Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          mijZwa6GIvTH3SytW5naZZdHRJrBszuo6IXdxcrMZkk=
Subject key identifier:   E6:AE:9B:FA:9A:A1:E6:05:92:A2:95:93:B4:BB:5A:68:AE:16:BB:E0
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       01983804DED4F6B5B966EE7C0974D7CF5D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0754
Signing time:             Wed 23 Jul 2025 16:01:39 +0000
Manifest this update:     Wed 23 Jul 2025 16:01:39 +0000
Manifest next update:     Thu 24 Jul 2025 16:01:39 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: etzHVRVGKqu+qlMFwYlNwWyFrLJftn39fM1cdUgnPfQ=)
                          2: IQXTtVHze1IXoXyJqdh9nwPWeHs.roa (hash: siOcI04XjEZl0t1nX+KyiRbWYR5EN6LmCvslwid92wA=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:04:de:d4:f6:b5:b9:66:ee:7c:09:74:d7:cf:5d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Jul 23 16:01:39 2025 GMT
            Not After : Jul 24 16:01:39 2025 GMT
        Subject: CN=e6ae9bfa9aa1e60592a29593b4bb5a68ae16bbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:21:9d:e2:72:88:46:95:0b:27:65:a7:e1:e5:
                    1f:93:6c:23:7d:5b:63:32:e9:4e:02:19:9d:6d:40:
                    1f:dc:b1:e3:62:c2:ad:ab:87:ca:1c:dc:d6:44:b5:
                    6b:ae:af:78:f1:ce:56:2e:b9:68:99:fe:fb:98:1f:
                    78:94:8c:c4:5c:84:39:70:88:64:a0:35:02:83:e4:
                    ec:9a:13:5d:0f:4f:91:62:d7:19:3a:79:9a:b3:ad:
                    4e:d2:31:ec:54:a9:c3:5d:7d:23:34:f5:33:2d:61:
                    b2:37:bf:94:b3:a0:d1:26:75:0e:65:5c:0e:fe:d1:
                    aa:ce:77:23:34:8d:51:8d:08:9e:05:ab:fc:d0:a8:
                    5e:5f:32:73:0e:28:52:4b:a6:3e:a0:64:c4:ae:cd:
                    30:2a:b1:37:d9:b1:a1:6c:fa:c8:3a:9d:52:ff:70:
                    00:ce:37:c7:53:f9:6b:ed:4d:7c:29:a7:55:9c:e7:
                    e7:45:8e:5a:52:19:8b:dc:94:09:42:30:71:77:3b:
                    84:db:ef:49:80:da:7f:00:1e:a9:c6:c8:95:bc:e7:
                    ba:78:6d:e2:98:f9:8c:13:6c:34:67:fd:d0:c4:75:
                    27:45:26:22:b5:a7:40:67:f2:b2:bb:6b:62:8d:e7:
                    d5:d0:92:e3:29:0e:1a:e1:e8:96:62:6a:65:5f:26:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AE:9B:FA:9A:A1:E6:05:92:A2:95:93:B4:BB:5A:68:AE:16:BB:E0
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:b0:cc:15:d4:14:21:c5:63:a3:6c:96:44:a1:4a:d4:c1:
         20:6c:90:91:1c:06:1a:e8:70:35:c8:de:8d:14:24:f9:67:26:
         d2:99:4c:65:f0:44:29:77:5b:0f:b2:2b:01:bf:e1:33:53:ed:
         49:25:d6:67:50:86:01:79:26:f8:c7:22:5c:03:f0:48:80:07:
         4f:c1:e0:c5:e9:a3:55:71:42:18:a1:f2:b1:6c:a1:b2:bc:06:
         6e:8f:71:30:5f:f6:88:04:4b:3f:9b:07:cd:c2:26:c0:2c:37:
         ca:8c:c0:6b:9b:ba:58:f9:c5:de:c9:bc:08:62:45:ab:dd:9d:
         a0:66:fd:c7:bc:06:07:82:df:21:af:76:b2:00:be:6e:e7:c1:
         d1:e2:db:0c:5e:12:5b:76:84:53:6d:c5:e5:d6:00:65:ab:85:
         c0:f2:fb:38:0b:c5:1f:8d:ce:4f:84:d5:39:00:9a:74:e9:3f:
         4e:10:49:5d:68:a6:81:4c:e4:19:a5:5b:52:e9:12:16:1f:2b:
         5f:7b:63:88:b3:de:1f:9c:d2:ec:4c:96:3a:fd:14:54:4d:a5:
         86:54:51:55:6c:ce:61:b1:7d:d0:a5:d4:cd:34:e5:c1:42:e4:
         5d:a2:aa:9e:18:53:8d:a4:b0:2b:25:87:83:60:12:04:d6:8c:
         b3:47:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:39:10 2025 by rpki-client