Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          3kZ/n7c+UK2sMFNhMex28x6MJwvhGcZTKu+9R1utsTY=
Subject key identifier:   96:98:82:77:96:E6:58:21:1F:58:EF:88:DB:8E:A4:8E:8C:54:89:84
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       01984A40EA60DA18648FFB35DD06AC034E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          0732
Signing time:             Sun 27 Jul 2025 05:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:24 +0000
Files and hashes:         1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: RrLvxkr1NsSOsLqaBAXLWJHnAhjux+eDAvf/sU16tHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:ea:60:da:18:64:8f:fb:35:dd:06:ac:03:4e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Jul 27 05:00:24 2025 GMT
            Not After : Jul 28 05:00:24 2025 GMT
        Subject: CN=9698827796e658211f58ef88db8ea48e8c548984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:b9:db:53:2b:7d:95:bc:ca:85:95:8a:71:
                    2b:b7:ba:9b:34:36:90:1e:0c:56:3c:69:44:59:0b:
                    df:46:3c:b7:2b:5f:6e:b8:96:2b:d4:e3:ae:e1:10:
                    bb:af:b3:6d:5c:5b:9c:b0:70:42:22:d8:f7:c8:c7:
                    50:5c:cd:f6:af:a8:13:cd:2c:b0:ed:92:3d:3a:57:
                    80:40:ac:bf:50:fb:fb:29:01:ba:98:57:1a:82:53:
                    da:01:a3:5a:aa:99:67:e4:3c:26:d4:46:41:30:1a:
                    f4:e4:74:ef:3f:c8:66:95:ab:f6:e9:88:11:3a:fb:
                    25:a5:10:8f:1d:8f:56:e7:68:59:c9:23:42:b1:1b:
                    c0:80:7b:23:91:c5:de:78:3d:c9:70:e7:d7:be:bd:
                    dd:11:12:a9:4f:dd:b0:c7:9d:fb:ec:5e:14:16:d4:
                    2a:df:5d:16:38:a1:16:b9:2d:ff:66:13:18:a1:c1:
                    2e:90:5f:32:93:d7:4d:06:4b:8e:87:09:cc:e1:81:
                    f4:cd:8b:57:ff:d6:3d:21:c1:3d:72:ec:10:4c:2a:
                    c8:0a:a9:30:9a:90:17:92:27:5b:50:b0:aa:f8:0b:
                    4a:ae:2f:a8:4a:bf:ee:e2:36:4c:18:d5:a6:45:c9:
                    d2:0d:6a:57:af:df:a9:43:41:d2:2f:f3:f2:35:bd:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:98:82:77:96:E6:58:21:1F:58:EF:88:DB:8E:A4:8E:8C:54:89:84
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d0:31:8e:93:e2:6a:47:58:85:da:fb:ea:1a:f5:07:03:7e:
         d6:d4:7f:da:f9:a1:3f:1f:d2:7f:84:63:ed:6c:77:e4:2e:0f:
         e9:94:97:a6:fe:87:0f:e9:a3:ef:a0:fc:ab:0c:1f:65:24:32:
         65:c7:b5:73:c8:6c:25:22:90:8f:3f:66:6a:1b:5e:06:12:b4:
         6e:23:06:90:30:57:03:d9:47:b8:91:58:fa:44:56:0f:29:0d:
         ea:f8:53:d7:1c:c1:4f:a2:58:0b:ec:bb:d6:a7:f3:0f:bf:da:
         b6:42:ce:02:15:76:2b:26:35:ca:0a:18:5b:77:e1:16:16:8f:
         04:21:c3:a4:5d:c9:3f:05:ee:a2:68:18:ef:2e:2a:3d:f4:ec:
         21:84:da:82:0b:1b:c8:83:7e:e5:bc:f1:f8:d5:d2:42:fd:f6:
         ae:6c:aa:bd:27:27:01:0f:05:73:2e:77:d3:e7:7e:a2:73:15:
         40:bd:ca:db:31:e4:f7:c5:37:b8:de:26:5b:5f:57:28:9d:32:
         bd:91:7c:f4:04:4b:2c:63:5f:bc:61:70:2f:0f:3e:82:e1:e5:
         04:43:14:82:8a:b0:63:6f:dc:e9:3b:a4:04:93:d7:1f:83:5e:
         cf:9b:32:2f:90:cf:e4:6c:9b:fe:ad:d6:1e:15:f0:97:5d:67:
         0e:7d:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:11 2025 by rpki-client