Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File:                     mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier:          IhGtiPyzSlv1TVUEiFkqjUq0MK7cR8IjA4LTKM9wNoE=
Subject key identifier:   C5:E3:21:79:19:25:6C:6F:07:86:BD:1C:FB:92:E7:A7:69:22:9E:B6
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       019854FD195D04A4A94098DD2027B7E6C87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number:          0764
Signing time:             Tue 29 Jul 2025 07:02:09 +0000
Manifest this update:     Tue 29 Jul 2025 07:02:09 +0000
Manifest next update:     Wed 30 Jul 2025 07:02:09 +0000
Files and hashes:         1: 19FcmSsxW-HAmGMu8vNic8GlPVQ.roa (hash: A/x/ATh8VjymksFnyMMUZUGv4QdGRlkBRngH5oIt50M=)
                          2: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=)
                          3: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=)
                          4: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=)
                          5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=)
                          6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: /iyruI8GB5tI+TqbgdZihrOLytvMlwUyXtSc7gXvlWc=)
                          7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fd:19:5d:04:a4:a9:40:98:dd:20:27:b7:e6:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Jul 29 07:02:09 2025 GMT
            Not After : Jul 30 07:02:09 2025 GMT
        Subject: CN=c5e3217919256c6f0786bd1cfb92e7a769229eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:62:f0:29:34:16:60:1b:31:28:d0:45:61:
                    d3:56:c2:e0:ae:12:0d:c5:8c:dd:08:78:71:57:22:
                    9a:f1:a4:b7:cb:b4:79:b5:35:ca:75:47:6a:6d:25:
                    cc:c9:6f:5f:e1:2e:f1:e1:74:9d:3a:e9:63:ea:c9:
                    a2:44:e2:9b:5c:24:a6:b7:4e:43:42:7e:ea:7f:62:
                    14:df:f5:5f:49:e7:00:df:20:45:78:7b:9d:b8:3c:
                    0c:54:21:44:ff:20:7e:91:9a:4f:9b:22:12:37:e1:
                    52:24:8d:c7:3a:1f:8f:36:f1:f1:8a:81:a7:2b:47:
                    ae:8b:e6:d5:49:51:34:17:d6:93:98:89:3e:b8:fa:
                    06:14:48:a1:1a:a7:9e:36:92:e5:9d:21:a1:b9:95:
                    27:37:e3:aa:b6:56:3d:23:bd:18:dc:04:f1:9f:f4:
                    cc:5a:e2:e9:73:d7:ea:fd:4b:5c:18:ed:26:0b:40:
                    0e:76:93:4b:55:0d:c6:ae:1a:ce:36:02:d1:db:b1:
                    21:53:fe:bc:99:08:8e:45:8d:ba:22:32:8e:f5:0a:
                    19:35:b8:d3:c9:f7:ac:a4:32:21:4e:0b:c1:3e:d0:
                    fa:a5:8e:04:a7:ed:60:a8:c9:2b:6f:74:5c:a9:3e:
                    3e:8d:a3:70:69:f4:96:0f:82:19:51:8f:09:97:b1:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E3:21:79:19:25:6C:6F:07:86:BD:1C:FB:92:E7:A7:69:22:9E:B6
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:74:86:90:58:5e:2a:1f:1d:85:73:a2:b3:a4:5b:ab:52:58:
         d3:62:ba:ed:98:b7:3d:ed:b3:ad:90:5d:50:4c:1b:41:ad:3f:
         97:2d:43:60:43:0e:71:dd:c3:e2:1c:49:52:54:1e:d3:b3:69:
         02:d4:a7:41:93:90:6d:57:df:77:9d:d6:a5:f6:2f:ab:8b:6f:
         f6:cc:c8:b5:8d:74:92:ab:a5:66:bb:b3:9b:ba:be:c4:92:f5:
         66:cd:5a:85:20:21:d5:67:57:0f:14:80:54:a8:b9:8f:e3:71:
         da:a2:18:d9:63:53:9f:d6:d5:42:cb:93:49:c3:51:bd:3e:98:
         8d:5e:8e:17:14:20:c6:c6:ec:8f:30:63:71:28:0f:84:3b:c6:
         c0:64:01:0f:40:ed:f4:f6:ad:cf:7a:50:6c:49:dd:f2:a5:5a:
         34:0e:9e:46:6e:f7:23:2a:01:cd:a6:97:47:e1:f3:3f:09:31:
         6e:17:8e:f6:0e:b5:9e:e8:00:04:c0:8c:fb:93:7d:01:ed:b3:
         1a:c3:9d:cd:97:f6:a6:09:4a:9f:4a:2e:95:fb:d2:59:00:c5:
         c4:74:05:96:09:b7:47:34:8e:87:bd:f9:eb:ed:40:ad:2c:04:
         22:09:7f:57:78:ba:80:ff:61:85:6e:b6:c0:d6:bb:d9:e9:7f:
         b4:46:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:08 2025 by rpki-client