Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          w1GPBxOFx183b/ntve4sgu9t7dXCSl3jgorwkGpu/XE=
Subject key identifier:   91:73:30:1F:15:C9:AE:A3:5C:CB:8C:40:49:9B:F7:78:0C:10:5C:2E
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       019857C5BD7FCCCEA4B897E97442D4C8669E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0A9D
Signing time:             Tue 29 Jul 2025 20:00:33 +0000
Manifest this update:     Tue 29 Jul 2025 20:00:33 +0000
Manifest next update:     Wed 30 Jul 2025 20:00:33 +0000
Files and hashes:         1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: MWgbcV/i4mc9zHaZwTplzzob8x+wfoe4CjbegnZEsJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:c5:bd:7f:cc:ce:a4:b8:97:e9:74:42:d4:c8:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Jul 29 20:00:33 2025 GMT
            Not After : Jul 30 20:00:33 2025 GMT
        Subject: CN=9173301f15c9aea35ccb8c40499bf7780c105c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:95:d2:3c:ff:ea:d0:d6:a6:bd:12:94:4f:
                    66:86:08:26:71:6c:49:78:85:c3:f6:0e:51:91:58:
                    26:f4:9c:61:42:5c:8b:dd:02:ab:cf:2f:35:f0:4f:
                    8c:9a:45:72:ee:a7:b4:cc:bc:1e:a4:42:22:46:b5:
                    14:b9:95:bd:00:5f:ad:40:46:d5:20:0a:f3:07:0d:
                    54:3e:7e:8e:a8:1b:87:f8:25:48:7d:f5:09:d9:bb:
                    60:e7:1c:22:6f:ef:b8:55:89:30:d0:eb:83:b3:72:
                    9a:29:70:a0:e1:25:a7:b4:db:37:23:a6:71:8b:7b:
                    ae:80:9f:ba:a8:a0:5b:5b:02:de:12:ca:a8:94:b5:
                    24:ea:0c:2e:b0:02:9c:48:31:45:fa:74:18:5c:8e:
                    28:82:7a:90:86:3d:5a:07:ab:c3:52:3d:81:1e:f5:
                    87:6b:2a:89:99:fe:8c:7b:05:23:ad:a1:42:67:6d:
                    b8:86:2d:19:a2:06:76:0d:09:b9:ac:d7:51:a8:7b:
                    fb:16:bc:e4:33:ba:0b:bf:c7:1c:fd:1e:ca:55:8a:
                    13:61:cd:ce:c6:72:ce:0c:5c:98:36:b8:14:75:a0:
                    50:25:5d:52:c4:68:4a:f3:c2:a3:d5:8a:6b:55:b1:
                    a0:6f:f5:9c:65:9c:37:53:3b:aa:24:68:1e:ef:60:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:30:1F:15:C9:AE:A3:5C:CB:8C:40:49:9B:F7:78:0C:10:5C:2E
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:c1:a5:f4:56:cc:73:1e:a0:c6:e2:df:6c:6f:7e:33:45:
         65:a4:e2:c5:a9:c3:d4:b7:4a:0a:c0:76:a2:a6:b4:44:e1:cf:
         3a:14:50:49:e7:61:16:ed:50:c0:f2:9b:0d:4e:27:50:4e:25:
         ef:51:74:b8:3b:41:cd:9b:a2:4c:2e:2b:fc:31:4b:89:11:89:
         06:0f:29:fe:60:46:f5:39:e6:47:83:85:88:3f:01:60:b0:85:
         db:3a:a8:6a:6a:63:92:af:ba:58:42:d9:64:54:9e:59:2d:d0:
         9c:08:88:cb:94:d3:e4:c4:fe:eb:6d:94:b1:ed:c0:13:2b:0a:
         c2:92:ab:f7:81:04:cc:d0:c7:d5:65:40:c6:a6:7e:fc:12:e1:
         8b:99:90:38:e7:8b:43:7f:31:4c:89:38:5a:9f:d0:92:68:52:
         fa:e4:8f:24:8f:72:ea:6e:12:a6:97:22:1f:3e:84:60:a8:3f:
         80:fa:d8:6c:8f:f2:9e:5c:35:73:e1:3a:58:a5:54:62:1b:47:
         ea:c1:e8:2e:f9:6d:5e:2a:c5:92:be:17:62:e3:2c:46:de:1b:
         de:c3:65:5b:66:51:21:8b:6e:2a:0e:26:10:94:8a:25:59:c6:
         9b:02:d7:3a:3c:43:5f:20:57:2d:00:b2:05:02:05:ea:ca:8d:
         65:19:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:36:06 2025 by rpki-client