Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          EZkZaNSpWMm/93V6btls27Kx5P/JuzcX+xHW3IjEpjM=
Subject key identifier:   24:7D:81:31:D9:F1:81:A4:21:36:E6:6F:6F:76:A3:54:0C:4C:9D:96
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       01984A415B623E1D873AA69A285DE95E349A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          0774
Signing time:             Sun 27 Jul 2025 05:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:53 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: FfvlcpHi6Q0wX/mRbfH8wwXzQlGMKovrWPGMOHh2oUI=)
                          2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:5b:62:3e:1d:87:3a:a6:9a:28:5d:e9:5e:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Jul 27 05:00:53 2025 GMT
            Not After : Jul 28 05:00:53 2025 GMT
        Subject: CN=247d8131d9f181a42136e66f6f76a3540c4c9d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:70:5f:69:35:d4:d4:cd:ab:0b:1b:02:17:
                    4c:f6:7a:94:c3:5a:66:f6:f7:74:cd:2d:4a:07:de:
                    cc:a2:00:3e:fc:70:26:82:2d:1a:d5:e2:d6:33:28:
                    a6:fa:63:70:d4:6e:52:76:c9:ad:2a:f5:86:3d:22:
                    7b:4b:68:51:64:33:af:15:08:c9:8e:18:95:5b:49:
                    c7:1a:03:f4:6c:65:fe:24:32:0a:70:bd:4d:ed:7a:
                    81:09:62:e3:eb:de:ca:6a:66:58:56:f0:61:bb:50:
                    80:6a:49:49:35:6b:5e:e3:dc:24:c0:a8:03:c5:b7:
                    ea:14:c2:a1:fe:b0:5c:e7:f4:f8:c5:2d:f9:f6:80:
                    6f:8c:f4:0d:f3:4d:e4:89:18:91:89:11:da:bc:5f:
                    38:9d:c9:f5:63:fb:cb:17:b7:b6:a1:0a:bc:d2:db:
                    ee:b4:ba:0b:a2:53:4f:02:41:1d:98:b1:6e:b2:04:
                    25:94:32:61:74:51:64:38:e7:87:e5:4a:99:0b:3d:
                    de:a6:ba:84:e8:2a:7a:28:63:05:24:36:21:a3:e8:
                    29:d4:de:c4:83:54:ec:94:58:00:13:f9:b0:de:ee:
                    f6:a7:8d:1f:4b:21:00:67:7f:60:8d:37:e2:29:02:
                    cc:df:cf:5f:1c:8b:8a:0a:f8:59:66:9c:27:7f:de:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7D:81:31:D9:F1:81:A4:21:36:E6:6F:6F:76:A3:54:0C:4C:9D:96
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:19:36:fa:95:d5:49:cf:f1:ae:a1:c4:12:4c:3c:68:62:
         c7:3f:4e:79:53:46:27:1a:ad:42:01:35:15:b8:64:ce:4e:ad:
         9b:35:cc:7f:0b:1d:09:5a:b9:ad:03:da:55:95:fb:89:cf:c0:
         a3:73:a7:95:8f:07:74:14:e7:14:a0:cd:65:ce:05:7b:b8:47:
         61:07:c2:e3:29:34:5e:1b:bd:6d:81:b4:56:46:86:2f:d5:84:
         e2:99:92:66:14:7e:4b:07:23:da:64:76:97:bb:19:d3:64:88:
         de:07:82:f5:55:62:e6:67:17:a4:f6:6d:de:83:03:8e:f3:df:
         8d:18:59:67:fc:fb:ed:9f:1a:c7:d4:cd:f1:08:53:03:c2:e2:
         0f:69:47:e3:cf:f0:40:85:1d:cb:82:5d:bc:a8:f5:7a:b4:59:
         ee:cc:33:fa:03:f5:46:11:fe:1f:5b:f9:37:2d:53:44:37:d8:
         47:4f:27:34:8c:fa:6c:4d:ed:f5:02:a5:20:0f:9f:ee:d4:37:
         9b:77:18:be:71:1d:e1:e8:a2:be:6b:7d:0c:c0:15:67:07:e9:
         54:af:f5:b4:ca:27:78:6b:54:d5:16:b9:26:21:83:8d:da:5e:
         fa:6b:05:fb:0c:a8:c5:99:4d:9a:26:20:69:d1:2f:b5:e6:25:
         ce:ba:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:05 2025 by rpki-client