Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          okxFc2ptSdTuMNTKXuQ9L99QRqQa3OnzUQilkxQNzdI=
Subject key identifier:   2B:C5:CD:FD:1E:6A:FD:3F:37:B8:32:99:0F:96:33:7E:A7:CE:DB:5E
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       019835A80AC1BAFE3F64984DFE816666A734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          040B
Signing time:             Wed 23 Jul 2025 05:01:01 +0000
Manifest this update:     Wed 23 Jul 2025 05:01:01 +0000
Manifest next update:     Thu 24 Jul 2025 05:01:01 +0000
Files and hashes:         1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: AK1Ul4a//cGwDcVrSqMmknLJbAU7vPMxbhvbb0DpQlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:a8:0a:c1:ba:fe:3f:64:98:4d:fe:81:66:66:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: Jul 23 05:01:01 2025 GMT
            Not After : Jul 24 05:01:01 2025 GMT
        Subject: CN=2bc5cdfd1e6afd3f37b832990f96337ea7cedb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:c2:4d:5a:cc:58:fa:66:50:3c:96:d6:9a:
                    0f:1a:41:52:02:da:8a:c4:8a:d8:6a:b8:b7:4e:9f:
                    36:b8:9f:dc:d2:86:5a:7f:1e:7e:36:cc:a5:82:52:
                    73:6d:11:20:f4:6d:65:dd:a9:84:a0:c5:c4:5b:a9:
                    62:1c:1e:99:e1:f3:cf:a9:c9:f2:5c:1c:9d:a8:2b:
                    d8:a3:1c:27:5f:2a:47:61:38:e1:b8:aa:af:11:1b:
                    8c:1e:b8:f6:41:6f:29:fc:50:e5:bc:6b:c4:4c:4c:
                    12:b4:c3:8d:7a:7a:46:45:4e:8a:d6:43:74:a2:89:
                    58:1d:73:15:3b:f7:d0:e7:8e:0a:90:64:45:ac:f8:
                    b1:69:e3:82:1e:bd:86:fc:e3:28:c4:e4:c3:5b:36:
                    0e:68:23:7a:ce:77:cc:20:55:47:f6:89:1c:c5:fe:
                    76:98:96:d2:f0:58:86:ef:3b:91:52:de:21:72:1b:
                    d5:58:29:0f:4b:84:cf:68:b0:be:5c:0b:df:82:75:
                    3e:06:f0:1d:53:1f:54:df:5b:0d:3d:41:2b:6d:ae:
                    fe:71:74:67:98:a7:ac:c8:35:62:cd:b5:cb:56:35:
                    0b:53:65:e4:fc:a6:54:ce:ba:50:38:9c:a5:71:3b:
                    b7:4f:87:4a:ab:59:e1:a3:61:3c:51:1f:bc:f4:a6:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:CD:FD:1E:6A:FD:3F:37:B8:32:99:0F:96:33:7E:A7:CE:DB:5E
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:37:71:e2:9c:bb:2d:bb:98:b4:b2:fd:e0:78:8e:af:17:c3:
         83:8d:16:50:eb:9e:a2:ba:a6:da:07:da:2e:85:25:0b:63:93:
         28:f7:53:01:8b:82:d8:90:47:8b:bd:72:0b:0d:3f:d3:3d:02:
         f0:71:dc:23:2f:3c:52:f4:09:55:f5:92:f5:2c:6a:6b:0b:3f:
         d5:f9:62:e7:49:36:e2:4d:fb:0a:ad:8d:86:30:c0:7d:87:96:
         67:35:69:7d:88:84:2f:0f:0a:1a:7c:1f:8d:60:fb:69:80:37:
         55:b9:fc:a8:79:98:80:6b:cc:db:d1:be:d3:bf:a0:f1:d9:b5:
         c0:a7:e8:5f:40:ff:d8:49:f1:1d:4a:8e:68:a6:6b:62:09:a3:
         ec:0c:e6:fe:52:a5:2a:a0:59:66:2b:51:81:0c:b0:42:9a:7d:
         7d:f9:67:23:6b:1d:a7:b9:76:46:9b:df:a2:a7:ad:76:91:e0:
         ba:ad:01:da:ee:18:9a:39:6d:22:55:79:3b:9a:99:bd:7c:a9:
         81:ff:00:a1:4c:bc:38:db:87:8a:b7:73:c8:3e:cc:95:52:21:
         9e:ed:ed:46:8c:7c:1d:e3:b0:83:5b:dc:23:be:a1:ba:92:8a:
         8a:48:11:4e:ef:d1:fb:ee:ef:3b:48:40:7b:f9:92:b0:3f:42:
         17:91:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:47:25 2025 by rpki-client