C0:5D:00:37:9C:3A:7E:AC
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       0197B6A1ABC11480EC7D3F5F95481DE7A1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          0261
Signing time:             Sat 28 Jun 2025 13:02:17 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:17 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:17 +0000
Files and hashes:         1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
                          2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: HM2NcT4n52yji/3Nqng4EZNLwxZ/uHCwMsufd/4nr9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ab:c1:14:80:ec:7d:3f:5f:95:48:1d:e7:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Jun 28 13:02:17 2025 GMT
            Not After : Jun 29 13:02:17 2025 GMT
        Subject: CN=54361ad20802fc7e7e25f5a2c05d00379c3a7eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:a4:ea:cb:65:9e:8a:ad:50:9d:39:92:f0:
                    bb:e3:4a:ff:5a:a4:df:7f:91:00:e8:b3:62:3c:2e:
                    f3:d1:a1:c3:1e:84:06:8b:78:28:71:66:93:9c:9e:
                    81:94:8e:33:89:33:57:70:57:f5:9c:05:1d:e8:e4:
                    02:07:4a:7c:6c:cf:ea:24:02:db:b4:7e:4e:43:28:
                    7b:b1:25:65:e4:6b:5a:7b:b7:27:55:08:18:3e:77:
                    11:93:af:17:0a:86:8f:2d:3a:49:44:79:a5:39:3c:
                    ba:df:3b:00:f1:48:b9:0d:35:61:9c:83:d6:32:b4:
                    83:1d:48:2d:1a:03:45:96:29:90:ca:b3:bf:7a:15:
                    2f:3d:22:0b:f0:4c:cb:9a:c6:d0:5b:20:8d:52:fd:
                    00:0e:1c:9e:ed:bc:7b:cb:70:72:e4:4e:b7:08:f4:
                    03:df:0e:96:b7:3a:4d:10:d2:91:42:94:f0:91:81:
                    fa:26:91:dc:b8:14:be:85:b4:7d:92:65:c0:e4:c7:
                    7c:b7:cd:fc:ee:e6:b2:4d:17:ea:f8:dd:80:40:56:
                    3e:28:ab:d5:82:4f:d9:2e:9a:fc:43:95:6a:a2:54:
                    45:b5:4d:a4:40:71:fa:6f:8c:54:ae:1b:31:f3:68:
                    da:fe:06:81:3b:1a:07:17:2a:0d:6b:0f:b0:79:4f:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:36:1A:D2:08:02:FC:7E:7E:25:F5:A2:C0:5D:00:37:9C:3A:7E:AC
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:22:b6:d5:a3:60:1b:de:a2:06:ec:f0:20:ba:97:74:08:da:
         5a:4b:50:80:9c:99:cb:b4:11:89:64:2c:9b:53:c5:93:7c:42:
         10:a1:6f:38:7d:a9:82:84:12:21:30:44:9d:3c:15:11:54:be:
         7a:1f:55:a0:ac:e1:a5:59:89:17:ef:4a:52:85:a5:f1:d2:1a:
         ce:46:b4:df:a9:47:29:0b:19:a6:94:67:2b:bd:8c:36:67:75:
         13:61:b3:aa:73:91:2b:30:23:1c:57:ba:b0:30:19:e5:05:98:
         a8:c2:8e:57:cd:5e:e2:3f:b9:7d:43:d1:80:ae:8c:40:42:6c:
         61:69:3f:0b:09:78:ce:ab:32:7e:df:ea:25:5d:29:8d:43:51:
         76:44:a2:e8:7d:94:e5:38:e2:71:31:f7:c1:1b:5d:0a:71:4c:
         ca:35:1c:fb:ee:0b:fd:19:38:f3:61:b1:ba:25:9d:df:66:57:
         19:58:4b:c8:67:cf:e3:50:11:78:1d:f0:ec:f9:d2:27:b1:b7:
         7c:89:65:c8:c9:ef:77:d8:29:77:36:66:0c:68:35:fc:9a:14:
         31:24:e6:d7:0c:7b:af:ce:fa:6e:9f:db:d4:89:1a:c7:9b:68:
         16:d8:02:40:55:a6:b5:ef:05:63:f7:38:17:33:84:66:3f:2b:
         cd:35:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:43 2025 by rpki-client