Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          2/w30IaQJ8I2705lX2VSdo+9zWqC7Kd0bUMQzdphXyQ=
Subject key identifier:   77:FD:CF:61:DE:58:FC:00:E8:44:FF:AF:14:CB:58:12:4D:90:2D:E9
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       0198440823BB1D3FC2E378599BB655CEC849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          10F9
Signing time:             Sat 26 Jul 2025 00:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 00:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 00:00:40 +0000
Files and hashes:         1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
                          2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
                          3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
                          4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
                          5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
                          6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: iB5M7pB7ApDgEn3Qz8iueLFQmNXR2FztGaUjzKVRldY=)
                          7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:08:23:bb:1d:3f:c2:e3:78:59:9b:b6:55:ce:c8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Jul 26 00:00:40 2025 GMT
            Not After : Jul 27 00:00:40 2025 GMT
        Subject: CN=77fdcf61de58fc00e844ffaf14cb58124d902de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:d0:51:d3:f1:99:5c:90:33:0d:f7:d3:6b:
                    83:64:58:26:c9:8a:60:4f:83:d9:8f:f9:54:50:3d:
                    4e:68:1c:5f:1b:18:17:50:9d:4e:22:11:97:a1:e6:
                    82:6c:5f:84:09:bd:a8:ce:a8:3e:ac:f9:fd:4b:98:
                    76:87:ff:4c:1d:e9:cd:90:c9:75:77:8d:ba:01:40:
                    0e:b3:4b:1d:94:19:28:23:d7:c5:60:d2:b3:f9:39:
                    ea:be:08:d1:be:a4:04:10:77:bc:37:13:20:19:48:
                    0a:a7:7a:36:7e:9e:83:22:e8:8d:40:f9:08:43:62:
                    94:e4:ec:d5:0f:42:f1:64:76:67:71:62:40:ee:64:
                    01:3d:32:75:c3:1c:5e:16:67:2e:a9:8a:ec:04:8e:
                    ea:b6:69:a2:40:f3:6d:6f:0a:af:2c:88:14:01:b9:
                    c9:85:d3:69:29:e1:87:6c:e1:17:33:e7:bb:cc:67:
                    91:7e:15:a2:9b:86:d1:be:56:86:47:3d:ae:28:b8:
                    42:c8:13:59:39:7e:6d:86:77:57:fd:be:00:8f:5d:
                    f7:b5:7b:50:6e:da:34:76:e2:80:c3:39:a9:f7:a9:
                    a7:78:6b:cc:18:15:e9:c5:90:de:30:2b:a9:e9:fd:
                    20:6a:ec:06:b5:3b:d3:ea:e6:a2:72:d4:69:3d:08:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FD:CF:61:DE:58:FC:00:E8:44:FF:AF:14:CB:58:12:4D:90:2D:E9
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:53:40:00:7b:0c:a3:2e:93:72:ec:fc:b7:2c:5b:f1:4a:d2:
         31:46:e3:55:7f:0c:54:3f:ae:22:5f:ea:44:64:a2:70:4e:4d:
         fc:4e:e9:14:e4:43:72:c5:e6:97:dd:56:45:91:d3:e7:91:58:
         0a:7b:b2:d8:44:73:3e:a4:0d:13:89:e0:33:47:97:6c:88:36:
         59:d1:61:7b:ed:c8:fb:1f:d1:00:1f:bd:2a:39:6c:4c:2a:c7:
         da:52:15:8a:0b:40:52:1c:f6:62:9b:a7:ff:26:15:f9:f7:31:
         f4:e5:d0:ba:16:51:3a:94:51:a4:d6:88:23:ed:0c:17:86:0c:
         e8:56:f5:82:01:90:48:01:5c:04:6e:8a:8b:f7:5f:3b:ee:a5:
         19:bd:b0:46:35:0c:16:12:22:d9:52:79:0e:d9:b5:e2:70:e6:
         7e:e5:dd:61:07:38:6b:ea:b2:62:89:f8:ec:66:b7:db:f7:36:
         30:5f:24:79:23:63:9b:43:72:d5:f6:13:01:40:54:7d:bf:cd:
         c8:f4:73:93:d1:c1:51:51:64:12:83:3f:4f:00:72:80:41:f9:
         3f:90:60:c5:32:1d:5a:a5:4d:4b:c5:9f:70:31:55:00:31:f0:
         fe:e5:c6:33:8b:36:d2:d6:85:c7:52:77:eb:ad:6b:a0:78:25:
         07:4e:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:05:39 2025 by rpki-client