Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          N39vL3f9iIOlYgfH3awERbjLh8y8WQjANr/5W9bsllM=
Subject key identifier:   D9:C1:3D:9F:F8:0F:BF:A8:03:F7:F6:4F:EA:C2:6E:76:37:C7:C7:3F
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019844ACF50F4E05AB1AE854F2A0A7B397DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          064F
Signing time:             Sat 26 Jul 2025 03:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:42 +0000
Files and hashes:         1: 9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa (hash: ZMgX7WnteThsvsNnKSDN1aaNlfhZg64e4j4Ovh8Mbfo=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: ww8j/Q8t8IDmGmJ4mI/PZPmmnW7lS4dHNBpkms4rqxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:f5:0f:4e:05:ab:1a:e8:54:f2:a0:a7:b3:97:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Jul 26 03:00:42 2025 GMT
            Not After : Jul 27 03:00:42 2025 GMT
        Subject: CN=d9c13d9ff80fbfa803f7f64feac26e7637c7c73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:2d:af:de:3d:fa:31:13:5c:69:9d:8b:e5:
                    ec:06:f9:f7:9c:93:06:55:d8:7a:6e:d1:0f:08:9e:
                    3d:a3:ce:99:c0:bf:88:5a:04:f4:b3:26:1e:08:d0:
                    9e:d3:bd:ae:56:80:dc:33:3d:3c:c4:25:73:76:76:
                    4f:37:fe:ec:8e:ea:1e:9f:a4:ed:1b:5d:67:a4:dd:
                    ae:1a:2f:f4:37:f5:c8:b2:32:2f:55:b8:fb:d9:aa:
                    a3:21:93:79:c8:05:7e:37:76:20:5b:6b:0d:68:85:
                    b5:a7:38:f0:5b:bb:35:71:97:c2:ba:03:37:10:18:
                    ef:d1:8c:38:ae:4d:01:4c:ad:51:ca:01:b6:4a:c3:
                    f7:7b:6f:57:6f:b5:6b:f4:9d:2e:9e:a9:7e:3e:13:
                    37:5f:06:5c:ac:c4:3a:b2:3f:47:a5:8a:2d:ab:8f:
                    0d:c2:c9:cb:bd:54:66:c4:04:dd:db:f1:47:0c:1f:
                    3f:fc:3e:d6:ef:7a:7b:9b:d3:7a:07:c1:7d:c3:56:
                    34:ba:c2:24:31:c3:57:bc:4a:ef:d1:29:be:4c:e4:
                    35:6d:e8:d8:1a:42:4b:e2:49:d4:b6:3a:db:a6:0f:
                    76:c4:2c:57:b8:5d:bb:9e:a7:ff:9a:48:4d:1b:8f:
                    74:4a:1f:85:0d:af:58:37:88:aa:12:d4:00:58:44:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:3D:9F:F8:0F:BF:A8:03:F7:F6:4F:EA:C2:6E:76:37:C7:C7:3F
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:4f:e5:61:68:04:6e:a9:ca:b6:59:9d:29:7d:b7:0a:7c:
         fb:96:bf:c2:ba:54:d0:82:e5:16:78:3b:e7:82:97:d3:37:36:
         7c:54:0f:c7:7b:de:e3:c9:66:4a:c8:ed:a6:f8:d8:3a:52:6d:
         f5:a1:a6:9d:d6:bf:20:f6:cc:e3:1e:7b:b5:aa:43:4f:b0:89:
         82:af:dc:f1:a6:bd:79:0c:69:27:e8:72:0d:97:16:69:a5:95:
         31:9e:7a:29:b4:ed:ce:0c:bb:0b:43:22:34:bd:22:70:88:cf:
         d1:70:f7:8a:34:2b:c7:1f:9b:49:cc:16:d7:ff:0b:b4:97:e1:
         20:65:aa:e3:f8:92:45:4f:cd:fd:1f:ce:a2:0c:9d:31:14:51:
         85:7f:9e:99:c1:2d:02:df:a2:39:cf:77:c4:e1:c0:0a:06:e1:
         62:fe:3e:b4:92:ad:68:04:4a:06:ef:cb:7c:72:ce:6d:69:c0:
         2a:66:d1:14:71:74:e6:10:ec:ea:35:0f:ca:fc:16:df:4b:bc:
         d8:d1:7c:fa:32:de:e1:5d:2b:31:94:d8:7f:ba:f7:c2:8b:7e:
         29:32:82:3c:8b:67:6f:b8:98:28:7f:49:d9:fb:c1:85:0e:48:
         d1:1b:7e:5b:80:dc:ed:dc:77:d2:25:64:db:3b:14:b4:ae:1d:
         63:57:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:46 2025 by rpki-client